?EcrubalkRiskLogsglugdevre@@YGGKPCULoveBoomSimasagemud@@PCUGlamglimJessdew@@GACMM@Z
Static task
static1
Behavioral task
behavioral1
Sample
af051edd9d66b7e06de0821b2d0ccbcab88e033948eaf90f19296294dfee9b6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af051edd9d66b7e06de0821b2d0ccbcab88e033948eaf90f19296294dfee9b6c.exe
Resource
win10v2004-20220901-en
General
-
Target
af051edd9d66b7e06de0821b2d0ccbcab88e033948eaf90f19296294dfee9b6c
-
Size
197KB
-
MD5
09e5b5e6c1f46d23971fa2fe140a7213
-
SHA1
d478b73f3d8324a704dfbacdebf925f698724dc1
-
SHA256
af051edd9d66b7e06de0821b2d0ccbcab88e033948eaf90f19296294dfee9b6c
-
SHA512
0b6690845accf5a357dd4429a6e48af00d392e1cb9edfda405c93a511648711b085ca69eaa55f1a8e1f330541a707dec53963cb9fd5d586a80813b65cd5a18ec
-
SSDEEP
6144:b1eQv9KXDvnc3Zxb/kAKhkeYxvpubBdXStfaet2XYNqEzFHN:I7XDvnSbH6Qkd5Stksq4
Malware Config
Signatures
Files
-
af051edd9d66b7e06de0821b2d0ccbcab88e033948eaf90f19296294dfee9b6c.exe windows x86
91757f754477eb5cab3282fbf28de9a5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAppendA
PathIsPrefixW
kernel32
OpenEventA
RemoveDirectoryW
QueryDosDeviceW
EnumResourceTypesW
OpenFileMappingW
ReleaseMutex
DeleteFileW
GetCurrentProcessId
DebugBreak
LocalFileTimeToFileTime
SetThreadContext
FindFirstFileW
GetLogicalDriveStringsW
CreateDirectoryW
GetConsoleAliasesLengthA
FindFirstVolumeMountPointW
CreateProcessA
GetFileType
GetNumberFormatW
SetEnvironmentVariableA
FreeEnvironmentStringsW
lstrcmpA
GlobalSize
GetStringTypeExW
LocalAlloc
CreateEventW
ExitProcess
lstrlenA
GetProfileStringW
GetCommandLineA
VerifyVersionInfoW
GetComputerNameExW
SetFileAttributesA
DeleteFileA
UnhandledExceptionFilter
WriteConsoleA
FindClose
GetCurrentDirectoryW
GetStdHandle
GetACP
GetEnvironmentVariableA
GetBinaryTypeW
GetBinaryTypeA
SetConsoleCursorPosition
GetFileAttributesA
GetSystemWindowsDirectoryA
GetVolumeInformationA
GetPrivateProfileStringW
GetEnvironmentStringsW
SetConsoleTextAttribute
SetWaitableTimer
SetEndOfFile
lstrcpynA
GetProfileIntW
VirtualQuery
DosDateTimeToFileTime
GetComputerNameA
MulDiv
user32
TranslateAcceleratorA
EmptyClipboard
EnableMenuItem
CascadeWindows
GetScrollInfo
DdeQueryConvInfo
MapVirtualKeyExW
SetLastErrorEx
SetPropA
CreateDialogIndirectParamW
TranslateMessage
WaitMessage
CharLowerW
BeginPaint
RegisterWindowMessageA
DrawEdge
CharNextA
WindowFromPoint
CharLowerBuffW
wsprintfA
DdeKeepStringHandle
DdeInitializeA
GetClipCursor
CallNextHookEx
IsHungAppWindow
IsClipboardFormatAvailable
LoadBitmapA
ReplyMessage
DrawTextA
SendNotifyMessageA
UnregisterClassW
LoadImageW
IsCharAlphaA
DdeCreateStringHandleW
GetThreadDesktop
CharNextW
CreateDialogParamA
PostThreadMessageA
SetTimer
GetNextDlgGroupItem
DestroyAcceleratorTable
GetUpdateRgn
CloseClipboard
EnumDisplayMonitors
DrawAnimatedRects
UnloadKeyboardLayout
DispatchMessageW
ModifyMenuA
WinHelpW
SetMenuItemInfoW
DrawFrameControl
SetClipboardViewer
CreateDialogParamW
GetDlgItem
GetForegroundWindow
ChildWindowFromPoint
GetClassInfoW
GetMonitorInfoA
GetDoubleClickTime
LoadCursorW
GetClassInfoExA
GetActiveWindow
GetMenu
keybd_event
RegisterClassA
DefWindowProcW
DialogBoxParamA
LoadCursorA
FindWindowA
HiliteMenuItem
CreateIconFromResource
CharLowerBuffA
SetClassLongA
PeekMessageW
MapVirtualKeyA
DdeFreeStringHandle
GrayStringA
GetMenuState
ChangeClipboardChain
IsWindowUnicode
CharUpperW
RegisterDeviceNotificationW
SetWindowsHookExA
BroadcastSystemMessageW
DestroyCaret
GetSysColorBrush
IsDlgButtonChecked
AppendMenuA
CreateCaret
wvsprintfA
CreateWindowExW
SetMenuDefaultItem
PostThreadMessageW
DeferWindowPos
DdeConnect
SystemParametersInfoA
InsertMenuA
RegisterClipboardFormatW
SetDlgItemTextW
UnregisterDeviceNotification
GetDlgItemTextA
SetWindowTextW
GetProcessDefaultLayout
GetDialogBaseUnits
GetClipboardOwner
CopyRect
VkKeyScanA
RegisterDeviceNotificationA
GetWindowThreadProcessId
ToUnicodeEx
gdi32
GetTextColor
CreateDiscardableBitmap
TextOutW
CreateDIBitmap
GetFontData
SetViewportExtEx
GetTextExtentExPointA
GetObjectW
SaveDC
DeleteMetaFile
OffsetRgn
PlayEnhMetaFile
DeleteObject
UnrealizeObject
GetTextFaceA
SetBkColor
GetMetaFileBitsEx
GetEnhMetaFileBits
LineTo
EnumFontFamiliesW
GetStockObject
PtVisible
StartPage
PathToRegion
Rectangle
CreateCompatibleBitmap
GetTextExtentPoint32W
GetWindowOrgEx
ole32
CoBuildVersion
CoInitialize
OleIsCurrentClipboard
Exports
Exports
Sections
.itext Size: 28KB - Virtual size: 27KB
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 157B
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.follow Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.micro Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ