Static task
static1
Behavioral task
behavioral1
Sample
e25b694ebd3abde263525349f5c5a95d3c66ad36f53e6a3531d3197c8b7582a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e25b694ebd3abde263525349f5c5a95d3c66ad36f53e6a3531d3197c8b7582a0.exe
Resource
win10v2004-20220812-en
General
-
Target
e25b694ebd3abde263525349f5c5a95d3c66ad36f53e6a3531d3197c8b7582a0
-
Size
2.4MB
-
MD5
08cdaf21a8c69feccdcdb06599dba212
-
SHA1
127110792452711bc78fdd5c42bdc719d2819b9e
-
SHA256
e25b694ebd3abde263525349f5c5a95d3c66ad36f53e6a3531d3197c8b7582a0
-
SHA512
b1180310e40c884cb0236dbc9f9250737967b43b7ff11524eae7c33ac0fb46696116b8c9026dec70e5aca481d04b6bbe9dda81df0d0895a1231797684290dbd2
-
SSDEEP
49152:eco0NfwUkIt1MarJ9Wi/RKw2wEGQufJGfiRgCZGcAGXZ/SU3GouSlWAmEL:C4f1M2SwycJuiRgCdAGvuomEL
Malware Config
Signatures
Files
-
e25b694ebd3abde263525349f5c5a95d3c66ad36f53e6a3531d3197c8b7582a0.exe windows x86
a99d43a2208ba500be06fb21657aa5e0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
CloseHandle
DeleteFileW
SetFileAttributesW
lstrcpyW
CreateMutexW
FindFirstFileW
MapViewOfFile
UnmapViewOfFile
FreeLibrary
CreateDirectoryW
GetModuleHandleW
ReadFile
WritePrivateProfileStringW
FindClose
CreateFileMappingW
GetSystemInfo
FindNextFileW
ReleaseMutex
GetDriveTypeW
Sleep
LeaveCriticalSection
FlushInstructionCache
SetLastError
lstrcmpiA
EnterCriticalSection
DeviceIoControl
GetCurrentThreadId
GlobalReAlloc
CreateThread
lstrcatW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LoadLibraryExW
lstrcmpW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetStdHandle
GetStartupInfoW
DecodePointer
GlobalFree
HeapSize
GetProcAddress
GetLastError
VerifyVersionInfoW
RaiseException
GlobalUnlock
lstrlenW
InitializeCriticalSectionEx
MultiByteToWideChar
CreateFileW
GetModuleFileNameW
MulDiv
HeapReAlloc
LoadLibraryW
GlobalAlloc
WriteFile
GetProcessHeap
GlobalLock
HeapFree
GetCurrentProcess
MoveFileExW
VerSetConditionMask
HeapAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleExW
ExitProcess
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
RtlUnwind
GetCommandLineA
GetSystemTimeAsFileTime
EncodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
LCMapStringW
WaitNamedPipeW
GetExitCodeProcess
OpenMutexW
SetNamedPipeHandleState
WideCharToMultiByte
user32
GetDesktopWindow
ReleaseDC
SendMessageW
MessageBoxW
MapDialogRect
LoadImageW
DialogBoxIndirectParamW
SetRect
GetDlgItem
SetWindowLongW
EndDialog
SendDlgItemMessageW
ShowWindow
IsDlgButtonChecked
GetActiveWindow
CreateWindowExW
CheckRadioButton
GetDlgItemTextW
SetDlgItemTextW
EnableWindow
GetDlgCtrlID
UnregisterClassW
wsprintfW
GetDC
gdi32
SetBkColor
DeleteObject
CreateFontW
CreateSolidBrush
EnumFontFamiliesW
GetDeviceCaps
SetTextColor
advapi32
RegOpenKeyExW
ControlService
RegDeleteTreeW
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle
CreateServiceW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
shell32
ord75
SHFileOperationW
SHChangeNotify
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
CoInitializeEx
CLSIDFromString
shlwapi
PathFindFileNameW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
comctl32
ord17
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ