?sesmic@@YGKPA_K@Z
Static task
static1
Behavioral task
behavioral1
Sample
e18a6225607914374c285403fe27dc647e0d3117523ebff69fb1c15c30bb68f4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e18a6225607914374c285403fe27dc647e0d3117523ebff69fb1c15c30bb68f4.exe
Resource
win10v2004-20220901-en
General
-
Target
e18a6225607914374c285403fe27dc647e0d3117523ebff69fb1c15c30bb68f4
-
Size
303KB
-
MD5
49e04f9fc87b48d3ca1fd065e5309cc0
-
SHA1
095efffa20a055ab6e17d7747c5dd2e7879b3f17
-
SHA256
e18a6225607914374c285403fe27dc647e0d3117523ebff69fb1c15c30bb68f4
-
SHA512
33d0a89dca94934ba323ad020571821d26d99f6edebb4f968426975020a59a370b3fbd08651e0bf8f4cb7146ed81c23c2b0f93931e561c398b7cf76a89b5dbe9
-
SSDEEP
6144:C5O9kEwiJDmlhhkfUzlDaIap8olkgxdcwNNpaKdQVYD:C5ZG0gUzlba5lk7wNNp4c
Malware Config
Signatures
Files
-
e18a6225607914374c285403fe27dc647e0d3117523ebff69fb1c15c30bb68f4.exe windows x86
7d1573cd3e591d62a5c81ff395e893ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ord67
SHEmptyRecycleBinA
SHGetIconOverlayIndexW
SHGetIconOverlayIndexA
ord25
ShellExecuteW
SHGetFolderPathAndSubDirW
ord652
ord147
SHSetLocalizedName
ord27
FindExecutableW
ord193
ord103
comctl32
ImageList_Read
InitCommonControlsEx
ImageList_GetIcon
kernel32
WriteProfileStringA
GetSystemInfo
GetNumberFormatW
CreateFileMappingW
CloseHandle
FindFirstVolumeW
DebugBreak
SuspendThread
GetFileAttributesExW
GetConsoleAliasesLengthW
GetConsoleAliasExesA
GetCPInfo
GetTickCount
VirtualFree
GetConsoleAliasesA
SetFileTime
GetPrivateProfileIntA
HeapDestroy
lstrcatA
GetEnvironmentVariableA
IsBadStringPtrA
ReleaseSemaphore
SetThreadLocale
lstrcmpiA
GetLongPathNameA
GetComputerNameExW
DefineDosDeviceW
SetStdHandle
GetDiskFreeSpaceW
SetFileApisToOEM
user32
RegisterClipboardFormatW
MessageBoxW
BroadcastSystemMessageA
SetMenu
LoadStringW
DestroyCursor
GetWindowLongA
CascadeWindows
OpenWindowStationA
CallWindowProcA
GetClassInfoExW
ShowCaret
EnumDesktopsW
wsprintfA
DefFrameProcA
CharUpperA
OemToCharBuffW
CreateWindowStationW
CloseWindowStation
ReplyMessage
MonitorFromPoint
GetNextDlgGroupItem
GetUserObjectInformationA
SetUserObjectInformationW
SetCursor
GetClipboardFormatNameW
ClientToScreen
ValidateRect
GetMonitorInfoW
OemToCharBuffA
ToUnicodeEx
CharToOemW
gdi32
CreateCompatibleBitmap
GetEnhMetaFileHeader
StretchBlt
SetViewportExtEx
GetTextFaceW
Exports
Exports
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.closer Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cpp Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.artp Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dctp Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gktp Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdtp Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iftp Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdat1 Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdat2 Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdat3 Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ