?EideVitamailHilivineus@@YGEIPCUtagMSG@@ACUDyedHaesBakealb@@H@Z
Static task
static1
Behavioral task
behavioral1
Sample
e115cdd3c32befaa61f05f45f31d538d0f602e99ed9d67589b71da342cf98965.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e115cdd3c32befaa61f05f45f31d538d0f602e99ed9d67589b71da342cf98965.exe
Resource
win10v2004-20220812-en
General
-
Target
e115cdd3c32befaa61f05f45f31d538d0f602e99ed9d67589b71da342cf98965
-
Size
218KB
-
MD5
00caeafb514a85f3da37dcc73ece9b77
-
SHA1
6df83d9c9585a21f5247855621b2c8bafd4f6b0e
-
SHA256
e115cdd3c32befaa61f05f45f31d538d0f602e99ed9d67589b71da342cf98965
-
SHA512
426029c7ad1489335d974e0932573dba2c667ef436a7c2e43bf3d7e55b8998e1c2363a8b37d3069e5e4c619990dbf9ee481c5d493c6d2a4c88ac12bb0145bd7a
-
SSDEEP
6144:orMwDiql8HuF37cXuzQ9uIRZESso0Q1n67Fi1qyx:ogrHs37cQQ9u5Sd67m
Malware Config
Signatures
Files
-
e115cdd3c32befaa61f05f45f31d538d0f602e99ed9d67589b71da342cf98965.exe windows x86
c32b617c3ca5446cd6431b4cfed6cb4e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlUnwind
shlwapi
PathAppendA
PathIsPrefixW
kernel32
SetCurrentDirectoryW
SetConsoleTitleW
GetFileTime
WaitForDebugEvent
OpenEventW
DuplicateHandle
GetPrivateProfileSectionW
TryEnterCriticalSection
GetLocaleInfoA
FreeLibrary
ScrollConsoleScreenBufferW
GetProcessHeap
GetWindowsDirectoryA
lstrcpynW
FindNextVolumeW
GetEnvironmentVariableA
GetACP
LCMapStringA
GetConsoleOutputCP
WritePrivateProfileStringA
CreateFileMappingW
DeviceIoControl
FindFirstVolumeMountPointA
WriteProfileStringW
OpenFileMappingA
SuspendThread
lstrcpyW
SetFileAttributesW
GetVolumeInformationW
FindResourceExW
SearchPathW
GetConsoleAliasesLengthW
LoadResource
SetVolumeMountPointW
ReadConsoleW
LoadLibraryW
GetConsoleAliasExesLengthW
LeaveCriticalSection
GetExitCodeProcess
EnumSystemCodePagesA
GetBinaryTypeW
FindFirstFileA
PostQueuedCompletionStatus
EnumResourceTypesW
OutputDebugStringA
OpenSemaphoreW
CloseHandle
DeleteFileW
lstrcpyA
SetConsoleCtrlHandler
GetTempFileNameW
CreateMutexW
FindFirstFileW
lstrcpynA
CreateProcessW
SetWaitableTimer
GetCurrentThread
ExpandEnvironmentStringsA
SetFileTime
EnumResourceTypesA
GetDriveTypeA
InitializeCriticalSection
GetPriorityClass
GetVolumePathNameW
FindResourceExA
FormatMessageW
GetFileAttributesA
SetConsoleCursorPosition
LocalReAlloc
ExitThread
GetStartupInfoW
GetPrivateProfileIntW
SetCurrentDirectoryA
GetStartupInfoA
GetLastError
MoveFileW
GetDiskFreeSpaceW
CreateSemaphoreW
MoveFileA
LockResource
user32
EnumDesktopsW
GrayStringA
ExitWindowsEx
FindWindowW
OpenInputDesktop
CharPrevW
AttachThreadInput
IsClipboardFormatAvailable
LoadBitmapA
SetForegroundWindow
PostMessageW
LoadImageW
GetClassInfoExA
wvsprintfW
TrackPopupMenu
ScreenToClient
TranslateAcceleratorW
CharLowerW
DdeSetQualityOfService
CreateDesktopW
DdeAbandonTransaction
ValidateRect
GetDialogBaseUnits
SetScrollInfo
MessageBoxExW
SendMessageW
CharToOemBuffW
IsWindowVisible
UnhookWindowsHookEx
FlashWindow
GetClassInfoA
EnumWindowStationsW
EnumChildWindows
SendMessageTimeoutA
PeekMessageW
SetUserObjectSecurity
SystemParametersInfoW
GetWindowLongW
EnumClipboardFormats
GetClientRect
GetMenuStringW
ReplyMessage
GetMessageExtraInfo
SetActiveWindow
GetWindow
SetCaretPos
BeginDeferWindowPos
ScrollWindowEx
IsWindow
IsHungAppWindow
IsChild
EnumDisplaySettingsW
TranslateMDISysAccel
GetClipboardOwner
LoadImageA
OpenClipboard
SetWindowsHookExW
SetMenuDefaultItem
RemoveMenu
PostMessageA
CreateCaret
EnableScrollBar
ShowWindow
DdeCmpStringHandles
GetDlgItem
SetScrollPos
GetClassInfoExW
PtInRect
DdeQueryStringW
CharPrevA
CreateMenu
DrawIcon
CharUpperA
CallNextHookEx
LoadCursorW
ReuseDDElParam
GetSubMenu
DialogBoxIndirectParamW
TabbedTextOutW
KillTimer
DrawTextW
DdeGetLastError
FillRect
GetWindowDC
PostQuitMessage
RegisterClassExA
CharUpperBuffW
wsprintfW
CreateIconIndirect
GetKeyboardLayoutNameW
GetCapture
LoadIconW
GetWindowPlacement
OpenWindowStationA
AppendMenuW
CharLowerA
PeekMessageA
CharUpperW
SetWindowsHookExA
BroadcastSystemMessageW
DestroyCaret
SendDlgItemMessageW
SwitchDesktop
SetThreadDesktop
wvsprintfA
GetKeyboardType
InsertMenuA
SetDlgItemTextW
SetClipboardData
EndDeferWindowPos
DrawFrameControl
SetMenuItemInfoW
SetDlgItemTextA
GetScrollPos
ModifyMenuA
CallWindowProcW
DefWindowProcW
GetMessageTime
mouse_event
SetFocus
gdi32
AddFontResourceA
CreateFontA
PtVisible
GetTextExtentPointW
CreateFontW
StretchDIBits
MoveToEx
DeleteEnhMetaFile
SetWindowExtEx
SetPaletteEntries
EnumFontFamiliesExW
GetObjectA
GetTextExtentPoint32W
WidenPath
SetBrushOrgEx
SetBkColor
RemoveFontResourceW
SetAbortProc
CopyMetaFileW
SetRectRgn
CreatePenIndirect
CombineRgn
SetMapMode
Rectangle
CreateMetaFileW
SelectPalette
CreateEllipticRgnIndirect
TextOutW
CloseEnhMetaFile
ScaleWindowExtEx
PatBlt
GetROP2
ole32
CoBuildVersion
CoInitialize
OleIsCurrentClipboard
Exports
Exports
Sections
.itext Size: 16KB - Virtual size: 15KB
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 140B
IMAGE_SCN_MEM_READ
.data Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mov Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.asm Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.call Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ