Static task
static1
Behavioral task
behavioral1
Sample
0ee34794c1446e6f5974992d12c941364442e680bbb56cec9416e21e3e5522b2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0ee34794c1446e6f5974992d12c941364442e680bbb56cec9416e21e3e5522b2.exe
Resource
win10v2004-20220812-en
General
-
Target
0ee34794c1446e6f5974992d12c941364442e680bbb56cec9416e21e3e5522b2
-
Size
346KB
-
MD5
0bae9aced93fd4af72b76aebed833cb0
-
SHA1
a4c946c2fc08eaefda061cafe2d35cdc77d46874
-
SHA256
0ee34794c1446e6f5974992d12c941364442e680bbb56cec9416e21e3e5522b2
-
SHA512
ff9562e99a871826395c5914990f5fc6210a919fa934ac058314a8084b08ed96c5b0dfb93e187b68de0313e1aba987cd38061c2ee1398a49d531c73bd0355696
-
SSDEEP
6144:Ryu1usjLWMwFfGBJPURlUe2Sc7nxl4egfE5uE81Fth/i1GoM5o1tra4jm:Ryu1usjLWMwFfGBJPURlUe07nxRGv1wU
Malware Config
Signatures
Files
-
0ee34794c1446e6f5974992d12c941364442e680bbb56cec9416e21e3e5522b2.exe windows x86
ce224c50913f574f17d1488ce4fb2546
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
LoadLibraryA
SetErrorMode
OpenFile
GetProcAddress
lstrcmpiA
GetTempFileNameA
GetTempPathA
GetDriveTypeA
GetDiskFreeSpaceA
GetSystemDirectoryA
FindClose
FindFirstFileA
GetVolumeInformationA
MultiByteToWideChar
SetLastError
GetFileAttributesA
CloseHandle
CreateFileA
lstrcmpA
SetFilePointer
SetEndOfFile
IsBadStringPtrA
FlushFileBuffers
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
SetCurrentDirectoryA
GetFileInformationByHandle
GetFileTime
SetFileTime
GetModuleFileNameA
_llseek
GlobalFree
GetPrivateProfileStringA
GetPrivateProfileIntA
GetWindowsDirectoryA
GlobalMemoryStatus
WriteFile
ReadFile
GetTickCount
GetCPInfo
GetACP
DebugBreak
_lclose
GetVersion
_lwrite
_lcreat
_lopen
FreeResource
LockResource
LoadResource
FindResourceA
HeapFree
HeapReAlloc
HeapAlloc
GetFullPathNameA
GetCurrentDirectoryA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
WideCharToMultiByte
LCMapStringW
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStdHandle
GetStringTypeA
GetStringTypeW
SetStdHandle
lstrcpyA
CompareStringW
SetEnvironmentVariableA
GlobalSize
GlobalLock
GlobalUnlock
lstrcpynA
GetCurrentThreadId
lstrlenA
lstrcatA
GlobalAlloc
GlobalHandle
GlobalReAlloc
GlobalFlags
CompareStringA
FileTimeToSystemTime
FileTimeToLocalFileTime
user32
GetSubMenu
RegisterClassA
LoadCursorA
LoadIconA
InsertMenuA
LoadStringA
GetSystemMenu
LoadAcceleratorsA
PostQuitMessage
DefFrameProcA
GetMenu
CreateWindowExA
TranslateMDISysAccel
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
MessageBoxA
GetClientRect
UpdateWindow
ShowWindow
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
DrawFocusRect
TabbedTextOutA
FillRect
SetWindowLongA
DefMDIChildProcA
CharLowerA
SetFocus
GetDlgItemTextA
SendDlgItemMessageA
EnumThreadWindows
GetParent
IsWindowVisible
CharUpperA
CharNextA
InvalidateRect
CharPrevA
SetWindowTextA
GetWindow
MoveWindow
GetWindowLongA
DestroyWindow
GetKeyState
GetClassInfoA
InflateRect
EndPaint
FrameRect
BeginPaint
DefWindowProcA
EnableWindow
CreateDialogParamA
SetCursor
PeekMessageA
IsDialogMessageA
SendMessageA
IsClipboardFormatAvailable
EnableMenuItem
KillTimer
GetSysColor
GetWindowRect
GetSystemMetrics
SetWindowPos
DialogBoxParamA
GetDlgItem
wsprintfA
SetDlgItemTextA
SetTimer
EndDialog
GetActiveWindow
gdi32
SetBkColor
GetStockObject
SetTextColor
DeleteObject
CreateSolidBrush
GetObjectA
SetBkMode
comdlg32
GetOpenFileNameA
GetSaveFileNameA
mpr
WNetEnumResourceA
WNetOpenEnumA
WNetCloseEnum
ole32
CoCreateInstance
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�I; Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE