Static task
static1
Behavioral task
behavioral1
Sample
e8d736586d2e2ce4daf9c1b0d0960c2e187de181ddadbc1a12b62bb8bf56344f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e8d736586d2e2ce4daf9c1b0d0960c2e187de181ddadbc1a12b62bb8bf56344f.exe
Resource
win10v2004-20220812-en
General
-
Target
e8d736586d2e2ce4daf9c1b0d0960c2e187de181ddadbc1a12b62bb8bf56344f
-
Size
788KB
-
MD5
8f44fca6cb63a49ca99fc309754dd8bd
-
SHA1
ce2a8d9bcd4d5619ec73ae18cc1aacf772de9e46
-
SHA256
e8d736586d2e2ce4daf9c1b0d0960c2e187de181ddadbc1a12b62bb8bf56344f
-
SHA512
a8ecbadade2d00a1ce8cbd76b83e36700249e6611d9940b9e930244221d6b1eefa0eb52dafa727e19ab59bb35cc3611b530db05e61244d58410016b86cf90f37
-
SSDEEP
24576:/yn0TlbbEb2Mm3akCeuhKGQ8SmU0qrKQuvqGh3:/00F99Cpi8Sj0qrKQpS
Malware Config
Signatures
Files
-
e8d736586d2e2ce4daf9c1b0d0960c2e187de181ddadbc1a12b62bb8bf56344f.exe windows x86
d81fa9f5c405e7b3b3c99c52783ce9a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PageSetupDlgW
ChooseColorA
ReplaceTextW
gdi32
GetArcDirection
GetICMProfileW
GetTextExtentPoint32A
AbortDoc
SetTextAlign
SelectClipPath
GdiPlayDCScript
GetLogColorSpaceW
GetPolyFillMode
GetTextAlign
GetObjectType
SetFontEnumeration
CreateCompatibleDC
TextOutA
GetDeviceCaps
GetObjectA
GetTextCharset
comctl32
ImageList_DragLeave
ImageList_GetBkColor
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_BeginDrag
ImageList_Create
GetEffectiveClientRect
CreatePropertySheetPage
ImageList_ReplaceIcon
ImageList_GetFlags
ImageList_AddIcon
MakeDragList
InitCommonControlsEx
ImageList_Write
CreateMappedBitmap
DestroyPropertySheetPage
CreateToolbar
CreateStatusWindowW
_TrackMouseEvent
ImageList_GetImageInfo
advapi32
CryptContextAddRef
RegEnumValueA
RegReplaceKeyA
CryptEnumProvidersW
ReportEventA
CryptImportKey
CryptSignHashA
RegDeleteKeyW
CryptEnumProviderTypesW
CryptReleaseContext
GetUserNameA
shell32
ExtractIconEx
RealShellExecuteW
kernel32
TlsGetValue
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
CreateFileA
GetStringTypeA
VirtualQuery
SetEnvironmentVariableA
GetLocaleInfoW
InterlockedExchange
VirtualFree
CreateMutexA
RtlUnwind
WideCharToMultiByte
FlushFileBuffers
SetFilePointer
GetEnvironmentStringsW
SetStdHandle
GetVersionExA
GetCurrentThread
IsDebuggerPresent
GetCurrentThreadId
GetLastError
SetHandleCount
GetProcessHeap
CompareStringA
FreeLibrary
ReadFile
GetLocaleInfoA
GetTimeFormatA
IsValidCodePage
GetConsoleMode
HeapSize
CloseHandle
IsValidLocale
EnterCriticalSection
SetUnhandledExceptionFilter
DeleteCriticalSection
VirtualAlloc
GetTimeZoneInformation
HeapReAlloc
GetCurrentProcessId
CompareStringW
QueryPerformanceCounter
GetStringTypeW
HeapDestroy
GetProcAddress
WriteFile
TlsSetValue
GetTickCount
GetSystemTimeAsFileTime
GetModuleHandleA
WriteConsoleA
GetUserDefaultLCID
InterlockedIncrement
GetCommandLineA
EnumSystemLocalesA
Sleep
ExitProcess
GetCPInfo
FreeEnvironmentStringsW
GetModuleFileNameA
OpenMutexA
GetDateFormatA
LCMapStringW
GetCurrentProcess
InitializeCriticalSection
HeapAlloc
InterlockedDecrement
LeaveCriticalSection
GetStartupInfoA
GetEnvironmentStrings
SetLastError
GetOEMCP
GetConsoleOutputCP
MultiByteToWideChar
GetStdHandle
LCMapStringA
CreateEventW
HeapCreate
SetConsoleCtrlHandler
HeapFree
WriteConsoleW
GetEnvironmentVariableW
GetFileType
TlsFree
TlsAlloc
GetConsoleCP
GetACP
LoadLibraryA
user32
LoadMenuA
DefWindowProcA
DestroyWindow
CharPrevExA
EndPaint
ClipCursor
TileChildWindows
MessageBoxA
CreateMDIWindowW
ExcludeUpdateRgn
CreateWindowExA
RegisterClassA
CallWindowProcA
MapVirtualKeyW
IsDialogMessage
DdeInitializeA
CharNextA
WindowFromPoint
ShowWindow
RegisterClassExA
GetOpenClipboardWindow
SetWindowsHookW
EndMenu
CreatePopupMenu
GetSystemMenu
Sections
.text Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 404KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ