Static task
static1
Behavioral task
behavioral1
Sample
e8bd516809064381853632c8383e92341c50d76b22345f42ecdc50c34f14a585.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e8bd516809064381853632c8383e92341c50d76b22345f42ecdc50c34f14a585.exe
Resource
win10v2004-20220901-en
General
-
Target
e8bd516809064381853632c8383e92341c50d76b22345f42ecdc50c34f14a585
-
Size
1.3MB
-
MD5
2cfd5de26a3c5bada8c5b107681c7d4d
-
SHA1
515f2d0823f96e2b1a991602d200c5d735251440
-
SHA256
e8bd516809064381853632c8383e92341c50d76b22345f42ecdc50c34f14a585
-
SHA512
1b5ca50b4c6e89e26c1c3381998d11e4954d04adb78ce337010c8190c3e652f52242c43ba9ee0d7e07ef70dee3b569367095c539686388ffeb13b53756505007
-
SSDEEP
24576:ZqkkvFevFFtkTRNVUoaj9c9XTKVLrMcUkVqIXW/UHfI2594pnpKulEA:ZJk9dT9M9+XeVE7kVqIXW/UHfIa4pnDB
Malware Config
Signatures
Files
-
e8bd516809064381853632c8383e92341c50d76b22345f42ecdc50c34f14a585.exe windows x86
3fdb557862dec05f7134f69913ee6762
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
SetHandleCount
GetStdHandle
GetFileType
WideCharToMultiByte
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapSize
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetUnhandledExceptionFilter
InterlockedDecrement
InterlockedIncrement
SetStdHandle
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
IsBadReadPtr
IsBadCodePtr
CreateFileA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
DeleteCriticalSection
InitializeCriticalSection
FlushFileBuffers
WriteFile
GetLastError
RaiseException
GetVersion
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
TerminateProcess
ExitProcess
SetEvent
GetModuleFileNameA
GetTempPathA
Sleep
GetTickCount
GetModuleHandleA
WaitForSingleObject
CloseHandle
CreateThread
FreeLibrary
LoadLibraryA
GetProcAddress
GetEnvironmentStringsW
MultiByteToWideChar
user32
GetWindowRect
DefMDIChildProcA
DefDlgProcA
ShowWindow
SystemParametersInfoA
SetWindowPos
PostQuitMessage
SetWindowTextA
SetForegroundWindow
MoveWindow
CreateWindowExA
DefWindowProcA
SetWindowLongA
LoadIconA
RegisterClassA
MessageBoxA
GetClassInfoA
GetParent
BeginPaint
EndPaint
ReleaseCapture
SetFocus
DrawTextA
IntersectRect
IsRectEmpty
LoadCursorA
SetCursor
SendMessageA
SetCapture
GetScrollInfo
ScrollWindow
SetScrollInfo
GetWindowLongA
GetSystemMetrics
PostMessageA
GetClientRect
UpdateWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
SetTimer
KillTimer
DestroyWindow
FillRect
GetDC
ReleaseDC
InvalidateRect
ShowCursor
gdi32
RealizePalette
DeleteDC
StretchDIBits
SelectObject
CreateCompatibleDC
CreateDIBSection
SetStretchBltMode
SetROP2
PatBlt
LineTo
MoveToEx
CreatePen
CreateFontIndirectA
CreateSolidBrush
BitBlt
GdiFlush
SetBkMode
SetTextColor
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetObjectA
SetBkColor
GetSystemPaletteEntries
GetDeviceCaps
DeleteObject
CreatePalette
SelectPalette
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetMalloc
ole32
CoUninitialize
CoCreateInstance
CoInitialize
Sections
.text Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ