Static task
static1
Behavioral task
behavioral1
Sample
e3a4074379c589625441dd1e6299c98285fb52d1977b2032443cd7976175cb66.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e3a4074379c589625441dd1e6299c98285fb52d1977b2032443cd7976175cb66.exe
Resource
win10v2004-20220901-en
General
-
Target
e3a4074379c589625441dd1e6299c98285fb52d1977b2032443cd7976175cb66
-
Size
357KB
-
MD5
0d251a79146418a9e226f7d2f8101207
-
SHA1
1389a91cc9545a6ad83164b1fb63f881cb58ca26
-
SHA256
e3a4074379c589625441dd1e6299c98285fb52d1977b2032443cd7976175cb66
-
SHA512
fdb71b920259da1363123e5ec6af92169bde52c77ee7e0ae042e3b4b49f88672c7fb3a5a56b551f5b40044b6d71fba6721dba60eb2eb560e8c705c1c7d9fa277
-
SSDEEP
6144:dF6VPouYU5SR4XmvwxIMWU2kRLBXM+y0SmApOq:dFuouRjQXkFx0mWOq
Malware Config
Signatures
Files
-
e3a4074379c589625441dd1e6299c98285fb52d1977b2032443cd7976175cb66.exe windows x86
8798997ae4ead18cf616897ae58dc3cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
OpenFile
GetModuleHandleA
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
TerminateProcess
UnhandledExceptionFilter
WinExec
WritePrivateProfileStringA
_hread
_lclose
_llseek
_lopen
_lread
lstrcatA
lstrcmpA
lstrcpyA
lstrcpynA
lstrlenA
GetModuleFileNameA
GetLastError
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
FreeResource
FindResourceA
VirtualAlloc
Sleep
GetStartupInfoW
GetCommandLineW
QueryPerformanceCounter
CreateFileW
user32
EnableWindow
EnableMenuItem
EndPaint
FillRect
FindWindowA
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDlgItemTextA
GetKeyNameTextA
GetMenu
GetMessageA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
GetWindowTextA
InvalidateRect
IsIconic
IsWindowVisible
LoadBitmapA
LoadCursorA
LoadStringA
MapVirtualKeyA
MessageBeep
MessageBoxA
MoveWindow
PeekMessageA
PostMessageA
PostQuitMessage
RedrawWindow
RegisterClassA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetCapture
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMessage
UnregisterClassA
UpdateWindow
WinHelpA
wsprintfA
DrawTextA
DrawMenuBar
DispatchMessageA
DialogBoxParamA
DialogBoxIndirectParamA
DestroyWindow
DeleteMenu
DefWindowProcA
CreateWindowExA
CheckMenuItem
ChangeDisplaySettingsA
BeginPaint
LoadCursorW
LoadIconW
LoadIconA
EndDialog
gdi32
RealizePalette
GetPaletteEntries
SelectPalette
SetPaletteEntries
GetObjectA
ResizePalette
GetStockObject
CreateCompatibleDC
CreateDIBitmap
DeleteDC
advapi32
RegOpenKeyW
RegOpenKeyA
shell32
ShellAboutA
msvcrt
memcpy
Sections
.text Size: 336KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 740B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 199B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
8 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
7 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
6 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
5 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
4 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ