Static task
static1
Behavioral task
behavioral1
Sample
e9c5c6ab08dd86944a476acf7f0820e6d1960f06614a82ddc29f7258197a1e73.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e9c5c6ab08dd86944a476acf7f0820e6d1960f06614a82ddc29f7258197a1e73.exe
Resource
win10v2004-20220812-en
General
-
Target
e9c5c6ab08dd86944a476acf7f0820e6d1960f06614a82ddc29f7258197a1e73
-
Size
68KB
-
MD5
65dfee084ed40b03d5938f5a78dc2630
-
SHA1
db9454da0958687ecb6a33c0fec164cc1436d24e
-
SHA256
e9c5c6ab08dd86944a476acf7f0820e6d1960f06614a82ddc29f7258197a1e73
-
SHA512
cdd32351d1732cea4b46228dadd05d6506b0c6fc527b28563b090b88c8a6427909e649c0edba3b226e65ac77324a373582f34ab482e7be3e53da83734b1f0237
-
SSDEEP
1536:tgK/TO/g8GMn/ef410knNh8lddoyJT5YXHGjRbpaUNj:tG/xDefQAlddB5YXHubpHB
Malware Config
Signatures
Files
-
e9c5c6ab08dd86944a476acf7f0820e6d1960f06614a82ddc29f7258197a1e73.exe windows x86
9f4c6542128fba942a3b092c3a5337cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
SetWindowTextW
SendMessageW
DestroyWindow
DialogBoxParamW
DefWindowProcW
BeginPaint
EndPaint
PostQuitMessage
CreateWindowExW
LoadStringW
LoadIconW
LoadCursorW
LoadAcceleratorsW
RegisterClassExW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
kernel32
IsProcessorFeaturePresent
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
ReleaseMutex
CreateMutexW
TerminateThread
CreateThread
WaitForSingleObject
GlobalAlloc
FindNextFileW
Sleep
CreateDirectoryW
FindFirstFileW
FindClose
LoadLibraryA
GetModuleHandleW
lstrlenW
lstrcpynW
GetLastError
LoadLibraryW
GlobalSize
GetModuleFileNameA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
RaiseException
LeaveCriticalSection
EnterCriticalSection
gdi32
TextOutW
comctl32
ord17
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ