Static task
static1
Behavioral task
behavioral1
Sample
e24a4a9db258aa82df7e4ead20c5b856bead793d115645b27fe973864e5b352e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e24a4a9db258aa82df7e4ead20c5b856bead793d115645b27fe973864e5b352e.exe
Resource
win10v2004-20220812-en
General
-
Target
e24a4a9db258aa82df7e4ead20c5b856bead793d115645b27fe973864e5b352e
-
Size
216KB
-
MD5
79fbb789ae538953f47b01d4ef1243e0
-
SHA1
edd938c51d76a47fea131da459cd6d3506cc1b13
-
SHA256
e24a4a9db258aa82df7e4ead20c5b856bead793d115645b27fe973864e5b352e
-
SHA512
c978a74850275f1e3fe961049af4359e3996c3341030a77e61ee36e723635f2c8580c6f11518394468e97173edfc066b534e0a5ba138bbca350f706122b4e28a
-
SSDEEP
6144:P7Fv+1AnqWa3mK9pH5nBHV4+GI133udyT:TF+ua5pl9V4+F1Hu4T
Malware Config
Signatures
Files
-
e24a4a9db258aa82df7e4ead20c5b856bead793d115645b27fe973864e5b352e.exe windows x86
dda70cdff98b8ca1b8cdf3dc3c76569b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msnetobj
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
kernel32
GetThreadPriority
ReleaseSemaphore
MulDiv
GetCurrentThread
CreateThread
lstrcpyW
IsBadCodePtr
QueryPerformanceCounter
GetFileSize
SetThreadPriority
GetProfileIntA
CloseHandle
WaitForMultipleObjects
GetFileAttributesW
GetDiskFreeSpaceW
FreeLibrary
GetQueuedCompletionStatus
lstrcmpiW
lstrcpyA
CreateEventW
LeaveCriticalSection
lstrcmpW
WaitForSingleObject
SetUnhandledExceptionFilter
GetCurrentProcess
GetEnvironmentStringsW
DeleteFileW
InterlockedIncrement
GetFullPathNameW
ResetEvent
InterlockedExchange
HeapFree
GlobalAlloc
HeapAlloc
GetSystemInfo
GetTimeZoneInformation
CreateFileW
GlobalLock
SetFilePointer
GetCurrentProcessId
GetTickCount
GetModuleFileNameA
GlobalMemoryStatus
lstrcpynW
IsBadWritePtr
GlobalHandle
GetSystemTimeAsFileTime
LoadLibraryW
GetLastError
GetModuleHandleA
lstrlenA
EnterCriticalSection
CreateSemaphoreW
MultiByteToWideChar
GlobalUnlock
GlobalFree
WideCharToMultiByte
GetProcessHeap
IsBadReadPtr
lstrlenW
InitializeCriticalSection
WriteFile
InterlockedDecrement
DeleteCriticalSection
SetEvent
GetVersionExW
GetPrivateProfileStringW
ReadFile
SetEndOfFile
VirtualFree
oleaut32
VarBstrFromDisp
VarBstrFromUI2
VarBstrFromI8
VarBstrFromDate
VarBstrFromR4
VarBstrFromUI8
VarBstrFromI2
VarBstrFromDec
VarBstrFromI4
VarBstrFromUI1
VarBstrFromUI4
VarBstrFromCy
VarBstrFromI1
VarBstrFromR8
user32
CreateDialogParamW
ReleaseDC
SendMessageW
PeekMessageW
InvalidateRect
SetWindowLongW
DestroyWindow
GetAsyncKeyState
SetDlgItemInt
GetDesktopWindow
DefWindowProcW
GetWindowLongW
GetDC
CheckRadioButton
IsRectEmpty
DispatchMessageW
LoadStringW
GetDlgItemInt
MoveWindow
TranslateMessage
GetWindowRect
SetCursor
GetDlgItem
EnableWindow
ClientToScreen
GetClientRect
IsWindowVisible
CheckDlgButton
ShowWindow
IsWindow
SetDlgItemTextW
LoadCursorW
msoert2
AppendTempFileList
msls31
LsCompressSubline
LssbGetPlsrunsFromSubline
LssbGetDurTrailWithPensInSubline
LssbGetNumberDnodesInSubline
LssbGetObjDimSubline
LssbGetVisibleDcpInSubline
nddeapi
NDdeGetErrorStringA
NDdeGetTrustedShareW
NDdeIsValidAppTopicListW
NDdeIsValidAppTopicListA
NDdeGetShareSecurityA
NDdeGetShareSecurityW
NDdeGetTrustedShareA
cewmdm
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
DllGetClassObject
msoeacct
DllGetClassObject
ValidEmailAddress
DllCanUnloadNow
GetDllMajorVersion
HrCreateAccountManager
msltus40
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ