Static task
static1
Behavioral task
behavioral1
Sample
e955f8e81cf495e1dada41420320a5dc511b4e6192df46fcc46368fa934aedfd.exe
Resource
win7-20220812-en
General
-
Target
e955f8e81cf495e1dada41420320a5dc511b4e6192df46fcc46368fa934aedfd
-
Size
616KB
-
MD5
5106d62ab678538bb3ee297595534143
-
SHA1
868ee0488fce71c67db6c681f75a2618d1b61b33
-
SHA256
e955f8e81cf495e1dada41420320a5dc511b4e6192df46fcc46368fa934aedfd
-
SHA512
7b02da90543b88cd3e7b96e202994f5c67d33dd61893e599e6d40fb6148ff0d47ca88e7e66df70b0e1dbd693911ccd95bdbb2398f1e9c2d4034a7b5492788627
-
SSDEEP
12288:U9VzOLpdMaFJc60h6u0W9pOqzl0O2QFoWq:qVzOPMauiW9p9zlcQFTq
Malware Config
Signatures
Files
-
e955f8e81cf495e1dada41420320a5dc511b4e6192df46fcc46368fa934aedfd.exe windows x86
f4bd4cfbfd1388f137db87f7380bb0b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
RtlUnwind
HeapAlloc
HeapFree
GetTimeZoneInformation
GetCommandLineA
ExitProcess
RaiseException
GetStartupInfoA
TerminateProcess
CreateThread
HeapReAlloc
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
ExitThread
IsBadWritePtr
GetACP
LCMapStringA
LCMapStringW
VirtualAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
InitializeCriticalSection
LeaveCriticalSection
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
GetCurrentDirectoryA
WritePrivateProfileStringA
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
UnhandledExceptionFilter
DeleteCriticalSection
OpenProcess
GetLocalTime
QueryPerformanceFrequency
QueryPerformanceCounter
lstrcmpiA
GetLastError
WaitForSingleObject
CloseHandle
CreateEventA
ResetEvent
FreeLibrary
CreateFileA
DeviceIoControl
GetLogicalDrives
GetDriveTypeA
QueryDosDeviceA
LoadLibraryA
GetProcAddress
GetVersionExA
CopyFileA
GetSystemTime
GetTempPathA
GlobalAlloc
GlobalLock
GlobalUnlock
GetTickCount
GetProfileStringA
GetThreadLocale
GlobalFlags
GetFullPathNameA
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
GetCurrentProcess
WriteFile
ReadFile
FormatMessageA
DuplicateHandle
FindFirstFileA
LocalFree
FindNextFileA
FileTimeToLocalFileTime
FindClose
lstrcpynA
lstrcmpA
FileTimeToSystemTime
GetModuleFileNameA
SetThreadPriority
GetCurrentThread
SuspendThread
MultiByteToWideChar
ResumeThread
SetEvent
InterlockedIncrement
WideCharToMultiByte
InterlockedDecrement
FindResourceA
lstrlenA
GlobalFree
GetVersion
LoadResource
LockResource
GlobalGetAtomNameA
lstrcatA
GetCurrentThreadId
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
SetLastError
lstrcpyA
MulDiv
GlobalMemoryStatus
GetVolumeInformationA
GetModuleHandleA
SetStdHandle
Sleep
InterlockedExchange
SetUnhandledExceptionFilter
user32
RegisterClipboardFormatA
PostThreadMessageA
InflateRect
GetSysColorBrush
GetDesktopWindow
PtInRect
GetClassNameA
CharUpperA
DestroyMenu
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
LoadStringA
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
wvsprintfA
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
SetWindowTextA
IsDialogMessageA
CheckRadioButton
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
CharNextA
GetTopWindow
IsChild
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
SendDlgItemMessageA
PostMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
RemoveMenu
MessageBoxA
GetWindowRect
SetCursor
UpdateWindow
RedrawWindow
wsprintfA
EnableMenuItem
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
GetMenu
GetSubMenu
LoadCursorA
LoadIconA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
InvalidateRect
KillTimer
SetTimer
EnableWindow
GetSysColor
SendMessageA
GetDC
GetClientRect
ReleaseDC
MoveWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
gdi32
GetTextExtentPointA
CreateDIBitmap
MoveToEx
LineTo
GetViewportExtEx
GetWindowExtEx
GetDeviceCaps
PtVisible
GetClipBox
ExtTextOutA
Escape
RectVisible
CreateBitmap
PatBlt
GetMapMode
DPtoLP
GetBkColor
LPtoDP
GetTextColor
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetMapMode
SetTextColor
SetBkMode
RestoreDC
SaveDC
DeleteDC
GetStockObject
CreateFontIndirectA
CreatePen
SetBkColor
GetTextExtentPoint32A
SetTextAlign
TextOutA
SetPixel
Ellipse
CreateSolidBrush
Rectangle
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
GetObjectA
DeleteObject
IntersectClipRect
GetBitmapBits
comdlg32
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegEnumValueA
shell32
SHGetFileInfoA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
comctl32
ImageList_Create
ImageList_ReplaceIcon
ord17
ImageList_Destroy
oledlg
ord8
ole32
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemFree
CoTaskMemAlloc
CreateILockBytesOnHGlobal
olepro32
ord253
oleaut32
SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
Sections
.text Size: 352KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.drdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE