Static task
static1
Behavioral task
behavioral1
Sample
e1ea58a5139b28f7e5f07917ee29d381.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1ea58a5139b28f7e5f07917ee29d381.exe
Resource
win10v2004-20220901-en
General
-
Target
e1ea58a5139b28f7e5f07917ee29d381.exe
-
Size
668KB
-
MD5
e1ea58a5139b28f7e5f07917ee29d381
-
SHA1
8cbbfaf15c9543313857b3c216e1ba7ad74ccfc1
-
SHA256
4411b4ddf8f33538d0cdf80d134cc7553aa23a1bdf71b31b8c45773fdfa92cc2
-
SHA512
f36bc17b3d94c4229dc7a69cd57a0d153610a42fa7664276ee2776f3902a09049a20cb78c182c2f05461803903276b52375b3d549e0b72d20b862b154d7d524a
-
SSDEEP
12288:eKPN1P4g5optKjDPZvcdJ0JyRxGXxpnXeycupP0VDsoKfnQ2koltYBNnTHL:LPcdJ0JyRSnNARO2t
Malware Config
Signatures
Files
-
e1ea58a5139b28f7e5f07917ee29d381.exe.exe windows x86
7950310320cfd81d79c5ad38984d04e4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
GetExitCodeThread
Sleep
GetLastError
HeapReAlloc
CloseHandle
RaiseException
CreateThread
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
GetTickCount
GetModuleFileNameA
SetLastError
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
GetCurrentThreadId
GetModuleHandleA
GetCommandLineA
MultiByteToWideChar
SetEvent
GetProcAddress
GetModuleHandleW
InitializeCriticalSectionEx
CreateEventA
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
SetStdHandle
SetConsoleCtrlHandler
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetCurrentThread
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
WaitForMultipleObjects
VirtualAlloc
HeapFree
WideCharToMultiByte
VirtualProtect
CompareStringW
GetTimeFormatW
GetDateFormatW
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
VirtualQuery
GetSystemInfo
LoadLibraryExW
FreeLibrary
WriteConsoleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
OutputDebugStringW
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
IsProcessorFeaturePresent
VirtualFree
LoadLibraryExA
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
user32
TranslateMessage
GetParent
UnregisterClassA
GetClientRect
GetDlgItemInt
SetDlgItemTextA
GetMonitorInfoA
MessageBoxA
GetWindowLongA
MapWindowPoints
SetWindowLongA
CharNextA
GetMessageA
EndDialog
DialogBoxParamA
GetActiveWindow
PostThreadMessageA
CharNextW
DispatchMessageA
CharUpperA
GetWindow
GetWindowRect
SetWindowPos
MonitorFromWindow
advapi32
RegDeleteKeyA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
ole32
CoRevokeClassObject
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoAddRefServerProcess
CoReleaseServerProcess
StringFromGUID2
CoUninitialize
CoRegisterClassObject
CoResumeClassObjects
CoInitializeEx
oleaut32
UnRegisterTypeLi
LoadTypeLi
RegisterTypeLi
SysAllocString
SysStringLen
SafeArrayDestroy
VariantInit
SysFreeString
VariantClear
Sections
.text Size: 301KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 298KB - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ