Static task
static1
Behavioral task
behavioral1
Sample
e49b1b6cd6f2462dea711094b64d9f27288cd897bd517724c457e75bd7f0b147.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e49b1b6cd6f2462dea711094b64d9f27288cd897bd517724c457e75bd7f0b147.exe
Resource
win10v2004-20220812-en
General
-
Target
e49b1b6cd6f2462dea711094b64d9f27288cd897bd517724c457e75bd7f0b147
-
Size
416KB
-
MD5
96a213d09503c2367e2dfc94fb1e3dc0
-
SHA1
f2ed1fc94b979e3b3a571acfdb3b3a33b0d34c5d
-
SHA256
e49b1b6cd6f2462dea711094b64d9f27288cd897bd517724c457e75bd7f0b147
-
SHA512
613e3c7f768ca58097732af64ff71ffe319260c714fe58444cef4c62c16e7230a893e1f658118be323f3ea1ea4cf3311ba73d63a0a274344ed368701db3fc3f9
-
SSDEEP
6144:aZ2Vb5Ka7lmAKmxWfyrKUTkO7eKAWPlKALXqo1jmUZxL6xQGQm9UmM7I+6cw:aZ2vrKUTkO7eKAWxLXqs76ve7I+L
Malware Config
Signatures
Files
-
e49b1b6cd6f2462dea711094b64d9f27288cd897bd517724c457e75bd7f0b147.exe windows x86
0dbec96ec6fd58d4175c50065e3f5ba7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
comctl32
ord17
comdlg32
GetOpenFileNameA
GetSaveFileNameA
user32
MessageBoxIndirectA
GetWindowLongA
GetMessageTime
CheckMenuRadioItem
GetWindowTextLengthA
GetWindowTextA
GetDlgItemInt
SetDlgItemInt
LoadIconA
CreateMenu
AppendMenuA
SetMenu
EnableMenuItem
ShowWindow
PostMessageA
EnableWindow
DialogBoxParamA
SetActiveWindow
SetForegroundWindow
GetDesktopWindow
GetWindowRect
MoveWindow
EndDialog
GetForegroundWindow
GetCapture
GetClipboardOwner
GetQueueStatus
GetCursorPos
WinHelpA
MessageBoxA
GetDlgItem
GetDlgItemTextA
SetDlgItemTextA
IsDlgButtonChecked
CheckRadioButton
SetWindowLongA
MessageBeep
SendDlgItemMessageA
CreateWindowExA
SetWindowPos
SendMessageA
GetClientRect
MapDialogRect
kernel32
SetEnvironmentVariableA
RtlUnwind
InterlockedExchange
SetEndOfFile
CompareStringW
CompareStringA
GetOEMCP
GetACP
SetFilePointer
SetStdHandle
HeapSize
GetSystemTimeAsFileTime
GetCurrentThreadId
FlushFileBuffers
GetCPInfo
GetLocaleInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualQuery
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetStdHandle
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetCommandLineA
GetStartupInfoA
DeleteFileA
GetLastError
GetDateFormatA
GetTimeFormatA
HeapFree
HeapReAlloc
HeapAlloc
TerminateProcess
GetModuleHandleA
ExitProcess
GetCurrentDirectoryA
SetCurrentDirectoryA
GetLocalTime
WriteFile
ReadFile
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetVersionExA
GetSystemTimeAdjustment
GetSystemTime
GetProcessTimes
GetCurrentProcess
GetThreadTimes
GetCurrentThread
GlobalMemoryStatus
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FindClose
FindNextFileA
FindFirstFileA
GetWindowsDirectoryA
CreateThread
CreateFileA
GetEnvironmentVariableA
CloseHandle
Sections
.text Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tc Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE