Static task
static1
Behavioral task
behavioral1
Sample
e18457d640edde2ec7adf7adbae9d4cc6d3fd4774f9d4d69c9b7d3a5c34fdb6e.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
e18457d640edde2ec7adf7adbae9d4cc6d3fd4774f9d4d69c9b7d3a5c34fdb6e.exe
Resource
win10v2004-20220722-en
General
-
Target
e18457d640edde2ec7adf7adbae9d4cc6d3fd4774f9d4d69c9b7d3a5c34fdb6e
-
Size
6.5MB
-
MD5
1090fff2e77ef8af4bdad1a4247d98e8
-
SHA1
e03bc98212c50d408b357a62150baaed89d7d5bd
-
SHA256
e18457d640edde2ec7adf7adbae9d4cc6d3fd4774f9d4d69c9b7d3a5c34fdb6e
-
SHA512
71d42ddfb6e59b4e775465bc08bcbadc02fb62b57dc2b079ff7b9b09ea9b252697c86ab0e44c4aadc6e504866cdb199d9806a3837940b05ff771456c8ea03b66
-
SSDEEP
98304:z6X59DEGyJSj/dFZrn9tpUtQfgL9JTzoLt+Qa8qpux2J/4WU4dMjoCSykhbkF:CAJSDLty8M3RQZUJ/4R6uNSrkF
Malware Config
Signatures
Files
-
e18457d640edde2ec7adf7adbae9d4cc6d3fd4774f9d4d69c9b7d3a5c34fdb6e.exe windows x86
2beaa94915bcb42c131eff21a49712f8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
OpenSemaphoreA
LoadLibraryA
LoadLibraryW
GetModuleFileNameA
GetFirmwareEnvironmentVariableA
FindResourceExW
EndUpdateResourceA
WritePrivateProfileSectionW
GetPrivateProfileSectionNamesW
GetCurrentDirectoryW
CreateDirectoryExA
DefineDosDeviceA
GetFileAttributesExA
DeleteFileW
CopyFileW
IsBadStringPtrA
BuildCommDCBAndTimeoutsW
CreateSemaphoreA
GetDefaultCommConfigA
OpenJobObjectW
SetInformationJobObject
AddRefActCtx
QueryActCtxW
GetCalendarInfoA
SetCalendarInfoW
EnumDateFormatsW
GetSystemDefaultLCID
GetUserDefaultLCID
PeekConsoleInputW
AllocConsole
WriteConsoleW
SetFilePointerEx
HeapSize
DecodePointer
lstrlenA
lstrcmpA
GetMailslotInfo
PeekNamedPipe
GetSystemTimes
GetFileTime
DeviceIoControl
LockFile
FreeEnvironmentStringsW
TerminateProcess
HeapWalk
HeapAlloc
VirtualQuery
VirtualProtect
LocalFlags
LocalAlloc
GlobalUnlock
CommConfigDialogA
GlobalAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
RaiseException
RtlUnwind
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetACP
HeapFree
HeapReAlloc
LCMapStringW
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
GetProcessHeap
CloseHandle
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CreateFileW
user32
DlgDirListComboBoxW
CallNextHookEx
GetMonitorInfoW
advapi32
LockServiceDatabase
ChangeServiceConfigA
RegQueryValueExW
RegQueryMultipleValuesW
RegQueryValueA
RegOpenKeyExA
RegEnumKeyExA
RegCreateKeyA
RegCloseKey
GetFileSecurityW
GetPrivateObjectSecurity
GetSecurityDescriptorControl
AddAuditAccessAce
DeleteAce
MapGenericMask
ObjectPrivilegeAuditAlarmW
ClearEventLogW
RegisterServiceCtrlHandlerW
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.4MB - Virtual size: 42.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ