Static task
static1
Behavioral task
behavioral1
Sample
e7a4463d640fd20eed7e792e1fb1b76676ba280385805237f33ae51a114db199.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e7a4463d640fd20eed7e792e1fb1b76676ba280385805237f33ae51a114db199.exe
Resource
win10v2004-20220901-en
General
-
Target
e7a4463d640fd20eed7e792e1fb1b76676ba280385805237f33ae51a114db199
-
Size
203KB
-
MD5
6326724a91cc74a560f59c5ffb03d390
-
SHA1
e02d4347bbc26ac04828b5fb5399328fcd7e23bd
-
SHA256
e7a4463d640fd20eed7e792e1fb1b76676ba280385805237f33ae51a114db199
-
SHA512
df01975dc1b2c32e10bc9aed57f953bebebd66e716534929d947d4301ca91ce4a2aedb6d24430ba39ef7561e78a691520e723919b40854e573a03cd3509bc980
-
SSDEEP
3072:BtoqstpYkLBBlwi0wY7jG59/S03ToE5Z07jdPGuNnWl:DoqCyUP0kSSK7VGiWl
Malware Config
Signatures
Files
-
e7a4463d640fd20eed7e792e1fb1b76676ba280385805237f33ae51a114db199.exe windows x86
f217d242d873ad58da31fd6bbf45edaa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CallWindowProcW
EndDialog
SetFocus
GetDlgItem
GetSystemMetrics
SystemParametersInfoW
SetDlgItemTextW
SetWindowLongW
LoadIconW
ScreenToClient
GetWindowRect
CharUpperW
GetWindowLongW
wsprintfW
wsprintfA
MessageBoxA
GetKeyState
SendMessageW
wvsprintfW
KillTimer
GetSystemMenu
EnableMenuItem
SetTimer
GetWindowTextW
DefWindowProcW
LoadImageW
GetWindowDC
DrawIconEx
MessageBeep
SetWindowTextW
DialogBoxIndirectParamW
GetWindow
GetParent
GetClientRect
ClientToScreen
GetWindowTextLengthW
SetWindowPos
GetDC
DrawTextW
ReleaseDC
ShowWindow
ole32
CoCreateInstance
CoInitialize
dbghelp
SymGetModuleBase
StackWalk64
SymSetSearchPath
MapDebugInformation
SymUnDName64
SymGetLineFromName
ImageNtHeader
kernel32
CreateThread
WriteConsoleW
LCMapStringW
SetStdHandle
HeapSize
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
RtlUnwind
GetStringTypeW
IsValidCodePage
GetCPInfo
LoadLibraryW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
DecodePointer
ExitProcess
HeapCreate
IsProcessorFeaturePresent
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
HeapFree
CloseHandle
GetStartupInfoA
SetFileAttributesW
GetCommandLineW
SystemTimeToFileTime
GetLocalTime
GetExitCodeThread
WaitForSingleObject
GetModuleHandleA
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventW
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
SetEndOfFile
SetFileTime
ReadFile
SetFilePointer
GetFileSize
DeleteCriticalSection
FormatMessageW
lstrcpyW
LocalFree
SuspendThread
ResumeThread
TerminateThread
GetSystemDirectoryW
MulDiv
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetDriveTypeW
CreateFileW
GetVersionExW
GetModuleFileNameW
lstrcmpiW
SetCurrentDirectoryW
SetEnvironmentVariableW
GetTempPathW
GetUserDefaultLCID
GetUserDefaultUILanguage
GetOEMCP
GetACP
VirtualFree
VirtualAlloc
DeleteFileW
FindNextFileW
RemoveDirectoryW
lstrlenW
GetSystemTimeAsFileTime
lstrcmpW
GetStdHandle
WriteFile
lstrlenA
ExpandEnvironmentStringsW
CreateDirectoryW
GetLastError
GetFileAttributesW
FindFirstFileW
FindClose
CompareFileTime
WideCharToMultiByte
MultiByteToWideChar
Sleep
lstrcmpiA
FindFirstFileA
DeleteFiber
SetConsoleActiveScreenBuffer
PeekConsoleInputA
UnregisterWait
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.BSS Size: 4KB - Virtual size: 36.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ