Static task
static1
Behavioral task
behavioral1
Sample
e7debbcadbdb8753c059721d6a6adbdb502a02484295ba6f895f3bae6a6df7f6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e7debbcadbdb8753c059721d6a6adbdb502a02484295ba6f895f3bae6a6df7f6.exe
Resource
win10v2004-20220812-en
General
-
Target
e7debbcadbdb8753c059721d6a6adbdb502a02484295ba6f895f3bae6a6df7f6
-
Size
912KB
-
MD5
22e4622c428165e8cf5fc1e8085bcab7
-
SHA1
c7c83f922c3fbf40416284df9b1ab146ecd3a5cf
-
SHA256
e7debbcadbdb8753c059721d6a6adbdb502a02484295ba6f895f3bae6a6df7f6
-
SHA512
74c680e7245262db254b9326dadaa3dc516cf836328777d43d29e81d75935a1bf0bf86db56ae6d98309856db02fcaed012000e72c6dc694380aa38c5ce3cfc65
-
SSDEEP
24576:OejlhvUmYOi/JcAtBKTP2KX0rfUiu3/5Nu:O2mWWq3X0YBBQ
Malware Config
Signatures
Files
-
e7debbcadbdb8753c059721d6a6adbdb502a02484295ba6f895f3bae6a6df7f6.exe windows x86
2743880ecfb9706ea95416d6d0ffe246
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetClipBox
SetPixelV
DeleteMetaFile
SetRectRgn
BitBlt
PlayEnhMetaFile
AbortDoc
SetWindowOrgEx
StretchBlt
GetBoundsRect
CreateRectRgn
DeleteObject
GetDeviceCaps
SetPixel
CreatePatternBrush
GetViewportExtEx
GetViewportOrgEx
CreateRectRgnIndirect
Ellipse
SetMapMode
MoveToEx
GetTextFaceA
RoundRect
GetRegionData
Polyline
GetObjectA
EndDoc
SetWindowExtEx
EndPage
OffsetRgn
GetTextCharacterExtra
DeleteDC
StartPage
UpdateColors
GetFontData
Rectangle
GetTextMetricsA
comctl32
PropertySheetA
ImageList_GetImageInfo
ImageList_Add
ImageList_Read
ImageList_Destroy
ImageList_DragEnter
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_DragShowNolock
ImageList_Write
ImageList_GetBkColor
user32
GetCursorPos
GetMenuCheckMarkDimensions
SetWindowLongA
GetWindowPlacement
TabbedTextOutA
GetMenuStringA
MessageBoxA
CallNextHookEx
GetMessagePos
ModifyMenuA
GetKeyState
DefWindowProcA
GetActiveWindow
MapWindowPoints
LoadMenuA
WaitMessage
EmptyClipboard
GetWindowLongA
IsWindowVisible
DrawEdge
WindowFromPoint
OffsetRect
RegisterClassExA
SendMessageA
CopyRect
SetScrollRange
PostQuitMessage
SetRect
GetWindowTextLengthA
GetMessageTime
GetClientRect
LoadBitmapA
DestroyIcon
RegisterClassA
AdjustWindowRectEx
SetWindowsHookExA
UnhookWindowsHookEx
GetWindowTextA
SetActiveWindow
SetWindowTextA
GetDesktopWindow
GetCapture
GetSystemMenu
LoadCursorA
PeekMessageA
CallWindowProcA
InvalidateRgn
EndDialog
wvsprintfA
SetWindowPlacement
MessageBeep
SetCapture
DestroyCursor
GetSysColor
IsWindowEnabled
GetClassNameA
EnableWindow
SetTimer
KillTimer
DestroyMenu
GetClassInfoA
SetWindowPos
GetDlgCtrlID
ReleaseCapture
SetFocus
SetParent
IsWindow
SetRectEmpty
LoadIconA
GetSystemMetrics
GetMessageA
PostMessageA
DefDlgProcA
LockWindowUpdate
DrawFocusRect
GetWindowRect
CheckMenuItem
LoadStringA
CreateAcceleratorTableA
GetMenuItemInfoA
FillRect
kernel32
LoadLibraryA
TlsSetValue
SetLastError
CreateMutexA
GetVersionExA
GetConsoleCP
GetLastError
RtlUnwind
GetTickCount
IsDebuggerPresent
MultiByteToWideChar
SetConsoleCtrlHandler
TlsFree
GetCPInfo
LCMapStringW
GetFileType
GetCurrentThreadId
HeapFree
GetCurrentProcessId
SetEnvironmentVariableA
CompareStringA
GetStringTypeW
DebugBreak
SetStdHandle
GetCommandLineA
HeapCreate
GetProcAddress
CompareStringW
FreeEnvironmentStringsW
QueryPerformanceCounter
GetTimeFormatA
GetTimeZoneInformation
LeaveCriticalSection
VirtualQuery
GetModuleFileNameA
CreateFileA
TerminateProcess
GetModuleHandleA
GetConsoleMode
RaiseException
GetModuleFileNameW
ReadFile
OutputDebugStringW
IsBadReadPtr
HeapReAlloc
UnhandledExceptionFilter
GetProcessHeap
GetEnvironmentStringsW
GetStringTypeA
GetEnvironmentStrings
GetOEMCP
WideCharToMultiByte
WriteConsoleW
SetUnhandledExceptionFilter
InterlockedExchange
SetFilePointer
TlsAlloc
InterlockedDecrement
GetConsoleOutputCP
VirtualFree
IsValidCodePage
HeapDestroy
GetLocaleInfoA
LCMapStringA
GetStdHandle
GetSystemTimeAsFileTime
OutputDebugStringA
EnterCriticalSection
InterlockedIncrement
HeapAlloc
GetCurrentProcess
GetACP
FlushFileBuffers
ExitProcess
GetStartupInfoA
SetHandleCount
CloseHandle
WriteConsoleA
WriteFile
LoadLibraryW
VirtualAlloc
DeleteCriticalSection
TlsGetValue
HeapValidate
InitializeCriticalSection
GetDateFormatA
FreeEnvironmentStringsA
winspool.drv
ord204
DocumentPropertiesA
OpenPrinterA
Sections
.text Size: 224KB - Virtual size: 223KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 504KB - Virtual size: 501KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ