Static task
static1
Behavioral task
behavioral1
Sample
e4c55dc882cf54a79a44eb8f4170e78dd9cc659d279419d8205382fd51724bf0.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
e4c55dc882cf54a79a44eb8f4170e78dd9cc659d279419d8205382fd51724bf0.exe
Resource
win10-en-20211208
General
-
Target
e4c55dc882cf54a79a44eb8f4170e78dd9cc659d279419d8205382fd51724bf0
-
Size
224KB
-
MD5
07373b24d644d8d5a69836738404a555
-
SHA1
10eadfbfafe5d3b0ee9cfcca062192be56b447a1
-
SHA256
e4c55dc882cf54a79a44eb8f4170e78dd9cc659d279419d8205382fd51724bf0
-
SHA512
9d220bed270853c1f0cde5384ece111908130f052bf7b5879c03fd129a11e1aaab5f49e5e867d141ea4bb7b72d353554a1c86a8b985bc7cf671af289a58dfae2
-
SSDEEP
3072:6v1XD+4Y6GZwzU5Tfxp95XM6tHbj+OkSPi7ZLhLw/JR9cReU3qT2O/dyowzg:mR+4PAVxp9dxLkStf9cTqTp/jws
Malware Config
Signatures
Files
-
e4c55dc882cf54a79a44eb8f4170e78dd9cc659d279419d8205382fd51724bf0.exe windows x86
146b4fc95dd0a91a86b403f3147a3d09
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadImageA
FindWindowExW
IsChild
MapVirtualKeyExA
GetUserObjectInformationA
DdeQueryStringA
CheckRadioButton
MoveWindow
GetClipboardFormatNameW
FlashWindow
ShowWindow
EndPaint
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
GetWindowModuleFileNameA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
ole32
CoInitializeSecurity
CoGetMalloc
OleDraw
CoBuildVersion
OleRegEnumVerbs
CreateItemMoniker
OleConvertIStorageToOLESTREAM
advapi32
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
GetConsoleMode
HeapReAlloc
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetConsoleCP
SetUnhandledExceptionFilter
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
VirtualAlloc
CloseHandle
CreateThread
EnumLanguageGroupLocalesA
WriteFileGather
LocalUnlock
CreateWaitableTimerA
GetPrivateProfileIntW
GetThreadContext
TransactNamedPipe
VirtualUnlock
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ