Static task
static1
Behavioral task
behavioral1
Sample
e4bdd7a4d3dff71299035beaae9c25001efed4c615041c0faf009cc7745b531a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4bdd7a4d3dff71299035beaae9c25001efed4c615041c0faf009cc7745b531a.exe
Resource
win10v2004-20220812-en
General
-
Target
e4bdd7a4d3dff71299035beaae9c25001efed4c615041c0faf009cc7745b531a
-
Size
317KB
-
MD5
30d8ab784c698d0a6662f8c5c8fec3a0
-
SHA1
ef107a3337a5870933412f47ad38cae52bdb5a70
-
SHA256
e4bdd7a4d3dff71299035beaae9c25001efed4c615041c0faf009cc7745b531a
-
SHA512
9ad010fac506247c917ff3d772ba9f769d20460281c11c1efffc7eb3d41be24b9019d10d437636efa91f60ac311e130c213f6655fffc1befed43e44bce09ac4c
-
SSDEEP
6144:UyIusHei859+OhSfxxS3xBktGVE6Ne0fM+Kh8x4VzXyS7u:Uy9sHeBH+OhS5iwAbe0HyC4u
Malware Config
Signatures
Files
-
e4bdd7a4d3dff71299035beaae9c25001efed4c615041c0faf009cc7745b531a.exe windows x86
96d5f75c5acf1e2f5eb20346c533b756
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowLongW
GetSystemMetrics
SendDlgItemMessageW
SetWindowLongW
GetParent
MapWindowPoints
GetWindow
SetDlgItemTextW
MessageBoxW
GetWindowRect
CreateDialogParamW
EnableWindow
SetWindowPos
SetWindowTextW
LoadImageW
CharNextW
DialogBoxParamW
LoadStringW
GetDlgItemTextW
GetClientRect
SendMessageW
CopyRect
ShowWindow
SystemParametersInfoW
DestroyWindow
DrawTextW
GetDlgItem
GetDialogBaseUnits
SetFocus
EndDialog
advapi32
GetTraceEnableLevel
GetTraceLoggerHandle
GetTraceEnableFlags
RegisterTraceGuidsW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
TraceMessage
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegSetValueExW
kernel32
LoadLibraryA
FreeLibrary
EnterCriticalSection
lstrcatW
DeleteCriticalSection
GetCurrentProcessId
HeapDestroy
lstrcpyW
QueryPerformanceCounter
LoadLibraryW
GetProcAddress
lstrlenA
InterlockedDecrement
GetLastError
OutputDebugStringA
lstrcpynW
SetUnhandledExceptionFilter
GetProcessHeap
GetCurrentProcess
LeaveCriticalSection
IsValidCodePage
GetModuleFileNameW
GlobalAlloc
VirtualFree
FlushInstructionCache
HeapFree
GetSystemInfo
FormatMessageW
HeapAlloc
GetSystemTimeAsFileTime
LocalFree
GetTickCount
LoadLibraryExW
InterlockedIncrement
lstrlenW
MultiByteToWideChar
SizeofResource
FindResourceW
SetLastError
LoadResource
lstrcmpiW
wmadmod
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
wmasf
ASFGUIDToCodecID
winmm
waveOutGetNumDevs
waveOutGetID
Sections
.text Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 158KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ