Static task
static1
Behavioral task
behavioral1
Sample
e264f8a96de9c94de03864ce0d07c73aa7f5f53bd7bf2e4f29e0e9553ff820a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e264f8a96de9c94de03864ce0d07c73aa7f5f53bd7bf2e4f29e0e9553ff820a6.exe
Resource
win10v2004-20220812-en
General
-
Target
e264f8a96de9c94de03864ce0d07c73aa7f5f53bd7bf2e4f29e0e9553ff820a6
-
Size
816KB
-
MD5
a345d7654321be2412db43e21dd10869
-
SHA1
83ec264fcfac65419936c6c931580ad6c45cbf96
-
SHA256
e264f8a96de9c94de03864ce0d07c73aa7f5f53bd7bf2e4f29e0e9553ff820a6
-
SHA512
35c4d01f5a59e0bc34fb8ee7c3c8fc638526b610be48d6179196f4c8f75c5b77f51929e911a0822cf73bb889613cff8081258f8b811c9f698180aea9b78722ac
-
SSDEEP
12288:Juz3io1Kgm0vu6vdS9x/m8wd/YK6WaGGP5TTgwgqXWcxdSEcVsxZa/F:g3iv6Vwx/m7/YKB5GBIFqXxMV1/
Malware Config
Signatures
Files
-
e264f8a96de9c94de03864ce0d07c73aa7f5f53bd7bf2e4f29e0e9553ff820a6.exe windows x86
3c6cac360ced4e9913edc65b4ea60b13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxW
GetKeyState
GetWindowPlacement
DrawFocusRect
DeferWindowPos
EnableMenuItem
AppendMenuW
FillRect
MapWindowPoints
CreateDialogParamW
ReleaseDC
GetMessageTime
GetDC
OffsetRect
GetWindowTextW
MoveWindow
DrawEdge
CharUpperW
LoadAcceleratorsW
GetWindow
GetFocus
DestroyWindow
DestroyIcon
GetClientRect
GetAsyncKeyState
SetTimer
RegisterClassExW
SetCursor
GetMessageW
IsWindowVisible
GetCapture
GetWindowThreadProcessId
SetMenuDefaultItem
InflateRect
GetDlgItem
GetWindowRect
GetDesktopWindow
SetRect
LoadStringW
RedrawWindow
SetClipboardData
GetWindowLongW
GetSystemMenu
GetCursorPos
GetSubMenu
CheckMenuItem
GetActiveWindow
UnhookWindowsHookEx
ShowWindow
SystemParametersInfoW
LoadImageW
IsWindow
wvsprintfW
RegisterClassW
GetMenuItemCount
GetSysColor
IsClipboardFormatAvailable
SetWindowPos
WindowFromPoint
RegisterWindowMessageW
LoadBitmapW
GetMenu
LoadIconW
GetSysColorBrush
FrameRect
IsWindowEnabled
SetWindowTextW
DestroyCursor
CreateWindowExW
SetCapture
LoadCursorW
GetSystemMetrics
ScrollWindowEx
DefWindowProcW
GetTopWindow
advapi32
GetLengthSid
OpenProcessToken
RegQueryValueExA
SetSecurityDescriptorOwner
ControlService
RegDeleteValueA
OpenThreadToken
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
CreateServiceA
SetServiceStatus
SetSecurityDescriptorGroup
OpenServiceA
DeleteService
RegDeleteKeyA
StartServiceCtrlDispatcherA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyA
comdlg32
PrintDlgA
GetFileTitleA
kernel32
SetEnvironmentVariableA
RaiseException
Sleep
SetHandleCount
GetConsoleOutputCP
InterlockedDecrement
CompareStringA
GetModuleHandleA
GetCurrentProcess
ReadFile
WriteConsoleW
GetModuleFileNameA
WideCharToMultiByte
SetFilePointer
HeapSize
GetProcessHeap
GetTickCount
GetLastError
LoadLibraryA
GetFileType
GetOEMCP
GetDateFormatA
GetLocaleInfoA
GetUserDefaultLCID
GetConsoleCP
LoadLibraryW
TlsAlloc
FreeEnvironmentStringsA
CompareStringW
GetCurrentThread
GetTimeFormatA
DeleteCriticalSection
SetLastError
QueryPerformanceCounter
EnterCriticalSection
FlushFileBuffers
InterlockedIncrement
LeaveCriticalSection
LCMapStringA
GetStartupInfoA
GetStringTypeA
RtlUnwind
HeapReAlloc
GetModuleHandleW
GetSystemTimeAsFileTime
HeapCreate
CreateMutexW
GetCurrentProcessId
WriteFile
ExitThread
GetACP
GetCommandLineW
GetProcAddress
MultiByteToWideChar
TerminateProcess
WriteConsoleA
HeapAlloc
GetCommandLineA
HeapDestroy
IsValidCodePage
TlsFree
FileTimeToLocalFileTime
SetStdHandle
UnhandledExceptionFilter
GetConsoleMode
GetEnvironmentStrings
FindClose
ExitProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
VirtualAlloc
VirtualFree
HeapFree
LCMapStringW
TlsSetValue
TlsGetValue
GetTimeZoneInformation
InterlockedExchange
VirtualQuery
InitializeCriticalSection
GetStartupInfoW
GetCPInfo
GetStringTypeW
GetVersionExA
CloseHandle
IsDebuggerPresent
GetEnvironmentStringsW
GetSystemTime
GetCurrentDirectoryW
CreateFileA
GetModuleFileNameW
GetStdHandle
FreeEnvironmentStringsW
Sections
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 476KB - Virtual size: 473KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ