?EmicRoamDevsRaveagean@@YGXPC_W@Z
Static task
static1
Behavioral task
behavioral1
Sample
f8c8f977766071271fc73dd5b534bdd2b20ec53771547adbf7da61f448b14e9d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8c8f977766071271fc73dd5b534bdd2b20ec53771547adbf7da61f448b14e9d.exe
Resource
win10v2004-20220812-en
General
-
Target
f8c8f977766071271fc73dd5b534bdd2b20ec53771547adbf7da61f448b14e9d
-
Size
207KB
-
MD5
552eae04cc30164c9fdca1eace94f77f
-
SHA1
f88b7331e39be27acda28e1710b2a056dd85e8f7
-
SHA256
f8c8f977766071271fc73dd5b534bdd2b20ec53771547adbf7da61f448b14e9d
-
SHA512
ec5dacde29013fe91c8da96dbdac6aa8e367f7b203180461d4ed172505d6c487ca5fb0811e3ffb56fba2fc428d427aae80de822980c9bdbb74c09cca0291a128
-
SSDEEP
6144:aFcU77GgFIlEsiuHlrEQjHpWNjTvEy9eD:gB7FMEYFbjJgHEy9e
Malware Config
Signatures
Files
-
f8c8f977766071271fc73dd5b534bdd2b20ec53771547adbf7da61f448b14e9d.exe windows x86
22186d247046e66d30325fe7633f7a41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAppendA
PathIsPrefixW
kernel32
CreateSemaphoreW
CreateFileMappingA
GetConsoleScreenBufferInfo
SetCurrentDirectoryW
PostQueuedCompletionStatus
SetProcessWorkingSetSize
WaitForMultipleObjects
GetOEMCP
CreateIoCompletionPort
ScrollConsoleScreenBufferA
GetShortPathNameW
GetVersion
GetFileInformationByHandle
GlobalAddAtomW
GetPrivateProfileSectionW
GlobalReAlloc
IsBadCodePtr
GlobalMemoryStatus
lstrcpynA
DefineDosDeviceW
GetProcessHeap
FindResourceExA
FindNextVolumeMountPointW
GetShortPathNameA
GetStartupInfoA
OpenFileMappingW
SetFileAttributesW
GetTimeFormatA
CreateFileMappingW
CreateEventW
ContinueDebugEvent
GetDiskFreeSpaceExA
FileTimeToDosDateTime
EnumResourceNamesW
ReadConsoleW
CreateProcessA
lstrlenW
ResetEvent
CloseHandle
FindNextVolumeA
GetSystemTime
FindFirstFileA
VerifyVersionInfoW
GetStartupInfoW
MultiByteToWideChar
ExitThread
GetBinaryTypeW
lstrcatA
CreateFileW
WriteConsoleW
GetTimeFormatW
lstrcpynW
GetVersionExW
GetConsoleAliasExesLengthW
GetSystemWindowsDirectoryA
SetVolumeMountPointA
ReadProcessMemory
WideCharToMultiByte
OpenProcess
GetFileAttributesExA
GetQueuedCompletionStatus
GlobalAddAtomA
LoadLibraryExW
FreeLibrary
FindResourceW
SetErrorMode
GetSystemDefaultUILanguage
UnmapViewOfFile
lstrlenA
TryEnterCriticalSection
SearchPathW
CreateMutexW
GetThreadContext
WritePrivateProfileSectionA
user32
EmptyClipboard
CharUpperW
InSendMessageEx
SetClassLongW
GetWindowLongA
DdeCreateDataHandle
GetWindowLongW
OemToCharA
SetRect
GetKeyboardLayout
CreateDialogIndirectParamW
OpenWindowStationA
GetWindowTextA
LoadIconW
CreateDialogIndirectParamA
GetForegroundWindow
InflateRect
GetDC
GetUpdateRect
GetScrollRange
BeginPaint
DdeQueryStringW
SetRectEmpty
SendMessageA
CloseDesktop
EnumDesktopsW
GetClientRect
DdeUnaccessData
DdeGetData
CharLowerBuffW
CharPrevW
LoadStringA
DefDlgProcW
SetMenuItemBitmaps
GetSubMenu
GetPropA
DrawTextA
MsgWaitForMultipleObjects
DrawTextW
LoadImageW
IsCharAlphaA
GetKeyNameTextA
GetThreadDesktop
RegisterWindowMessageW
PostThreadMessageA
IsMenu
DestroyAcceleratorTable
GetUpdateRgn
InvertRect
DdeInitializeW
BringWindowToTop
DdeUninitialize
SetSysColors
GetClassInfoW
DrawIconEx
ArrangeIconicWindows
CopyRect
SetWindowTextW
FindWindowExW
DrawStateA
CharToOemA
ScrollWindowEx
CreateDialogParamW
TrackPopupMenuEx
FindWindowExA
CharUpperA
CreateDesktopW
MonitorFromRect
RegisterClassA
EnableScrollBar
GetMenuStringA
PeekMessageW
GetClipboardData
LoadMenuW
TranslateMessage
CharLowerW
DefFrameProcA
MessageBeep
ImpersonateDdeClientWindow
SetWindowLongW
EndDialog
SetWindowsHookExA
BroadcastSystemMessageW
GetCursorPos
LoadAcceleratorsA
SetMenu
LoadBitmapW
GetClassInfoA
ShowScrollBar
PostMessageA
wvsprintfA
GetKeyboardType
InsertMenuW
SetWindowsHookExW
AdjustWindowRectEx
MessageBoxW
RegisterClassW
DdeNameService
RegisterClipboardFormatW
CharToOemBuffW
EnableWindow
DialogBoxIndirectParamA
GetDlgItemTextA
DialogBoxParamA
UnpackDDElParam
MessageBoxExW
SetDlgItemTextA
GetScrollPos
GetKeyboardLayoutList
EnumDisplaySettingsW
DdeFreeDataHandle
OemToCharBuffA
GetWindow
IsCharAlphaNumericA
IsRectEmpty
gdi32
PathToRegion
OffsetViewportOrgEx
GetFontData
RoundRect
RectVisible
EnumFontFamiliesExW
SetViewportExtEx
FillRgn
PtVisible
SelectObject
CreateDCW
EnumMetaFile
SetAbortProc
PlayMetaFileRecord
CreateHalftonePalette
CreateFontIndirectA
CreateFontIndirectW
StartPage
WidenPath
GetTextExtentPoint32A
PlayMetaFile
GetTextExtentPoint32W
AddFontResourceA
MoveToEx
GetBitmapBits
BeginPath
CloseEnhMetaFile
GetTextExtentPointA
GetTextExtentPointW
DeleteMetaFile
BitBlt
GetObjectW
ScaleWindowExtEx
GetMetaFileBitsEx
RestoreDC
ole32
CoBuildVersion
CoInitialize
OleIsCurrentClipboard
Exports
Exports
Sections
.itext Size: 17KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 111B
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.union Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ