Static task
static1
Behavioral task
behavioral1
Sample
e16cde1e575a269abf2f01a619b83a7742cc8dcb04492cb29ccf9ddcd47e5537.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e16cde1e575a269abf2f01a619b83a7742cc8dcb04492cb29ccf9ddcd47e5537.exe
Resource
win10v2004-20220812-en
General
-
Target
e16cde1e575a269abf2f01a619b83a7742cc8dcb04492cb29ccf9ddcd47e5537
-
Size
127KB
-
MD5
a154cb40008a143c542d7fe55f946bd0
-
SHA1
2fc30a0d51396ec2f44c5b7dae7370b5784c9649
-
SHA256
e16cde1e575a269abf2f01a619b83a7742cc8dcb04492cb29ccf9ddcd47e5537
-
SHA512
41c2b59204cb861d8456acc1eeff72f767a40778d8db176012abd24b81e94be89f112835050da3b7fa6b0d9c57ad08e7811d963c69c0f19c3e47140f396c943d
-
SSDEEP
3072:F4MDa3UGy+aMLaL7gvtVk4r404a8B/zQYSMN:xDaERjMOaUK898q
Malware Config
Signatures
Files
-
e16cde1e575a269abf2f01a619b83a7742cc8dcb04492cb29ccf9ddcd47e5537.exe windows x86
c234f7fca1835cb5945156d31e881632
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
VirtualAlloc
GetStringTypeW
CompareStringA
WideCharToMultiByte
GlobalUnlock
GetPrivateProfileStringA
GetACP
GetVersionExA
GlobalAlloc
FreeEnvironmentStringsA
GetFileInformationByHandle
HeapCreate
Sleep
GetOEMCP
GetStringTypeA
GetEnvironmentVariableA
CreateThread
SetCurrentDirectoryA
CreateProcessA
GetLastError
FreeLibrary
GetStartupInfoA
GetEnvironmentStringsW
HeapDestroy
UnhandledExceptionFilter
SetStdHandle
SetFilePointer
GetEnvironmentStrings
GetCurrentProcess
FileTimeToSystemTime
CreateDirectoryA
GetStdHandle
LCMapStringW
MultiByteToWideChar
GetFileType
GetCPInfo
GetSystemTimeAsFileTime
TerminateProcess
CompareStringW
HeapReAlloc
LCMapStringA
GlobalLock
CreatePipe
FlushFileBuffers
RtlUnwind
DuplicateHandle
GetModuleHandleA
FreeEnvironmentStringsW
GetTimeZoneInformation
GetCurrentDirectoryA
FileTimeToLocalFileTime
VirtualFree
SetHandleCount
GetPrivateProfileIntA
PeekNamedPipe
SetEndOfFile
WriteFile
GetVersion
CloseHandle
ExitProcess
VirtualProtect
LoadLibraryExA
GetModuleFileNameA
LoadLibraryA
GetLocalTime
GetProcAddress
ReadFile
GetProcessHeap
HeapFree
HeapAlloc
lstrlenA
CreateFileA
SetEnvironmentVariableA
user32
CreateWindowExA
SetMenuDefaultItem
ReleaseCapture
SetClassLongA
RegisterWindowMessageA
PtInRect
DefFrameProcA
IsZoomed
GetSysColor
SetWindowPos
LoadCursorA
TrackPopupMenu
SetWindowTextA
ReleaseDC
SetTimer
UpdateWindow
GetCursorPos
SetWindowLongA
GetWindowRect
RegisterClassExA
EmptyClipboard
SetCapture
OpenClipboard
IsIconic
DefMDIChildProcA
BeginPaint
EnableWindow
GetSystemMetrics
GetClientRect
GetKeyState
DialogBoxParamA
SetClipboardData
InvalidateRect
GetSubMenu
SendDlgItemMessageA
PostMessageA
EnableMenuItem
MessageBoxA
GetWindowPlacement
DispatchMessageA
DeleteMenu
GetWindowTextA
EndDialog
MessageBeep
GetMessageA
ShowWindow
ModifyMenuA
DestroyIcon
ClientToScreen
GetDC
GetClipboardData
IsWindow
EndPaint
LoadMenuA
SendMessageA
KillTimer
LoadIconA
GetWindow
DestroyMenu
SetFocus
SetForegroundWindow
TranslateMessage
AppendMenuA
CheckMenuItem
CloseClipboard
PostQuitMessage
GetDlgItem
GetWindowTextLengthA
MoveWindow
IsClipboardFormatAvailable
CopyRect
wsprintfA
LoadImageA
gdi32
SetBkColor
GetObjectA
GetMapMode
SetTextColor
StretchBlt
DeleteDC
MoveToEx
GetTextExtentPoint32A
ExtTextOutA
GetPixel
SetMapMode
GetStockObject
LineTo
CreateRectRgn
CreateDCA
Rectangle
BitBlt
SelectObject
CreateFontIndirectA
Polygon
CreateCompatibleBitmap
DeleteObject
CreateCompatibleDC
CreatePen
SelectClipRgn
CreateBitmap
CreateSolidBrush
SetStretchBltMode
ExtSelectClipRgn
SetPolyFillMode
GetDeviceCaps
shell32
SHAppBarMessage
Shell_NotifyIconA
ShellExecuteA
SHGetSpecialFolderPathA
winmm
PlaySoundA
wsock32
WSAAsyncSelect
WSACleanup
htons
gethostname
WSAStartup
gethostbyname
closesocket
connect
WSAGetLastError
socket
send
recv
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ