Static task
static1
Behavioral task
behavioral1
Sample
e092f7dc75598253b2df2bb9bbea241b29e84bed5e17a2949b168c2f6b4af7e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e092f7dc75598253b2df2bb9bbea241b29e84bed5e17a2949b168c2f6b4af7e8.exe
Resource
win10v2004-20220812-en
General
-
Target
e092f7dc75598253b2df2bb9bbea241b29e84bed5e17a2949b168c2f6b4af7e8
-
Size
189KB
-
MD5
3450ed060c656b01f6c75df2dc419fa4
-
SHA1
0ac7aa32ea1cf786938670f464f39ffc5965c49a
-
SHA256
e092f7dc75598253b2df2bb9bbea241b29e84bed5e17a2949b168c2f6b4af7e8
-
SHA512
8c533b22f06d93f9fef3f5da6d08789d8f5fd08427c1b0834ab245d78a80d0d02cea0a1b70959566036c84c14da8000270efc0901e97e043b97d981b7ba2bca8
-
SSDEEP
3072:0XN0XAxm4QiaRgI7S4m7SjTJos5nG5ijVIF6ez7pknQ2O:0XN0XAxPmRg8S4m+j+s5GUjVFez7KQ7
Malware Config
Signatures
Files
-
e092f7dc75598253b2df2bb9bbea241b29e84bed5e17a2949b168c2f6b4af7e8.exe windows x86
4ff6cf92ab9d509d708b8e92b7eb8cf6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceA
GetDriveTypeA
RemoveDirectoryA
DeleteFileA
CreateFileA
FindClose
FindNextFileA
FindFirstFileA
GetFileAttributesA
CreateDirectoryA
MoveFileA
GetTickCount
GetCommandLineA
TerminateProcess
OpenProcess
GetSystemDirectoryA
GetVersion
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
CompareStringW
CompareStringA
SetErrorMode
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFullPathNameA
SetStdHandle
GetStringTypeW
GetSystemInfo
InterlockedDecrement
InterlockedIncrement
FreeLibrary
LoadLibraryA
GetModuleFileNameA
SetEnvironmentVariableA
CreateMutexA
GetLastError
WaitForSingleObject
ReleaseMutex
CloseHandle
WritePrivateProfileStringA
WinExec
CreateProcessA
GetCurrentProcess
MoveFileExA
GetWindowsDirectoryA
GetVersionExA
GetProcAddress
GetShortPathNameA
GetStartupInfoA
HeapAlloc
HeapFree
HeapReAlloc
GetFileType
SetFileAttributesA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
WriteFile
GetStdHandle
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
Sleep
HeapSize
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetStringTypeA
MultiByteToWideChar
SetEnvironmentVariableW
user32
CharPrevA
CharNextA
GetSystemMetrics
SetWindowTextA
LoadIconA
SendMessageA
BringWindowToTop
SendDlgItemMessageA
InvalidateRect
UpdateWindow
EndDialog
SystemParametersInfoA
GetParent
GetWindowRect
SetWindowPos
IsWindow
CreateDialogParamA
GetSysColor
MessageBoxA
ExitWindowsEx
FindWindowA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
PostQuitMessage
KillTimer
SetTimer
PostMessageA
DefWindowProcA
advapi32
RegEnumKeyA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueA
RegQueryValueA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
gdi32
SetBkColor
DeleteObject
CreateSolidBrush
SetTextColor
comctl32
ord17
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE