Static task
static1
Behavioral task
behavioral1
Sample
e94f82b6750e6a61ebe5ddd3aef42014a69f2af85c7975f6ac334c918c272500.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e94f82b6750e6a61ebe5ddd3aef42014a69f2af85c7975f6ac334c918c272500.exe
Resource
win10v2004-20220812-en
General
-
Target
e94f82b6750e6a61ebe5ddd3aef42014a69f2af85c7975f6ac334c918c272500
-
Size
102KB
-
MD5
69ed76fb952f96619cf1ab5aaffeb6f0
-
SHA1
5d5dfdc61ed372d86a2aff127a5030219c7e64e1
-
SHA256
e94f82b6750e6a61ebe5ddd3aef42014a69f2af85c7975f6ac334c918c272500
-
SHA512
90cacd9242c7c5b0b94983a47894266f9efb8f8fa0d2822a70f963f16d34e59a4452821a2f2bbfc10321bcbbe39abcf2ba2ae575f03a833b61590caf848ef71d
-
SSDEEP
1536:ClKdTiucKXYS58kT/kboONR4s8/+r9mtu/O8n1VjADcC7ti:wunH8kT/kboOvk/+Riu/O+PADXti
Malware Config
Signatures
Files
-
e94f82b6750e6a61ebe5ddd3aef42014a69f2af85c7975f6ac334c918c272500.exe windows x86
c46c6a7f4726fc1e46d744dc40103678
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
glu32
gluQuadricNormals
gluProject
gluTessEndPolygon
gluEndCurve
gluPickMatrix
gluBuild1DMipmaps
gluNewQuadric
gluSphere
gluOrtho2D
gluNewNurbsRenderer
gluTessProperty
gluTessEndContour
gluScaleImage
comctl32
PropertySheetW
ord14
FlatSB_GetScrollRange
_TrackMouseEvent
ord6
ord15
FlatSB_GetScrollInfo
FlatSB_SetScrollRange
FlatSB_EnableScrollBar
UninitializeFlatSB
DestroyPropertySheetPage
CreateStatusWindowW
FlatSB_GetScrollPos
advapi32
ReadEventLogW
RegLoadKeyA
OpenProcessToken
RegUnLoadKeyA
AdjustTokenGroups
RegEnumKeyA
OpenBackupEventLogA
AccessCheck
OpenEventLogA
ReadEventLogA
RegCreateKeyExA
RegEnumKeyExA
RegQueryMultipleValuesA
shlwapi
PathGetArgsW
PathIsRelativeA
ChrCmpIA
SHEnumKeyExA
SHRegGetBoolUSValueW
SHRegEnumUSValueA
PathRemoveBlanksW
SHRegQueryUSValueW
PathUnquoteSpacesA
kernel32
VerLanguageNameA
GetProfileStringA
GetPrivateProfileStructA
GetModuleHandleA
GetProcAddress
VirtualAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetLastError
SetFilePointer
InitializeCriticalSection
ReadFile
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
WriteFile
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
InterlockedDecrement
InterlockedIncrement
SetStdHandle
CloseHandle
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
version
VerFindFileA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
VerInstallFileA
uxtheme
GetThemeMetric
SetThemeAppProperties
GetThemeFont
GetThemeBool
IsThemeActive
IsThemePartDefined
DrawThemeText
GetThemeSysColorBrush
GetThemePartSize
GetWindowTheme
GetCurrentThemeName
DrawThemeEdge
GetThemeSysSize
GetThemeSysInt
GetThemePosition
usp10
ScriptStringValidate
ScriptStringFree
ScriptFreeCache
ScriptLayout
ScriptCacheGetHeight
ScriptBreak
ScriptGetFontProperties
ScriptJustify
ScriptString_pcOutChars
ScriptStringAnalyse
ScriptShape
ScriptTextOut
ScriptItemize
ScriptXtoCP
ScriptString_pSize
aclui
ord1
ord2
gpedit
ExportRSoPData
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ