Static task
static1
Behavioral task
behavioral1
Sample
e306364403f12fe368da4922cfc93855465ff867b115a8c92e9ea02414d33705.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e306364403f12fe368da4922cfc93855465ff867b115a8c92e9ea02414d33705.exe
Resource
win10v2004-20220812-en
General
-
Target
e306364403f12fe368da4922cfc93855465ff867b115a8c92e9ea02414d33705
-
Size
383KB
-
MD5
0cf3e1440a3b18a12b1680d49c9db840
-
SHA1
7817de23b158b3a0b9cc2c1f1de8b10f395e9526
-
SHA256
e306364403f12fe368da4922cfc93855465ff867b115a8c92e9ea02414d33705
-
SHA512
96ca7a1cf809d8a63158098a2cf9e51dae5426068bbbc81d0c93f52a86928c48d93ad0a0aedd9f030a2fd6f61fa52ffb9a9b94708c269bd799ec4dd10500e0f4
-
SSDEEP
6144:6TD7vupIEwUT/FhnaLGemA78YJldXDdI18BddNM70watmvMgxbE:6TvvwXpTdhaLGemA78YJfXDdnfdeDvfQ
Malware Config
Signatures
Files
-
e306364403f12fe368da4922cfc93855465ff867b115a8c92e9ea02414d33705.exe windows x86
52b15d1668cbfdd22789bc7b43b254a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
hccutils
LoadICON
GetMyRegKey
LoadBITMAP
LoadSTRINGW
InitializeKeyHook
FindResources
LoadSTRINGFromHKCU
LoadSTRING
kernel32
GetUserDefaultLCID
GetProcAddress
GetModuleHandleA
CreateProcessA
lstrcpynA
FreeLibrary
LoadLibraryA
GetVersionExA
CloseHandle
GetLastError
CreateEventA
GetSystemPowerStatus
InterlockedDecrement
SearchPathA
CompareFileTime
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
lstrlenA
lstrcmpiA
InterlockedIncrement
GetModuleFileNameA
GetModuleHandleW
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetWindowsDirectoryA
Sleep
CreateMutexA
GetCurrentThreadId
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoA
GetCurrentProcessId
EnumSystemLocalesA
SetFilePointer
FlushFileBuffers
SetStdHandle
CreateFileA
GetConsoleMode
GetConsoleCP
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
SetConsoleCtrlHandler
SetEnvironmentVariableA
CompareStringW
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
HeapReAlloc
HeapDestroy
HeapCreate
GetModuleFileNameW
WriteFile
GetFileType
GetStdHandle
SetHandleCount
FatalAppExitA
ExitProcess
GetStringTypeW
LCMapStringW
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
IsValidLocale
ReadFile
WriteConsoleW
SetEndOfFile
VirtualFree
CreateFileW
IsProcessorFeaturePresent
InterlockedCompareExchange
InterlockedPushEntrySList
HeapFree
GetProcessHeap
SetLastError
GetStartupInfoW
HeapSetInformation
DecodePointer
EncodePointer
VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
LocalFree
InterlockedPopEntrySList
VirtualAlloc
HeapAlloc
user32
PostThreadMessageA
SendMessageA
UnregisterClassA
wsprintfA
CharNextW
GetWindowLongW
GetCursorPos
GetDlgCtrlID
EnumDisplayDevicesA
EnumDisplaySettingsA
PeekMessageA
MessageBoxA
CallWindowProcA
GetWindowLongA
RegisterClassExA
PostMessageA
UnregisterHotKey
RegisterHotKey
LoadKeyboardLayoutA
ActivateKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
GetKeyboardLayout
GetKeyboardLayoutList
LoadCursorA
GetClassInfoExA
SetWindowLongA
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA
FindWindowA
SetWindowTextA
IsWindow
CreateDialogParamA
ShowWindow
PostQuitMessage
DefWindowProcA
DestroyWindow
GetDlgItem
GetDesktopWindow
GetWindowRect
CharNextA
advapi32
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteExA
ole32
CoCreateInstance
CoRevokeClassObject
CoTaskMemRealloc
CoSuspendClassObjects
CoTaskMemAlloc
CoRegisterClassObject
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoInitialize
oleaut32
VariantClear
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysAllocString
SysStringLen
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
GetErrorInfo
VariantChangeType
VariantInit
SetErrorInfo
CreateErrorInfo
Sections
.text Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE