Static task
static1
Behavioral task
behavioral1
Sample
e4565b29f687b5bce49974fec485c8e9cb9b308ccd9ffc3e1abb8d9c6355cf30.exe
Resource
win10-20220812-en
General
-
Target
e4565b29f687b5bce49974fec485c8e9cb9b308ccd9ffc3e1abb8d9c6355cf30
-
Size
234KB
-
MD5
ebe1870be2fa78527fec23e2100a051e
-
SHA1
eb593043f75a28dbd01f2d9e1298479a7e0b178d
-
SHA256
e4565b29f687b5bce49974fec485c8e9cb9b308ccd9ffc3e1abb8d9c6355cf30
-
SHA512
4bca49294680089a42d92098846cb11e211805a6593e36bb3d106aa1d6b546cfaa7e60cdec6751d3ef7ae3b3673c5a7de63c5ec709980d2b2c69ab099e3289d6
-
SSDEEP
3072:TFf1Oly4I34rutyAA/V0BV8lUkOnFXpnahpDI6RFlScQqiBAXgV0Bx92eedDyYcQ:TiI3QBgMqFl2cMlScQq192e+CfFRw
Malware Config
Signatures
Files
-
e4565b29f687b5bce49974fec485c8e9cb9b308ccd9ffc3e1abb8d9c6355cf30.exe windows x86
8c8508edec1c956004908c27f8edc2f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
MultiByteToWideChar
ReadConsoleW
SetInformationJobObject
VerLanguageNameW
SetFileValidData
LockFile
InitializeCriticalSection
GetFileSize
GetPriorityClass
WriteConsoleOutputCharacterW
AreFileApisANSI
GetThreadPriority
CreateEventW
GetNativeSystemInfo
SetEndOfFile
GetTapeParameters
FreeConsole
lstrcmpW
AssignProcessToJobObject
DeleteAtom
GetLogicalDrives
AddAtomW
GetCurrentProcessId
GetNumaNodeProcessorMask
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapSize
HeapReAlloc
GetProcAddress
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
InterlockedDecrement
GetLastError
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
GetCommandLineA
RaiseException
RtlUnwind
VirtualAlloc
Sleep
user32
UnregisterClassA
CheckRadioButton
IsWindow
GetSystemMetrics
EnableWindow
GetWindowTextA
RedrawWindow
FindWindowA
SetWindowPos
wvsprintfA
GetWindowLongA
SetCursor
GetSysColorBrush
DialogBoxParamA
DestroyAcceleratorTable
DispatchMessageA
TranslateMessage
LoadIconA
SetClipboardData
SetFocus
CharUpperA
OpenClipboard
IsDialogMessageA
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
RemoveMenu
InvalidateRect
ChildWindowFromPoint
PostMessageA
DestroyCursor
CreateDialogParamA
GetWindowRect
IsMenu
GetSubMenu
SetDlgItemInt
GetWindowPlacement
CharLowerBuffA
EnableMenuItem
CheckMenuRadioItem
GetSysColor
KillTimer
DestroyIcon
DestroyWindow
PostQuitMessage
GetClientRect
MoveWindow
GetSystemMenu
SetTimer
SetWindowPlacement
InsertMenuItemA
GetMenu
CheckMenuItem
SetMenuItemInfoA
SetActiveWindow
DefDlgProcA
RegisterClassA
EndDialog
SetDlgItemTextA
EnumClipboardFormats
GetClipboardData
CloseClipboard
GetClassInfoA
CallWindowProcA
SetWindowLongA
IsDlgButtonChecked
SetWindowTextA
CheckDlgButton
GetActiveWindow
LoadCursorA
MessageBoxA
wsprintfA
GetDlgItemTextA
SendMessageA
GetCursorPos
TrackPopupMenu
ClientToScreen
DestroyMenu
CreatePopupMenu
AppendMenuA
SendDlgItemMessageA
GetDlgItem
EmptyClipboard
advapi32
DecryptFileW
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 143KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE