Static task
static1
Behavioral task
behavioral1
Sample
b73ff85c2c3ac21315b4aa75cf79902b8d052d929448a29793fb525e22627a43.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b73ff85c2c3ac21315b4aa75cf79902b8d052d929448a29793fb525e22627a43.exe
Resource
win10v2004-20221111-en
General
-
Target
b73ff85c2c3ac21315b4aa75cf79902b8d052d929448a29793fb525e22627a43
-
Size
6.7MB
-
MD5
790349358b93b732be10c749b7b84d0a
-
SHA1
3f75fb3eafb920809ae8336c734a52863558cfca
-
SHA256
b73ff85c2c3ac21315b4aa75cf79902b8d052d929448a29793fb525e22627a43
-
SHA512
d12288a61f0e7bfab1685e006b3ae1edad95915074efc5a36598148a98061d8326151433fec2dbeee78bd1aa554fb90878e7d0b64701a1d36f11ea477eed3165
-
SSDEEP
196608:pAEU7GkEuTmEew5HyhNIetFNLuqfNWr3Op5C:pA8tuTmb3HNLuqVWr3A5C
Malware Config
Signatures
Files
-
b73ff85c2c3ac21315b4aa75cf79902b8d052d929448a29793fb525e22627a43.exe windows x86
97ab3011c3ed54f1561d353193e158b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
LoadIconA
CharUpperBuffW
gdi32
GetTextMetricsA
winmm
midiStreamStop
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
inet_ntoa
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 627KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 511KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.)@G Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
..W' Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
..%G Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ