Static task
static1
Behavioral task
behavioral1
Sample
e08dd1a40df372f5f683ab4325aae35fcf135b12c38f71953d58c311b7e24351.exe
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
e08dd1a40df372f5f683ab4325aae35fcf135b12c38f71953d58c311b7e24351.exe
Resource
win10v2004-en-20220113
General
-
Target
e08dd1a40df372f5f683ab4325aae35fcf135b12c38f71953d58c311b7e24351
-
Size
358KB
-
MD5
c0a1db4048c8441a32556b799a376970
-
SHA1
d03fae699c007d6bb6302412c5865b691d6e531c
-
SHA256
e08dd1a40df372f5f683ab4325aae35fcf135b12c38f71953d58c311b7e24351
-
SHA512
b4d58bdd22a73446279320ec7ccda4bd637e90dc40f528655340c3a7d927949ae894a641fd36531e67917b9b539fb2a51ddfa963bad9ff848fdaed822f50b2e1
Malware Config
Signatures
Files
-
e08dd1a40df372f5f683ab4325aae35fcf135b12c38f71953d58c311b7e24351.exe windows x86
ed83444d51596a27dde716f3967b87c9
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateActCtxA
HeapUnlock
GlobalAlloc
GetModuleHandleA
InterlockedExchangeAdd
WaitNamedPipeW
GetLastError
GetPrivateProfileSectionA
ResetEvent
CancelDeviceWakeupRequest
EnterCriticalSection
LocalLock
WriteFile
SetFileShortNameW
WriteProcessMemory
OpenEventW
GetModuleFileNameW
SetConsoleTextAttribute
SetConsoleTitleW
AllocConsole
LoadLibraryA
VirtualAlloc
GetFileAttributesW
GetAtomNameA
HeapAlloc
lstrcpyW
GetSystemDefaultLCID
GetConsoleAliasW
GetModuleHandleW
CreateMailslotW
GetCPInfoExA
SetEnvironmentVariableA
CommConfigDialogW
GetConsoleAliasesLengthW
DeleteTimerQueue
GetFileAttributesExA
SetCalendarInfoW
HeapLock
CreateMutexW
WaitForSingleObject
lstrlenW
CreateFileA
SetEvent
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
HeapReAlloc
SetFilePointer
CloseHandle
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
user32
GetCaretPos
gdi32
GetCharWidthFloatA
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 180KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dadex Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.can Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.golisa Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xip Size: 512B - Virtual size: 346B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ