Static task
static1
Behavioral task
behavioral1
Sample
e3303ceecb5f5416df2513c497289c09be24c18e098fc043b666154f8f2b757d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e3303ceecb5f5416df2513c497289c09be24c18e098fc043b666154f8f2b757d.exe
Resource
win10v2004-20220812-en
General
-
Target
e3303ceecb5f5416df2513c497289c09be24c18e098fc043b666154f8f2b757d
-
Size
133KB
-
MD5
e226679dc3fd0a9d8a103fd1e41d0914
-
SHA1
df8463621ad38f67b3aeb0bf29fd1b3d881986fd
-
SHA256
e3303ceecb5f5416df2513c497289c09be24c18e098fc043b666154f8f2b757d
-
SHA512
51b07308f46e72526c860a431a58f84f9f11ef1f158f12e19785da4d3cc79f2fa317ff88e9578c63289bba7829bb96b02bedec2a1eeadc2877caba7b497e1b5f
-
SSDEEP
3072:fOkRUFDcguBGi0Oazw1cjiCDs0LLBjeiVugTF:F2lLISjiCDzNjtF
Malware Config
Signatures
Files
-
e3303ceecb5f5416df2513c497289c09be24c18e098fc043b666154f8f2b757d.exe windows x86
a72801a7c9de5c97919347ae209625f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIconEx
GetWindowTextA
GetWindowTextLengthA
InsertMenuA
GetMenu
EndDialog
DrawTextA
BlockInput
DrawTextW
DialogBoxParamW
CloseWindow
GetDlgItem
AlignRects
DrawIcon
CopyRect
CreateIcon
LoadCursorA
CopyIcon
AppendMenuA
LoadMenuA
CalcMenuBar
IsWindow
DialogBoxParamA
GetFocus
GetDC
CopyImage
AppendMenuW
IsMenu
GetCursor
DrawTextW
GetDC
EndDialog
DrawIcon
InsertMenuA
CopyImage
GetWindowTextLengthA
DrawIconEx
CloseWindow
CopyRect
BlockInput
DrawTextA
GetFocus
CreateIcon
IsMenu
IsWindow
AlignRects
GetMenu
CopyIcon
GetDlgItem
DialogBoxParamW
LoadMenuA
CalcMenuBar
AppendMenuA
DialogBoxParamA
AppendMenuW
GetWindowTextA
LoadCursorA
GetCursor
advapi32
RegEnumKeyW
RegQueryValueW
RegEnumValueA
RegOpenKeyA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueA
RegEnumKeyExA
RegEnumValueW
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegLoadKeyW
RegOpenKeyW
RegCreateKeyW
RegGetKeySecurity
RegReplaceKeyA
RegFlushKey
RegReplaceKeyW
RegDeleteValueA
RegCreateKeyExW
RegLoadKeyA
RegQueryValueExW
RegQueryValueExA
RegCreateKeyExA
RegGetKeySecurity
RegQueryValueW
RegDeleteKeyW
RegEnumKeyW
RegLoadKeyA
RegOpenKeyExW
RegDeleteKeyA
RegQueryValueExW
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegEnumKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegReplaceKeyW
RegOpenKeyA
RegFlushKey
RegLoadKeyW
RegCreateKeyExA
RegDeleteValueW
RegEnumValueA
RegEnumKeyA
RegQueryValueExA
RegCreateKeyW
RegCreateKeyExW
RegQueryInfoKeyA
RegEnumValueW
RegReplaceKeyA
RegQueryValueA
kernel32
GetCommandLineA
Sleep
GetCommandLineA
GetLocalTime
GetCommandLineA
lstrcpynA
GetCommandLineA
lstrcpyA
GetCommandLineA
GetLastError
GetCommandLineA
GetModuleFileNameA
GetCommandLineA
GetFileSize
GetCommandLineA
GetModuleHandleA
GetCommandLineA
lstrcatA
GetCommandLineA
Sections
.t89t Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d69a Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rd15a Size: 10KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r04c Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ