Static task
static1
Behavioral task
behavioral1
Sample
0e0ae2b3237ceb048645cfd0205e2741ae24fa68a6f8c5c1491f6ff07cf9d372.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e0ae2b3237ceb048645cfd0205e2741ae24fa68a6f8c5c1491f6ff07cf9d372.exe
Resource
win10v2004-20220812-en
General
-
Target
0e0ae2b3237ceb048645cfd0205e2741ae24fa68a6f8c5c1491f6ff07cf9d372
-
Size
304KB
-
MD5
96d584838be68851f7dbeebfa183c7e0
-
SHA1
9c6b5896de460dc2f2b8bb5d3c20551ade7bd6a4
-
SHA256
0e0ae2b3237ceb048645cfd0205e2741ae24fa68a6f8c5c1491f6ff07cf9d372
-
SHA512
2d733e6087145dd33175186072adda9ae6dc27c6d58e260b179fa8a051c64927e56e3f94b09db69761e464e66c6854e3e9e1cd64e8034c7e3e6ce6b2d581e7c4
-
SSDEEP
6144:g7Dh7cxypiJUOkxTzik9Xg+L7LjZLC6RjWd4:g7Dh7cMEJUOkx3xLjZLbA4
Malware Config
Signatures
Files
-
0e0ae2b3237ceb048645cfd0205e2741ae24fa68a6f8c5c1491f6ff07cf9d372.exe windows x86
a96532f173220d98cb4bf06ac24a6b92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasEnumConnectionsA
RasEnumDevicesA
RasSetEntryPropertiesA
RasDeleteEntryA
RasDialA
RasGetErrorStringA
RasHangUpA
RasGetConnectStatusA
kernel32
GetFileAttributesA
GetFileSize
GetFileTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
TerminateProcess
HeapReAlloc
HeapSize
GetTimeZoneInformation
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetErrorMode
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetShortPathNameA
GetFullPathNameA
GetProfileStringA
Sleep
lstrcpyA
HeapFree
HeapAlloc
GetProcessHeap
GlobalFree
GlobalAlloc
InterlockedDecrement
InterlockedIncrement
lstrcmpiA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
lstrcpynA
GetCurrentThreadId
GetCurrentThread
lstrcmpA
GlobalDeleteAtom
GlobalLock
GetModuleFileNameA
CloseHandle
LoadResource
FindResourceA
LockResource
GlobalUnlock
GetTickCount
GetProcAddress
GetModuleHandleA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
FormatMessageA
GetOEMCP
GetCPInfo
GetThreadLocale
SizeofResource
WritePrivateProfileStringA
FileTimeToLocalFileTime
FileTimeToSystemTime
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
GetLastError
GlobalFlags
GetProcessVersion
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
user32
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
InvalidateRect
InflateRect
DestroyIcon
GetDesktopWindow
PtInRect
GetClassNameA
GetSysColorBrush
LoadCursorA
DestroyMenu
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
MoveWindow
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
PostThreadMessageA
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SetWindowTextA
SendMessageA
LoadIconA
SetFocus
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
RegisterClipboardFormatA
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
CopyRect
GetMessageA
TranslateMessage
DrawFocusRect
DefDlgProcA
IsWindowUnicode
SetTimer
GetDlgItem
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
KillTimer
ShowWindow
MessageBoxA
EnableWindow
GetNextDlgTabItem
GetParent
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
UnhookWindowsHookEx
PostMessageA
PostQuitMessage
SetCursor
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
SetWindowsHookExA
GetCursorPos
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SetBkMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateFontA
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
shell32
ExtractIconA
ShellExecuteA
comctl32
ord17
oledlg
ord8
ole32
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoGetClassObject
StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter
olepro32
ord253
oleaut32
VariantCopy
VariantClear
VariantChangeType
SysAllocStringLen
SysFreeString
SysAllocString
SysStringByteLen
SysStringLen
VariantTimeToSystemTime
SysAllocStringByteLen
LoadTypeLi
Sections
.text Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ