Static task
static1
Behavioral task
behavioral1
Sample
e851b530567f036b8d8d933eaccca2872e1707af098b77f097b132e6154547a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e851b530567f036b8d8d933eaccca2872e1707af098b77f097b132e6154547a6.exe
Resource
win10v2004-20220901-en
General
-
Target
e851b530567f036b8d8d933eaccca2872e1707af098b77f097b132e6154547a6
-
Size
50KB
-
MD5
45d5ae31cd62ec95e4e6b64dfe512cdd
-
SHA1
c09cf8d3e44d38b9f42918b8c527cc064bddb4f8
-
SHA256
e851b530567f036b8d8d933eaccca2872e1707af098b77f097b132e6154547a6
-
SHA512
f8587d9b162d56dd4defe343badc6112177b86a30b9be8d4c88daca24d545d64f16a6cbfd1bd3c175d10d161992b37007a2840ff4e368b70b3dccf98af98bcb3
-
SSDEEP
768:Q3WB5tprmyKIJ/xNxZUkc/rJ/MYoeAgdT6661SvhQvE:8WvjrmyKIJ/xNQ/XoeAgdW6NGvE
Malware Config
Signatures
Files
-
e851b530567f036b8d8d933eaccca2872e1707af098b77f097b132e6154547a6.exe windows x86
7f74fff57d449a838aeb26e33886f227
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
ExpandEnvironmentStringsA
FindNextFileA
FindClose
FindFirstFileA
GetFileAttributesA
GetFileAttributesExA
CreateDirectoryA
GetVersion
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
HeapSize
ExitProcess
GetStartupInfoA
GetCommandLineA
DeleteFileA
GetModuleFileNameA
CopyFileA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
WriteFile
CloseHandle
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleHandleA
Sleep
GetTickCount
user32
GetCursorPos
GetAsyncKeyState
GetDoubleClickTime
keybd_event
MapVirtualKeyA
mouse_event
GetSystemMetrics
GetKeyState
LoadImageA
SetWindowPos
DestroyMenu
TrackPopupMenu
AppendMenuA
CreatePopupMenu
VkKeyScanA
SetKeyboardState
MessageBoxIndirectA
SetFocus
InvalidateRect
UpdateWindow
ShowWindow
SetWindowLongA
SendMessageA
CreateWindowExA
FindWindowExA
GetCursor
CreateCursor
PostQuitMessage
KillTimer
DestroyCursor
GetWindowRect
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
RegisterClassExA
LoadIconA
GetDC
SetRect
GetForegroundWindow
SetTimer
CallWindowProcA
SetCursor
DefWindowProcA
GetWindowLongA
PostMessageA
BeginPaint
GetClientRect
GetWindowTextA
IsWindow
DrawTextA
EndPaint
wsprintfA
MessageBoxA
SetWindowTextA
SetCursorPos
gdi32
DeleteObject
SelectObject
GetStockObject
SetTextColor
SetBkMode
DeleteDC
BitBlt
SetBkColor
GetPixel
CreateBitmap
CreateCompatibleDC
RectVisible
CreateFontIndirectA
GetObjectA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
ShellExecuteA
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ