Static task
static1
Behavioral task
behavioral1
Sample
ee98323441ca3381d69a33417f4936ca51b9dc445aaf197ee8e2616b3d05d7a3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ee98323441ca3381d69a33417f4936ca51b9dc445aaf197ee8e2616b3d05d7a3.exe
Resource
win10v2004-20220812-en
General
-
Target
ee98323441ca3381d69a33417f4936ca51b9dc445aaf197ee8e2616b3d05d7a3
-
Size
428KB
-
MD5
75b4b80efea65366abf386fb37a99150
-
SHA1
c29c0c159b6205369da61bf809abaab90b927e53
-
SHA256
ee98323441ca3381d69a33417f4936ca51b9dc445aaf197ee8e2616b3d05d7a3
-
SHA512
c77cb5c519398a0a38aac96b92ae0e8d690796cde05d8a81f12685a478ab9b0dd33ef4139a2a8155be079539630ed90ddbaa2894e851dbcb8ddfe92b193904ee
-
SSDEEP
6144:oaCY3ugSygLn3u5wqvxRs0wrfXLmMlusGR+KHG2MCgQATjAAHkpRmiYEdAu25Jb:o/0ugS/3u5Dv7qXk9coQ5QZlBRx2Xb
Malware Config
Signatures
Files
-
ee98323441ca3381d69a33417f4936ca51b9dc445aaf197ee8e2616b3d05d7a3.exe windows x86
a3ceecafb21421c847947f3901ce342d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GlobalUnlock
GetConsoleMode
SetUnhandledExceptionFilter
GetStartupInfoW
IsDebuggerPresent
FreeEnvironmentStringsW
GetCommandLineW
GetEnvironmentStrings
SetEvent
GetStringTypeA
VirtualProtect
SetLastError
FindClose
SetEnvironmentVariableA
GetProcAddress
GetLocalTime
CreateProcessW
FindNextFileA
GetCPInfo
FreeLibrary
LoadLibraryExW
FindNextFileW
InitializeCriticalSection
InterlockedDecrement
SetEndOfFile
GetSystemInfo
DuplicateHandle
GetEnvironmentStringsW
LocalAlloc
TerminateProcess
FindFirstFileA
RaiseException
CreateDirectoryA
TlsSetValue
InterlockedCompareExchange
GetConsoleCP
GetModuleHandleA
GetVersionExA
InterlockedIncrement
FileTimeToSystemTime
lstrcpyA
GetCommandLineA
DeleteCriticalSection
GetSystemTimeAsFileTime
GetWindowsDirectoryA
GetConsoleOutputCP
MulDiv
LCMapStringA
MultiByteToWideChar
GetOEMCP
LoadLibraryW
VirtualFree
MapViewOfFile
CreateEventA
SetHandleCount
GetACP
FindResourceW
GetModuleHandleW
UnmapViewOfFile
WriteFile
HeapFree
GlobalLock
GlobalAlloc
GetProcessHeap
lstrlenA
UnhandledExceptionFilter
lstrcmpiA
CloseHandle
CreateFileA
FindFirstFileW
WriteConsoleA
HeapAlloc
GetStdHandle
CreateThread
HeapReAlloc
ReleaseMutex
HeapCreate
HeapSize
VirtualQuery
GetEnvironmentVariableA
GetTickCount
GetCurrentThreadId
DeleteFileA
CreateProcessA
VirtualAlloc
FormatMessageW
GetStringTypeW
GlobalFree
LoadResource
FindResourceA
LoadLibraryA
CreateFileMappingA
FormatMessageA
GetFileType
SetFilePointer
TlsAlloc
GetModuleFileNameA
GetVersion
GetFileAttributesW
CreateFileW
GetCurrentProcess
GetFileAttributesA
WaitForSingleObject
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetSystemDirectoryA
SetErrorMode
TlsGetValue
WideCharToMultiByte
CompareStringA
GetModuleFileNameW
GetTimeZoneInformation
lstrlenW
GetLastError
LCMapStringW
GetLocaleInfoA
SizeofResource
GetThreadLocale
ExitProcess
EnterCriticalSection
FlushFileBuffers
WriteConsoleW
LocalFree
InterlockedExchange
ReadFile
FreeEnvironmentStringsA
IsValidCodePage
SetStdHandle
LeaveCriticalSection
TlsFree
LockResource
HeapDestroy
user32
GetFocus
GetSysColor
DefWindowProcA
CreateWindowExA
GetSystemMenu
GetDesktopWindow
FillRect
ReleaseDC
GetSystemMetrics
BeginPaint
InvalidateRect
GetDC
GetClientRect
IsWindowVisible
EnableMenuItem
SetTimer
GetWindowRect
LoadStringA
GetDlgItem
EndDialog
SetWindowLongA
LoadIconA
GetActiveWindow
GetParent
PeekMessageA
DestroyWindow
TranslateMessage
ShowWindow
LoadCursorA
EndPaint
SetCursor
UpdateWindow
EnableWindow
MessageBoxA
SetWindowPos
ClientToScreen
SetForegroundWindow
RegisterClassA
CallWindowProcA
DispatchMessageA
ScreenToClient
GetMessageA
IsWindow
PostQuitMessage
gdi32
GetDeviceCaps
SetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
ole32
CoTaskMemFree
CoUninitialize
CoInitialize
oleaut32
VariantClear
SysFreeString
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExW
RegDeleteValueA
RegCreateKeyExA
msvcrt
_strcmpi
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_controlfp
_except_handler3
__set_app_type
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 342KB - Virtual size: 342KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ