Static task
static1
Behavioral task
behavioral1
Sample
e4a1a71bec8eb9153fbbf28e153fee66d104cd91fccaef46217132d31ab0833a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4a1a71bec8eb9153fbbf28e153fee66d104cd91fccaef46217132d31ab0833a.exe
Resource
win10v2004-20220901-en
General
-
Target
e4a1a71bec8eb9153fbbf28e153fee66d104cd91fccaef46217132d31ab0833a
-
Size
888KB
-
MD5
7bbd8563e01803f2c747798a0674d6f4
-
SHA1
399d8d3edcabbc56cfddba03b2926f4cd4bce4d5
-
SHA256
e4a1a71bec8eb9153fbbf28e153fee66d104cd91fccaef46217132d31ab0833a
-
SHA512
dae50d30347d706ba95bf98fd7aba0cab2cc8ad3b2b32d3860bafcaff544de8995027bd8e7f1decc4800991ed3ab70e7c70c64953e9d7fcdb1e0400f492a562f
-
SSDEEP
12288:jYtWgUFnSVxeYPkq9zbzqEIFVI9ftP9IwLXOg8GuoADThF15P9T7OKel9OMhzbS:hl0YY99zySzPrKpGuoOTz3P1JMhHS
Malware Config
Signatures
Files
-
e4a1a71bec8eb9153fbbf28e153fee66d104cd91fccaef46217132d31ab0833a.exe windows x86
ffddba4c1104f99b4efc4cd241c50048
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
GetStringTypeW
IsBadReadPtr
WriteConsoleA
GetTickCount
TlsSetValue
OutputDebugStringW
GetLocaleInfoA
WriteConsoleW
CompareStringW
VirtualQueryEx
TlsGetValue
GetTimeFormatA
RtlUnwind
LoadLibraryW
HeapValidate
TlsFree
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
CreateMutexA
LCMapStringA
DeleteCriticalSection
AllocConsole
GetEnvironmentStringsW
GetCurrentThreadId
UnhandledExceptionFilter
InterlockedExchange
ReadFile
GetModuleFileNameA
SetHandleCount
GetSystemTimeAsFileTime
OpenMutexA
IsValidLocale
CreateFileA
HeapReAlloc
EnumResourceLanguagesW
GetProcessHeap
CloseHandle
lstrlenA
HeapFree
MultiByteToWideChar
SetStdHandle
QueryPerformanceCounter
FreeEnvironmentStringsW
LeaveCriticalSection
VirtualAlloc
GetStartupInfoA
LoadLibraryA
HeapDestroy
RaiseException
ExitProcess
EnumDateFormatsW
GetStartupInfoW
SetLastError
LCMapStringW
GetNamedPipeInfo
GetModuleHandleA
GetUserDefaultLCID
SetConsoleCtrlHandler
GetCurrentThread
SetFilePointer
GetCPInfo
GetModuleHandleW
GetLocaleInfoW
GetCurrentProcessId
GetConsoleCP
IsValidCodePage
EnterCriticalSection
TlsAlloc
GetDateFormatA
InterlockedIncrement
TerminateProcess
WriteFile
GetCommandLineW
Sleep
GetOEMCP
GetStdHandle
CompareStringA
OutputDebugStringA
EnumSystemLocalesA
VirtualFree
SetUnhandledExceptionFilter
DebugBreak
SetEnvironmentVariableA
HeapAlloc
GetModuleFileNameW
GetProcAddress
HeapSize
GetConsoleOutputCP
VirtualQuery
GetConsoleMode
GetStringTypeA
WideCharToMultiByte
FlushFileBuffers
GetMailslotInfo
GetFileType
InterlockedDecrement
GetLastError
HeapCreate
GetCommandLineA
CreateNamedPipeA
GetACP
FreeLibrary
GetCurrentProcess
comctl32
InitMUILanguage
ImageList_Add
CreatePropertySheetPageA
ImageList_SetFilter
DrawStatusTextA
CreateMappedBitmap
CreatePropertySheetPageW
ImageList_Remove
InitCommonControlsEx
ImageList_LoadImageA
ImageList_GetBkColor
ImageList_Copy
ImageList_DragMove
DrawStatusTextW
user32
GetClipboardViewer
GetUserObjectInformationA
GetWindowRect
CharLowerA
RegisterClassA
RemovePropW
AdjustWindowRect
SetCapture
DefWindowProcA
RegisterClassExA
ShowWindowAsync
EndMenu
OpenInputDesktop
CopyIcon
MessageBoxW
SetScrollRange
DdeGetLastError
GetClientRect
DestroyCaret
EditWndProc
DrawFrameControl
IsCharUpperW
DlgDirSelectExA
LoadIconA
EnumDesktopsW
GetKeyboardType
ShowWindow
GetClipboardOwner
CreateWindowExW
GetScrollRange
GetClassWord
IsChild
GetClassNameW
SetWindowsHookA
SetScrollPos
InsertMenuItemA
SetProcessDefaultLayout
InflateRect
SetDlgItemTextA
DialogBoxParamW
DestroyWindow
IsWindowUnicode
BroadcastSystemMessageW
wininet
GetUrlCacheEntryInfoA
InternetFindNextFileA
Sections
.text Size: 224KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 492KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ