Static task
static1
Behavioral task
behavioral1
Sample
e6ad7c260f3566e7deb5c97ac2e3fadb06787371890ca68639e2b97c17a2dbd7.exe
Resource
win7-20220812-en
General
-
Target
e6ad7c260f3566e7deb5c97ac2e3fadb06787371890ca68639e2b97c17a2dbd7
-
Size
161KB
-
MD5
41f408495a1fa221b52d8c72c2d523c8
-
SHA1
0fa7b0a083c794bd9ef23a0b48b665d9a36d51d0
-
SHA256
e6ad7c260f3566e7deb5c97ac2e3fadb06787371890ca68639e2b97c17a2dbd7
-
SHA512
ced9b6ca5ad301f081dca14260edd0a7f0b3344cc2dc17a456aa2a2945aca7323a6c281665a3ac3f62075a741deeb835c548951621fade0a6e8af7915635bd23
-
SSDEEP
3072:7Jzf2YOlFtofwyQGD2rMzNhcORz6IYgmQNNxpsl5:7Jzf2xFtQArMzNmQYgTNxpsl5
Malware Config
Signatures
Files
-
e6ad7c260f3566e7deb5c97ac2e3fadb06787371890ca68639e2b97c17a2dbd7.exe windows x86
2dbb21b28913b4acd0901aa02511836d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
Shell_NotifyIconW
wtsapi32
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
advapi32
RegOpenKeyW
RegSetValueExW
GetUserNameW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegQueryValueExW
kernel32
lstrlenW
CloseHandle
OpenProcess
GetProcAddress
LoadLibraryA
lstrcmpW
lstrcatW
GetSystemDirectoryW
GetVersionExW
SystemTimeToFileTime
GetSystemTime
lstrcpynW
GetTickCount
SetEvent
WaitForSingleObject
DeviceIoControl
ResetEvent
CreateThread
CreateFileW
CreateEventW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetModuleHandleA
WideCharToMultiByte
HeapFree
HeapAlloc
RtlUnwind
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
WriteFile
ReadFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
MultiByteToWideChar
LCMapStringA
LCMapStringW
FlushFileBuffers
HeapSize
SetStdHandle
GetACP
GetOEMCP
FreeLibrary
InterlockedExchange
VirtualQuery
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
GetLocaleInfoA
IsBadReadPtr
IsBadCodePtr
SetEndOfFile
GetProcessHeap
ReleaseMutex
lstrcmpiW
Sleep
lstrcpyW
CreateProcessW
CreateMutexW
GetLastError
DeleteCriticalSection
GetCPInfo
gdi32
CreateBrushIndirect
GetClipBox
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
GetDeviceCaps
StretchBlt
BitBlt
user32
wsprintfW
FindWindowW
LoadStringW
LoadImageW
SendMessageW
GetAsyncKeyState
GetSystemMetrics
GetParent
GetCursorPos
SetTimer
SetWindowPos
InvalidateRect
GetMonitorInfoW
MonitorFromPoint
ReleaseDC
GetDC
GetDesktopWindow
ShowWindow
GetClassNameW
GetWindowLongW
GetForegroundWindow
SystemParametersInfoW
SetWindowTextW
RemoveMenu
CheckMenuItem
DestroyMenu
TrackPopupMenu
SetForegroundWindow
GetSubMenu
LoadMenuW
PeekMessageW
PostQuitMessage
PostMessageW
KillTimer
EnumChildWindows
GetWindowThreadProcessId
WindowFromPoint
OffsetRect
IntersectRect
GetWindowRect
EndPaint
FillRect
DrawEdge
BeginPaint
ScrollDC
mouse_event
SetCursorPos
DefWindowProcW
SetWindowLongW
CreateWindowExW
RegisterClassExW
LoadCursorW
MessageBoxW
wvsprintfW
DestroyWindow
DispatchMessageW
GetMessageW
MessageBeep
ReleaseCapture
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE