Static task
static1
Behavioral task
behavioral1
Sample
eb7e728d91293d69af2502b55d5ba3da6beff1e24d52e80ff418462462c06f9e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb7e728d91293d69af2502b55d5ba3da6beff1e24d52e80ff418462462c06f9e.exe
Resource
win10v2004-20220901-en
General
-
Target
eb7e728d91293d69af2502b55d5ba3da6beff1e24d52e80ff418462462c06f9e
-
Size
622KB
-
MD5
48f4a09f869b92f7e50f477610f97d30
-
SHA1
df3d52eeafea09699d08adc40f522bd3637c3720
-
SHA256
eb7e728d91293d69af2502b55d5ba3da6beff1e24d52e80ff418462462c06f9e
-
SHA512
40c29a20c72f0392eeaf6c9a7fed938af0a64dcaaa68280c40ac02a69cf5733309f19dc504fbdcc55c7e85497c2026beb52746d4f0f4dc0455fded9ac6fb0aba
-
SSDEEP
12288:8sXthyY6CgQdnnpsBJ2DsvoTkmYUyPd5t2EB0NxDIBuOFe7/uT:8Idn9ovoTk3Pdj2DtIoOFdT
Malware Config
Signatures
Files
-
eb7e728d91293d69af2502b55d5ba3da6beff1e24d52e80ff418462462c06f9e.exe windows x86
2ae7bdbfeb6f6fb74af87f82ee86a4b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
sensapi
IsNetworkAlive
kernel32
GetTickCount
RaiseException
EnterCriticalSection
LeaveCriticalSection
lstrcmpiA
IsDBCSLeadByte
Sleep
CreateThread
CreateEventA
GetModuleHandleW
SetEvent
ExitProcess
FreeLibrary
FindResourceA
LoadLibraryExA
GetCommandLineA
FlushInstructionCache
GetCurrentProcess
SetLastError
LoadLibraryA
LocalAlloc
LocalFree
GetDateFormatA
SetFilePointer
CreateDirectoryA
GetTempPathA
MoveFileExA
GetTempFileNameA
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpA
MulDiv
ReleaseMutex
ResetEvent
CreateMutexA
GetVersionExA
GetEnvironmentVariableA
SetEnvironmentVariableA
WideCharToMultiByte
CompareStringW
CreateFileW
WriteConsoleW
FlushFileBuffers
SetStdHandle
GetModuleHandleExA
LoadLibraryW
GetConsoleMode
GetConsoleCP
LCMapStringW
GetStringTypeW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleFileNameW
GetStdHandle
GetTimeZoneInformation
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapCreate
GetSystemTimeAsFileTime
GetStartupInfoW
HeapSetInformation
VirtualQuery
GetSystemInfo
VirtualProtect
GetTimeFormatA
RtlUnwind
EncodePointer
DecodePointer
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
CloseHandle
GetModuleFileNameA
GetCurrentThreadId
lstrlenA
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
GetFileTime
InterlockedDecrement
lstrlenW
MultiByteToWideChar
FileTimeToLocalFileTime
GetModuleHandleA
GetProcAddress
CreateFileA
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
GetLastError
FileTimeToSystemTime
WriteFile
user32
UnhookWindowsHookEx
CallNextHookEx
GetDlgItem
SetForegroundWindow
SetFocus
SetWindowsHookExA
SetTimer
IsWindow
SendMessageA
KillTimer
UnregisterClassA
SendInput
ShowWindow
CharNextA
PostThreadMessageA
CharUpperA
GetClassNameA
LoadIconA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
GetWindowTextLengthA
GetWindowTextA
CreateAcceleratorTableA
DestroyAcceleratorTable
GetDesktopWindow
GetFocus
GetWindow
BeginPaint
EndPaint
FillRect
ReleaseCapture
CharNextW
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
GetClientRect
MoveWindow
GetSysColor
RegisterWindowMessageA
PostQuitMessage
CreateWindowExA
RegisterClassExA
CallWindowProcA
GetWindowLongA
DefWindowProcA
LoadCursorA
GetClassInfoExA
SetWindowLongA
SetWindowTextA
DestroyWindow
SetWindowPos
GetMessageA
gdi32
SelectObject
GetStockObject
GetObjectA
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
DeleteObject
advapi32
RegQueryValueExA
RegEnumValueA
RegSetKeySecurity
ConvertSidToStringSidA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegDeleteValueA
RegEnumKeyExA
RegSetValueExA
OpenProcessToken
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegGetKeySecurity
RegOpenKeyA
GetTokenInformation
shell32
SHGetSpecialFolderPathA
ord165
Shell_NotifyIconA
ShellExecuteA
SHGetFileInfoA
ShellExecuteExA
SHGetSpecialFolderPathW
ole32
CoRegisterClassObject
OleInitialize
OleUninitialize
OleRun
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoUninitialize
CoRevokeClassObject
CoGetClassObject
StringFromGUID2
CoAddRefServerProcess
CoCreateGuid
CoReleaseServerProcess
CoInitializeEx
CreateStreamOnHGlobal
OleLockRunning
oleaut32
SysAllocStringByteLen
GetErrorInfo
SafeArrayGetLBound
OleCreateFontIndirect
VarBstrCat
DispCallFunc
RegisterTypeLi
UnRegisterTypeLi
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringByteLen
SafeArrayGetVartype
SafeArrayCopy
SafeArrayDestroy
SysAllocStringLen
VariantCopy
SysAllocString
VariantClear
VariantInit
SysFreeString
VarBstrCmp
SysStringLen
SafeArrayUnlock
SafeArrayLock
SafeArrayGetDim
SafeArrayGetUBound
shlwapi
StrStrW
SHSetValueA
PathIsURLW
PathRemoveFileSpecA
PathAddBackslashA
StrToIntW
PathFindExtensionA
PathFindFileNameA
SHGetValueA
PathRenameExtensionA
PathAppendA
Sections
.text Size: 253KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE