Static task
static1
Behavioral task
behavioral1
Sample
e396a39a8305b5815cbf04ed134d2eb49299d4cadf62e993e16b13a82870c4dc.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
e396a39a8305b5815cbf04ed134d2eb49299d4cadf62e993e16b13a82870c4dc.exe
Resource
win10v2004-en-20220112
General
-
Target
e396a39a8305b5815cbf04ed134d2eb49299d4cadf62e993e16b13a82870c4dc.exe
-
Size
310KB
-
MD5
496c2dd6dac1396461f891d5d5d7ccd8
-
SHA1
d6a5272045224990b033bf9353e6ff4702e657ec
-
SHA256
e396a39a8305b5815cbf04ed134d2eb49299d4cadf62e993e16b13a82870c4dc
-
SHA512
b200a4a1cec2b5e2d9b921a16cc034c4633f657c612446b7fce58ea8fb5c45dd9e984378ab8147bd23f6b7fd2df9d9d3e792c3370d4616d4067c581d6bb98317
-
SSDEEP
6144:BoSK59ghPqjfrNjVupuv34IfUbXtpm2Xku8IkZgptEn1KPXqLgLKaP09lE79:BdY0PgfrNJu2IIfUbXtpmg8IkemQXi6
Malware Config
Signatures
Files
-
e396a39a8305b5815cbf04ed134d2eb49299d4cadf62e993e16b13a82870c4dc.exe.exe windows x86
7b6d6cf404065cc0908a78aad9aa1788
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentActCtx
GetConsoleAliasesLengthW
GetVersionExW
GetConsoleOutputCP
GetDefaultCommConfigW
FindFirstFileExA
GetDriveTypeA
FreeEnvironmentStringsW
SetProcessPriorityBoost
FindNextVolumeW
SetCurrentDirectoryA
GetLongPathNameA
TlsGetValue
SetComputerNameExW
FindAtomW
BuildCommDCBAndTimeoutsA
VirtualProtect
GetModuleHandleA
GlobalAlloc
InitializeCriticalSection
GetCommandLineW
InterlockedDecrement
GetCalendarInfoA
CopyFileW
ZombifyActCtx
OutputDebugStringW
SetSystemTimeAdjustment
GetPriorityClass
WritePrivateProfileStringA
GetProcessHeap
GlobalWire
HeapCompact
GetStartupInfoA
GetDiskFreeSpaceExA
GetCPInfoExW
GetWindowsDirectoryW
GetSystemWow64DirectoryA
SetLastError
WriteProfileSectionW
GetCalendarInfoW
GetProfileStringA
SetConsoleCursorPosition
GetLastError
DeleteVolumeMountPointA
ContinueDebugEvent
ReadFileScatter
GetNumberOfConsoleInputEvents
GetSystemWindowsDirectoryA
GlobalFindAtomA
FindNextChangeNotification
CreateActCtxA
GetMailslotInfo
GetPrivateProfileIntA
_lread
InterlockedExchange
DefineDosDeviceA
SetVolumeMountPointA
EndUpdateResourceA
WriteConsoleW
GetPrivateProfileSectionA
WritePrivateProfileSectionA
GetPrivateProfileStructA
TryEnterCriticalSection
GetPrivateProfileSectionNamesW
GetFileAttributesExW
LocalFileTimeToFileTime
MoveFileW
GetVolumePathNameA
TerminateProcess
lstrcmpW
GetComputerNameA
FindActCtxSectionStringA
GetThreadContext
MoveFileExA
GetProcAddress
GlobalCompact
UnregisterWait
BuildCommDCBW
GlobalDeleteAtom
GetShortPathNameA
OpenEventA
SetCommTimeouts
WaitNamedPipeW
CreateIoCompletionPort
GetPrivateProfileSectionNamesA
FindResourceExW
GetSystemTimeAsFileTime
GetSystemInfo
FreeEnvironmentStringsA
OpenSemaphoreA
GetLocalTime
WriteProfileStringA
SetFileShortNameW
lstrcpyW
VerLanguageNameA
GetThreadSelectorEntry
GetSystemTime
UnlockFile
GetConsoleCP
GetConsoleAliasA
SetConsoleScreenBufferSize
GetAtomNameA
GetConsoleAliasExesLengthA
WriteConsoleInputW
CreateMailslotA
SetCommState
SetHandleCount
_lopen
GetConsoleAliasExesLengthW
ResetWriteWatch
ClearCommBreak
GetOverlappedResult
EnumDateFormatsA
GetModuleHandleW
WriteConsoleOutputCharacterA
HeapFree
OpenMutexW
GetStringTypeW
SetFilePointer
PostQueuedCompletionStatus
AreFileApisANSI
OpenWaitableTimerW
GetCurrentProcess
PeekNamedPipe
GetCompressedFileSizeW
FindNextVolumeMountPointA
GetFullPathNameA
WriteProfileStringW
InitAtomTable
GlobalAddAtomW
TerminateJobObject
SetFirmwareEnvironmentVariableA
GetBinaryTypeW
QueryDosDeviceA
LeaveCriticalSection
HeapSetInformation
CreateNamedPipeA
CreateFileA
InterlockedIncrement
Sleep
DeleteCriticalSection
EnterCriticalSection
RaiseException
RtlUnwind
MoveFileA
GetCommandLineA
HeapValidate
IsBadReadPtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
IsDebuggerPresent
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
CloseHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
ExitProcess
GetStdHandle
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetModuleFileNameA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
FlushFileBuffers
GetConsoleMode
DebugBreak
OutputDebugStringA
LoadLibraryW
InitializeCriticalSectionAndSpinCount
SetStdHandle
MultiByteToWideChar
GetStringTypeA
LCMapStringA
LCMapStringW
GetLocaleInfoA
LoadLibraryA
WriteConsoleA
user32
OemToCharA
advapi32
GetFileSecurityW
msimg32
AlphaBlend
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mojiya Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ