Static task
static1
Behavioral task
behavioral1
Sample
e3bd4cdd2dac1d0d6334b5224fc66031a79ce34143c774a7d804dff4ace6af05.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e3bd4cdd2dac1d0d6334b5224fc66031a79ce34143c774a7d804dff4ace6af05.exe
Resource
win10v2004-20220812-en
General
-
Target
e3bd4cdd2dac1d0d6334b5224fc66031a79ce34143c774a7d804dff4ace6af05
-
Size
482KB
-
MD5
4c6e802feae3ef5932aa4d3d473439b0
-
SHA1
c02456106374de39aac42eb9e6edb74272fa91a9
-
SHA256
e3bd4cdd2dac1d0d6334b5224fc66031a79ce34143c774a7d804dff4ace6af05
-
SHA512
7002d0a27b2a0e2d331b61713b12b1cb72f4d86442030cb528d0567108abb6783531d02cad120f06a7f2b2b40cff81be7929863581f1a7b3e8ee86aa67a7e573
-
SSDEEP
6144:LnGZQbzZopr1K0Rdi96DfOy6BCfTtP04/fAL8lTUi5NuvWGuhRh2fux:bGuvmrgc092MBuP04nALNHvWfhRh
Malware Config
Signatures
Files
-
e3bd4cdd2dac1d0d6334b5224fc66031a79ce34143c774a7d804dff4ace6af05.exe windows x86
eb80cb88c4c02c34718050aeff334a9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseFontW
FindTextW
CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
comctl32
ImageList_GetImageCount
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_Remove
ImageList_Write
ImageList_Destroy
ImageList_SetIconSize
ImageList_AddMasked
kernel32
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCPInfo
SetStdHandle
OpenProcess
GetDateFormatW
GetProcAddress
GetStartupInfoW
SetSystemTimeAdjustment
GetSystemTime
GetLocalTime
GetVolumeInformationW
QueryPerformanceCounter
LoadLibraryW
GetVersionExW
HeapFree
HeapWalk
CreateFileW
FreeLibrary
CloseHandle
LoadResource
CreateProcessW
VirtualProtect
GetModuleHandleW
HeapAlloc
GetTickCount
Sleep
GetSystemInfo
CopyFileW
DeleteFileW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetVersionExA
GetProcessHeap
LCMapStringA
LCMapStringW
RaiseException
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetTimeZoneInformation
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
GetCurrentProcessId
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
Sections
.text Size: 289KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ