Static task
static1
Behavioral task
behavioral1
Sample
e2087e34d541e199c01c244234b0d2ab1478bf9e23bdf21401eb93f4dd15b9e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e2087e34d541e199c01c244234b0d2ab1478bf9e23bdf21401eb93f4dd15b9e4.exe
Resource
win10v2004-20220812-en
General
-
Target
e2087e34d541e199c01c244234b0d2ab1478bf9e23bdf21401eb93f4dd15b9e4
-
Size
132KB
-
MD5
7a0f8be3395788ae6aa31cb435311520
-
SHA1
f296c05d2289599052aec069b36fc56ba58e6f06
-
SHA256
e2087e34d541e199c01c244234b0d2ab1478bf9e23bdf21401eb93f4dd15b9e4
-
SHA512
50d11b6e3a0bcc6c8b4cb294fedf88f47857b012fdc64fb0f1b2d885d22429088fd5186ee6a56dc622be15d12c8f95a0cc696da10a981623d265e874e228b00b
-
SSDEEP
3072:pusahFPz7rADpYx1Sf9TBgEqkuBiUD9UN:pDYtuYTy9iEnk
Malware Config
Signatures
Files
-
e2087e34d541e199c01c244234b0d2ab1478bf9e23bdf21401eb93f4dd15b9e4.exe windows x86
70dde84ad6def86e1bd013668185ea5a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
GetCurrentProcess
QueryPerformanceCounter
GetStartupInfoW
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcessId
InterlockedDecrement
CompareFileTime
GetStartupInfoA
GetCurrentThread
VirtualAlloc
lstrlenA
lstrlenW
WideCharToMultiByte
CreateFileA
DeleteCriticalSection
LocalAlloc
GetCommandLineW
MultiByteToWideChar
FindClose
GlobalFree
LCMapStringW
InitializeCriticalSection
LoadLibraryA
GetOEMCP
SetStdHandle
GetModuleFileNameA
WriteFile
LeaveCriticalSection
InterlockedExchange
LocalFree
HeapDestroy
HeapCreate
GetSystemInfo
CreateEventW
HeapAlloc
HeapFree
LoadLibraryW
SetLastError
WaitForSingleObject
HeapSize
ReadFile
FreeLibrary
LoadLibraryExW
WaitForSingleObjectEx
SetEndOfFile
TlsFree
GetVersionExW
LoadResource
SizeofResource
GetModuleHandleW
FormatMessageW
GetFileAttributesW
FreeLibraryAndExitThread
EnterCriticalSection
SetHandleCount
ExitProcess
GetStringTypeW
InterlockedCompareExchange
SetFilePointer
RtlUnwind
Sleep
IsValidCodePage
GetACP
GetCPInfo
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetLocaleInfoW
SetConsoleCtrlHandler
FatalAppExitA
GetSystemTimeAsFileTime
GetTickCount
GetLastError
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
HeapReAlloc
GetProcAddress
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
HeapSetInformation
GetCommandLineA
user32
IsIconic
ExitWindowsEx
GetWindowThreadProcessId
EnableWindow
LoadIconW
GetMessageW
LoadCursorA
MapWindowPoints
EndPaint
SetCursorPos
GetOpenClipboardWindow
GetCursorPos
CopyRect
SetRect
SetFocus
RegisterClassA
BeginPaint
DefWindowProcW
EnableMenuItem
GetMenuItemCount
CharNextA
FillRect
ReleaseDC
GetWindowPlacement
GetMenuItemInfoA
KillTimer
SetWindowLongW
UpdateWindow
PeekMessageA
CloseClipboard
AdjustWindowRectEx
MsgWaitForMultipleObjectsEx
GetSubMenu
SetCursor
TrackPopupMenu
GetMenuStringA
SetWindowTextW
MessageBoxA
GetWindowLongW
SetForegroundWindow
OffsetRect
SetActiveWindow
PtInRect
GetSystemMetrics
GetMenuItemID
ScreenToClient
DrawFocusRect
MoveWindow
DrawIcon
CreateWindowExW
InflateRect
wsprintfA
SetWindowPos
GetClientRect
CreateWindowExA
TranslateMessage
CreatePopupMenu
GetSysColorBrush
GetMenuItemRect
CheckMenuItem
DestroyMenu
GetMenuCheckMarkDimensions
MessageBeep
GetMessageA
GetDlgItemTextW
GetWindowTextA
IsWindowEnabled
DrawTextW
GetDlgItemInt
GetCapture
GetActiveWindow
ChildWindowFromPoint
SetWindowTextA
InvalidateRect
ole32
CoCreateGuid
OleRun
OleLoadFromStream
OleInitialize
msi
ord170
Sections
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ