Static task
static1
Behavioral task
behavioral1
Sample
e7e2e882075bd0a4008bd53189f0c091a5d691d8573ca56c87c20eba3fee003c.exe
Resource
win7-20220901-en
General
-
Target
e7e2e882075bd0a4008bd53189f0c091a5d691d8573ca56c87c20eba3fee003c
-
Size
276KB
-
MD5
83aceb41dac0c3a2c8db2744e88a647d
-
SHA1
5053b12446d623b72dc291f247317259b457bafc
-
SHA256
e7e2e882075bd0a4008bd53189f0c091a5d691d8573ca56c87c20eba3fee003c
-
SHA512
653d5a954656bd77ca7f893d8f48ab2c35941b2d0f859a19b8cdee9070c35d55361d10c664caffef4940772c41363226db05f2713090913fe498ff70860d8bb8
-
SSDEEP
6144:pfrxLrZo24Zyx762zpKKtU8mDCP6zkQ5qxD:pdWF2tPU8mDWvx
Malware Config
Signatures
Files
-
e7e2e882075bd0a4008bd53189f0c091a5d691d8573ca56c87c20eba3fee003c.exe windows x86
52caa93a614bb1519009707e427691da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
lstrcmpiA
GetCurrentThreadId
GetCommandLineA
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
InitializeCriticalSection
Sleep
WaitForMultipleObjects
LoadLibraryA
lstrcatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetConsoleCtrlHandler
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
GetProcAddress
FreeLibrary
GetLastError
CreateThread
CreateEventA
WaitForSingleObject
CloseHandle
GetVersionExA
CompareFileTime
InterlockedDecrement
lstrcpyA
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapSize
GetCurrentProcess
TerminateProcess
RaiseException
ExitProcess
GetVersion
GetStartupInfoA
HeapReAlloc
LocalFree
RtlUnwind
HeapFree
HeapAlloc
user32
KillTimer
PostMessageA
PostThreadMessageA
EnumDisplaySettingsA
CharNextA
RegisterClassA
CreateWindowExA
ChangeDisplaySettingsExA
DispatchMessageA
SetTimer
PostQuitMessage
RegisterWindowMessageA
DefWindowProcA
GetMessageA
FindWindowA
SendNotifyMessageA
ChangeDisplaySettingsA
advapi32
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
ole32
CoTaskMemFree
CoCreateInstance
CoSuspendClassObjects
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoRegisterClassObject
CoRevokeClassObject
CoInitialize
oleaut32
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocString
SysFreeString
VariantClear
CreateErrorInfo
VariantChangeType
SetErrorInfo
GetErrorInfo
VariantInit
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.srdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE