Static task
static1
Behavioral task
behavioral1
Sample
e4955fd24afbcdf42cee559401d50e361fe048e7efbb46881c009ca200e12120.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4955fd24afbcdf42cee559401d50e361fe048e7efbb46881c009ca200e12120.exe
Resource
win10v2004-20220812-en
General
-
Target
e4955fd24afbcdf42cee559401d50e361fe048e7efbb46881c009ca200e12120
-
Size
1.4MB
-
MD5
74f36bd1eea21d7b8c7bfd3b601f3fe7
-
SHA1
013d7b9629414f2d3283766701056f50b4bf3ce1
-
SHA256
e4955fd24afbcdf42cee559401d50e361fe048e7efbb46881c009ca200e12120
-
SHA512
fa7bd6f187f54df11eb16f8f85f28367fe88d0b77e03b12e47dd6573d95934c654690d4b520a5805479f1b51d16aa2551d41cde8c00a81240e764715a166ab01
-
SSDEEP
24576:Bc1j8Q8XyMXIAKt/Ko66MBVjkKCMSFxbu7ybq6j3QDkdMX:BXQHKo66AYMu3q6j38AI
Malware Config
Signatures
Files
-
e4955fd24afbcdf42cee559401d50e361fe048e7efbb46881c009ca200e12120.exe windows x86
4c1534512bedcf1a768787f72677747f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
VirtualAlloc
IsBadWritePtr
Sleep
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
FormatMessageA
WaitForSingleObject
GetModuleFileNameA
GetFileAttributesA
QueryPerformanceCounter
GetLastError
CreateDirectoryA
PulseEvent
InterlockedExchange
SleepEx
OutputDebugStringW
GetTickCount
GetCommandLineA
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
CloseHandle
WriteConsoleA
SetCurrentDirectoryA
GetNumberOfConsoleInputEvents
PeekConsoleInputA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
ReleaseMutex
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
DeviceIoControl
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetDiskFreeSpaceA
DefineDosDeviceA
GetDiskFreeSpaceExA
SetVolumeLabelA
QueryDosDeviceW
QueryDosDeviceA
GetLogicalDrives
GetDriveTypeW
GetDriveTypeA
GetFileInformationByHandle
GetCurrentProcessId
OpenProcess
GetProfileStringA
GetComputerNameW
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
FormatMessageW
FindResourceExA
LoadLibraryW
GetSystemInfo
MoveFileExW
MoveFileExA
FindFirstFileW
FindNextFileW
FindNextFileA
RemoveDirectoryW
CopyFileW
CreateDirectoryW
RemoveDirectoryA
MoveFileW
DeleteFileW
GetFileAttributesW
SetFileAttributesW
CreateFileW
GetEnvironmentVariableW
GetTempPathW
GetTempPathA
GetCurrentDirectoryW
GetModuleFileNameW
GetSystemDirectoryW
ExpandEnvironmentStringsW
GetSystemDirectoryA
ExpandEnvironmentStringsA
GetExitCodeThread
WaitForMultipleObjects
TerminateThread
ResetEvent
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
CreateEventA
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
FileTimeToSystemTime
FileTimeToLocalFileTime
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
GetVersion
FreeLibrary
LoadLibraryA
SetLastError
MulDiv
lstrcpynA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
GetProcessVersion
SizeofResource
GetThreadLocale
GetCPInfo
GetOEMCP
DuplicateHandle
GetCurrentProcess
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
DeleteFileA
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetShortPathNameA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
SetErrorMode
lstrlenW
GlobalSize
CopyFileA
RtlUnwind
GetStartupInfoA
GetVersionExA
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
FatalAppExitA
HeapSize
HeapReAlloc
GetFileType
SetStdHandle
RaiseException
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapAlloc
ExitThread
CreateThread
TerminateProcess
HeapFree
ExitProcess
LocalFree
user32
GetDlgItemTextA
MessageBoxA
LoadIconA
SetTimer
SendMessageA
GetProcessWindowStation
GetUserObjectInformationW
DrawIcon
GetClientRect
GetDlgItemInt
SetDlgItemInt
CheckDlgButton
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
MoveWindow
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
CheckRadioButton
SetWindowTextA
ScrollWindow
GetScrollInfo
SetScrollInfo
GetWindowDC
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetSystemMetrics
IsIconic
KillTimer
PostMessageA
ScreenToClient
ShowWindow
wvsprintfA
EqualRect
ClientToScreen
DestroyIcon
PostThreadMessageA
RemoveMenu
AppendMenuA
GetCursorPos
EnableWindow
CharToOemA
OemToCharA
LoadStringA
UnhookWindowsHookEx
PostQuitMessage
ShowOwnedPopups
SetCursor
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
PeekMessageA
UnregisterClassA
MsgWaitForMultipleObjects
CharToOemBuffA
OemToCharBuffA
HideCaret
ShowCaret
ExcludeUpdateRgn
ShowScrollBar
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
SetCapture
ReleaseCapture
WaitMessage
GetDesktopWindow
GetWindowThreadProcessId
WindowFromPoint
GetClassNameA
PtInRect
InsertMenuA
DeleteMenu
GetMenuStringA
GetSysColorBrush
GetDialogBaseUnits
InflateRect
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
DestroyMenu
CharUpperA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
RegisterClipboardFormatA
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
wsprintfA
CopyRect
GetDC
ReleaseDC
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
CloseDesktop
EnumDesktopWindows
OpenDesktopA
gdi32
CreateCompatibleDC
CreateDIBitmap
GetBitmapBits
CreateCompatibleBitmap
BitBlt
GetTextExtentPointA
CreateDCA
CopyMetaFileA
LPtoDP
GetBkColor
GetTextColor
DPtoLP
CombineRgn
SetRectRgn
GetMapMode
CreateFontIndirectA
GetTextMetricsA
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
DeleteObject
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateRectRgnIndirect
PatBlt
CreateBitmap
comdlg32
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegCreateKeyExA
RegOpenKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExW
RegConnectRegistryA
OpenProcessToken
GetTokenInformation
LookupAccountSidA
GetUserNameA
RegCreateKeyExW
RegCreateKeyW
RegQueryValueExW
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegEnumKeyA
RegCreateKeyA
shell32
DragQueryFileA
DragFinish
SHGetFileInfoA
DragAcceptFiles
ExtractIconA
comctl32
ImageList_Destroy
ord14
ord13
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write
ord17
oledlg
ord8
ole32
SetConvertStg
CreateBindCtx
OleDuplicateData
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoDisconnectObject
OleRun
WriteFmtUserTypeStg
CoTaskMemAlloc
CreateStreamOnHGlobal
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
ReleaseStgMedium
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoCreateInstance
olepro32
ord253
oleaut32
VariantInit
CreateErrorInfo
SetErrorInfo
GetErrorInfo
LoadTypeLi
SysStringLen
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysStringByteLen
SysAllocStringByteLen
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysReAllocStringLen
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
ws2_32
inet_addr
WSAStartup
ntohl
gethostbyname
htonl
inet_ntoa
rpcrt4
RpcStringFreeA
UuidCreate
UuidToStringA
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ