Static task
static1
Behavioral task
behavioral1
Sample
e4d6c797e83a79caef97c39ec11b96098517557d4a79ea42ed3075bc1e1b5f5c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4d6c797e83a79caef97c39ec11b96098517557d4a79ea42ed3075bc1e1b5f5c.exe
Resource
win10v2004-20220812-en
General
-
Target
e4d6c797e83a79caef97c39ec11b96098517557d4a79ea42ed3075bc1e1b5f5c
-
Size
657KB
-
MD5
2c0512a3f897ef9805a6761f28acf50b
-
SHA1
17b51703a64ce83dad0353b0e2d993fe3a7534be
-
SHA256
e4d6c797e83a79caef97c39ec11b96098517557d4a79ea42ed3075bc1e1b5f5c
-
SHA512
b30fec53842d17e613d6942e15494476e99d9f51cc77541e28bd00b7820f27b3aa97119427349f0c5727861f0276b59768a6446e1b43c92e29fa9797a63d1390
-
SSDEEP
12288:zcqIcEyXb/8ngL5D3Tit9sjxOrvpFUPkvFwBHUayAYzsIEdZvZb3QWXn:z9IcbongLR3tI7pukteHUBArjRb7
Malware Config
Signatures
Files
-
e4d6c797e83a79caef97c39ec11b96098517557d4a79ea42ed3075bc1e1b5f5c.exe windows x86
760a4199fb9a63e6bf2bf3cdbfc47ebe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateSolidBrush
SelectObject
CreateCompatibleDC
DeleteDC
SetBkColor
CreateCompatibleBitmap
user32
PostQuitMessage
IsWindow
GetDC
ReleaseDC
SendMessageA
DestroyWindow
GetParent
UpdateWindow
ShowWindow
TranslateMessage
GetWindow
GetWindowLongA
SetTimer
DispatchMessageA
SetFocus
BeginPaint
GetSystemMetrics
GetWindowRect
SetWindowLongA
SetWindowTextA
GetDlgItem
EndDialog
MessageBoxA
InvalidateRect
SetCursor
kernel32
GetStdHandle
GetFileAttributesA
WaitForSingleObject
HeapDestroy
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
GetLocaleInfoA
LocalAlloc
SetErrorMode
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeA
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
SetEvent
LocalFree
GetEnvironmentVariableA
LoadResource
FindClose
TlsGetValue
FormatMessageA
SetLastError
GetCurrentThread
GetCommandLineA
GetLastError
GetModuleHandleA
GetCurrentProcessId
GetVersion
GetCurrentThreadId
GetTickCount
ExitProcess
HeapAlloc
GetProcessHeap
GetOEMCP
VirtualAlloc
FindResourceA
IsBadReadPtr
Sleep
VirtualFree
FindResourceW
UnmapViewOfFile
IsValidCodePage
GetEnvironmentStrings
GetACP
CloseHandle
ReadFile
TlsFree
RaiseException
HeapSize
SizeofResource
CreateProcessW
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
GetConsoleCP
SetStdHandle
LeaveCriticalSection
CreateFileA
TlsSetValue
CreateFileW
FindFirstFileW
CompareStringA
GetProcAddress
DeleteFileW
GetModuleHandleW
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
FreeLibrary
SetHandleCount
HeapFree
WriteConsoleW
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
CreateThread
SetFilePointer
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
GetModuleFileNameA
GetModuleFileNameW
InitializeCriticalSection
Sections
.text Size: 612KB - Virtual size: 938KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ