Static task
static1
Behavioral task
behavioral1
Sample
e5a11cbdc0c6334b95b1752eaaec9a72b8900323d6a3dadfff0c551549140063.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e5a11cbdc0c6334b95b1752eaaec9a72b8900323d6a3dadfff0c551549140063.exe
Resource
win10v2004-20220901-en
General
-
Target
e5a11cbdc0c6334b95b1752eaaec9a72b8900323d6a3dadfff0c551549140063
-
Size
706KB
-
MD5
9198ad82ee022dd38b60b066ca24d120
-
SHA1
29e08737c0ad3976066637bcfa9addc0d8c2094e
-
SHA256
e5a11cbdc0c6334b95b1752eaaec9a72b8900323d6a3dadfff0c551549140063
-
SHA512
c2efe3407e57ba1ade760350d75309e0f0eef8a874557417bf63bdbd55f4791525854c2bc4a46fed88b3a32a63f29a985cba7fb5f6dd7dff464ecbe56b08215d
-
SSDEEP
12288:/ZVi0+nQ3BaBe9pMcFsZmxK0aZRLtDxygoRLBrzzWVF/CBN9NAXhs4poEa77VQeF:xVixQ3BaBeHMcFcYKbZ9tDxinzWrw+h1
Malware Config
Signatures
Files
-
e5a11cbdc0c6334b95b1752eaaec9a72b8900323d6a3dadfff0c551549140063.exe windows x86
ca9c1813f7b5d07a90cf9b081687561b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_hread
IsBadWritePtr
GetFileTime
WriteFileEx
WritePrivateProfileStructA
CreateDirectoryA
WaitForSingleObjectEx
GlobalUnlock
CreateDirectoryExW
FindFirstFileA
FormatMessageA
GetPrivateProfileStringW
SetThreadExecutionState
GetLogicalDriveStringsW
GlobalAlloc
SetVolumeMountPointW
WriteProfileSectionW
lstrcpynW
SetCalendarInfoA
GetNamedPipeHandleStateW
Beep
GetEnvironmentVariableA
GetPrivateProfileSectionW
WritePrivateProfileSectionW
lstrcmpW
FindClose
EnumLanguageGroupLocalesW
SearchPathA
MoveFileW
CreateIoCompletionPort
EnumUILanguagesA
FatalExit
GlobalSize
GetTempFileNameA
GetStringTypeW
GetCurrentProcess
DefineDosDeviceA
GetWriteWatch
IsBadHugeWritePtr
GetMailslotInfo
CreateMutexW
GetCommMask
ReplaceFileW
user32
GetKeyNameTextW
GetShellWindow
OpenDesktopW
GetProcessDefaultLayout
GetDesktopWindow
HiliteMenuItem
SetForegroundWindow
SetKeyboardState
UnregisterClassW
PostThreadMessageA
LookupIconIdFromDirectory
GetKeyboardLayoutNameA
GetPriorityClipboardFormat
DdeConnect
GetInputDesktop
CharLowerA
DestroyWindow
SetSysColors
ClipCursor
CloseClipboard
SetMenuContextHelpId
GetWindowRect
GetGUIThreadInfo
GetUserObjectInformationW
DragObject
OemToCharW
GetKeyNameTextA
CharNextW
GetAsyncKeyState
CallWindowProcA
DdeInitializeW
GetSubMenu
SetWindowContextHelpId
wvsprintfA
InsertMenuW
GetMessagePos
CopyRect
MsgWaitForMultipleObjects
ChangeClipboardChain
OemToCharBuffA
SetCaretPos
OemKeyScan
CallMsgFilterW
ReuseDDElParam
GetDlgItemInt
GetMessageW
RegisterDeviceNotificationW
GetNextDlgGroupItem
DefFrameProcA
PeekMessageA
OpenInputDesktop
CreatePopupMenu
GetMenu
GetMenuItemID
AdjustWindowRect
DdeCreateStringHandleA
GetDialogBaseUnits
GetMessageA
LoadMenuA
SubtractRect
SetParent
MessageBoxExA
OemToCharBuffW
SetWindowTextA
SetDeskWallpaper
GetPropW
GetWindow
GetWindowPlacement
GetMessageExtraInfo
IsCharAlphaNumericW
OpenDesktopA
DestroyIcon
SystemParametersInfoA
CopyAcceleratorTableA
LoadMenuW
CheckMenuItem
SetPropA
SetWindowsHookW
ChildWindowFromPoint
ValidateRect
CopyImage
EnumPropsExW
IsCharAlphaW
MessageBoxIndirectW
GetKeyboardState
GetMenuStringA
GetCursorInfo
AllowSetForegroundWindow
SetMenuItemBitmaps
IsCharLowerW
SetScrollPos
GetWindowLongA
SetClassLongA
VkKeyScanW
DdeConnectList
RedrawWindow
SendDlgItemMessageA
GetClassLongA
SendNotifyMessageW
ModifyMenuA
GetKeyboardLayout
ReleaseCapture
DrawAnimatedRects
DrawTextW
TileChildWindows
DrawMenuBar
UnpackDDElParam
DrawTextA
SetWindowPos
CharPrevExA
SetShellWindow
EnumDisplayDevicesA
DestroyCursor
MapVirtualKeyExW
SetMenuInfo
EnableWindow
IsDialogMessageW
ArrangeIconicWindows
ModifyMenuW
MapVirtualKeyExA
Sections
.text Size: 225KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 226KB - Virtual size: 661KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ