Static task
static1
Behavioral task
behavioral1
Sample
e005e88ad019eb98c497ab006459e8d06da22c20bbe7790bfa66bd2f4a696665.exe
Resource
win7-20220901-en
General
-
Target
e005e88ad019eb98c497ab006459e8d06da22c20bbe7790bfa66bd2f4a696665
-
Size
176KB
-
MD5
549386c26cbc89679ef93ae5de12ef2b
-
SHA1
880bf76cad2a82e3ddbcf4b0f65476093811096f
-
SHA256
e005e88ad019eb98c497ab006459e8d06da22c20bbe7790bfa66bd2f4a696665
-
SHA512
1103a00f5ece376967c9046bce062902eee42b0f381a1689dcb799639a708930e1078ab875f1ed2701c777e9ac21c2db8d8196e86357e1f6e40685f93e862ce3
-
SSDEEP
3072:EpU1j95eTOODtYuhs8ukFlvrwboW+kwt51G5StG6aDUOIpQtF0EfZ2WxSkl:cUpeTrbhP/Yvw1JtG6aoq0EfZ23E
Malware Config
Signatures
Files
-
e005e88ad019eb98c497ab006459e8d06da22c20bbe7790bfa66bd2f4a696665.exe windows x86
ae8f1dcf3e2ea8a846e3e05fc1cfd1f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetDiskFreeSpaceA
GetLogicalDrives
lstrcatA
lstrlenA
LeaveCriticalSection
lstrcmpiA
GlobalUnlock
GlobalLock
ReleaseMutex
EnterCriticalSection
InitializeCriticalSection
GetProcAddress
LoadLibraryA
GetVersion
FreeLibrary
OpenFile
lstrcpyA
GetModuleFileNameA
GetUserDefaultLangID
LocalFree
LocalUnlock
LocalLock
LocalAlloc
DisconnectNamedPipe
CloseHandle
GetCurrentThread
CreateMutexA
WaitForSingleObject
SetEvent
ResetEvent
OpenEventA
CreateEventA
UnmapViewOfFile
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
Sleep
ExitProcess
SetLocalTime
GetLocalTime
GetVersionExA
WriteFile
ReadFile
CreateNamedPipeA
GetLastError
ConnectNamedPipe
SetThreadPriority
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
CreateFileA
FlushFileBuffers
SetStdHandle
DeleteFileA
GetFileType
GetStdHandle
SetFilePointer
GetEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
FreeEnvironmentStringsA
LCMapStringW
FreeEnvironmentStringsW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
HeapReAlloc
VirtualFree
HeapCreate
VirtualAlloc
GetEnvironmentVariableA
RtlUnwind
HeapDestroy
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
SetLastError
TlsGetValue
GetCurrentThreadId
GetCommandLineA
TlsAlloc
GetModuleHandleA
InterlockedIncrement
GetStartupInfoA
HeapAlloc
HeapFree
InterlockedDecrement
TlsSetValue
CreateThread
ExitThread
ResumeThread
user32
LoadStringA
DrawIcon
PostMessageA
EndDialog
DialogBoxParamA
GetActiveWindow
LoadIconA
ScreenToClient
GetWindowRect
GetClientRect
GetWindowTextA
GetWindow
InvalidateRect
MoveWindow
ShowWindow
SetWindowPos
SetFocus
FindWindowA
ExitWindowsEx
PostQuitMessage
SetForegroundWindow
SetActiveWindow
IsIconic
TranslateMessage
keybd_event
UpdateWindow
DispatchMessageA
CreateWindowExA
LoadBitmapA
RegisterClassA
IsDialogMessageA
DefWindowProcA
GetClassNameA
SetWindowLongA
WinHelpA
LoadCursorA
SetCursor
GetKeyState
GetClassLongA
GetMenu
IsWindow
SendMessageA
MessageBoxA
GetMessageA
RegisterWindowMessageA
gdi32
BitBlt
FillRgn
GetStockObject
CombineRgn
CreateRectRgn
GetObjectA
DeleteDC
SelectObject
DeleteObject
CreateCompatibleDC
GetDeviceCaps
SetPixel
PatBlt
LineTo
CreatePen
MoveToEx
SetBkColor
StretchBlt
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
Sections
.text Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE