Static task
static1
Behavioral task
behavioral1
Sample
e728e96a2d72ce1dd4d1af1d6019540c4f62608b65661bd2f01033bb7b680c6d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e728e96a2d72ce1dd4d1af1d6019540c4f62608b65661bd2f01033bb7b680c6d.exe
Resource
win10v2004-20220812-en
General
-
Target
e728e96a2d72ce1dd4d1af1d6019540c4f62608b65661bd2f01033bb7b680c6d
-
Size
170KB
-
MD5
a34278886d5a77c2f2851f28a04b03a2
-
SHA1
bcccfde768cede1c52a204330b11a39b64718965
-
SHA256
e728e96a2d72ce1dd4d1af1d6019540c4f62608b65661bd2f01033bb7b680c6d
-
SHA512
8263d0fc2bdd16a2a107684d5a4cfaaaddea152ac78c3ee078834dd149c7b9dd8b64db17133882f97d74e712d7950c57fb8d3477e01940b87cfff0cbf609da4d
-
SSDEEP
3072:3//LoKcI/hrv7TFSC7/hf27RoKQ/xgsb9YTDJZNc8V0KC6OR9:HLeiJSCR2tBsbuTFYgOR9
Malware Config
Signatures
Files
-
e728e96a2d72ce1dd4d1af1d6019540c4f62608b65661bd2f01033bb7b680c6d.exe windows x86
89b580931b145b5105d58dea160efcfb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
mbstowcs
wcscspn
_acmdln
memmove
exit
log10
acos
comdlg32
ChooseColorA
FindTextA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
user32
GetKeyState
IsWindowVisible
DefWindowProcA
GetDCEx
GetSysColorBrush
DrawIconEx
BeginDeferWindowPos
EnableWindow
GetIconInfo
CharToOemA
FillRect
GetLastActivePopup
GetMenuStringA
GetScrollRange
GetDlgItem
DrawFrameControl
ShowWindow
GetCapture
GetParent
GetMessagePos
GetMenuItemID
SetWindowPos
EndDeferWindowPos
DrawEdge
GetDesktopWindow
SetWindowLongA
DrawMenuBar
EnumThreadWindows
GetMenuItemInfoA
EndPaint
GetActiveWindow
GetWindowTextA
GetClassLongA
GetWindow
GetCursorPos
GetMenuState
FrameRect
CreateMenu
HideCaret
CharNextA
RegisterClassA
CreateWindowExA
DefFrameProcA
EnumChildWindows
CallNextHookEx
CheckMenuItem
MessageBoxA
DefMDIChildProcA
ShowScrollBar
SetTimer
GetKeyNameTextA
GetCursor
IsChild
GetMenu
DeferWindowPos
SystemParametersInfoA
GetMenuItemCount
GetClassInfoA
GetPropA
BeginPaint
GetSysColor
GetScrollPos
DispatchMessageA
TrackPopupMenu
GetScrollInfo
kernel32
lstrcmpA
GetOEMCP
WideCharToMultiByte
WaitForSingleObject
GetStartupInfoA
EnterCriticalSection
GetLastError
GetStringTypeA
GetCPInfo
GetStringTypeW
GetVersion
InitializeCriticalSection
ExitThread
RaiseException
GetStdHandle
LockResource
GlobalAlloc
Sleep
CreateEventA
lstrlenA
GlobalDeleteAtom
LoadLibraryExA
VirtualAlloc
GetFileSize
MulDiv
SizeofResource
SetLastError
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetTickCount
GetLocalTime
LocalFree
GetCurrentThreadId
GetCurrentProcessId
LocalReAlloc
HeapDestroy
HeapFree
LocalAlloc
FreeResource
FormatMessageA
GetDiskFreeSpaceA
GetFileType
HeapAlloc
VirtualQuery
CreateThread
WriteFile
FindFirstFileA
SetEndOfFile
GetThreadLocale
ExitProcess
GetProcAddress
MoveFileA
GlobalFindAtomA
GetModuleFileNameA
CreateFileA
SetThreadLocale
lstrcpynA
SetFilePointer
FindResourceA
GetCurrentProcess
LoadResource
GetDateFormatA
DeleteCriticalSection
GetFileAttributesA
GetFullPathNameA
GetUserDefaultLCID
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 123KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 965B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ