Static task
static1
Behavioral task
behavioral1
Sample
e4191a1918604660732d74d64a1728e49bf6abcf744bec3f3fd8e106b2b45724.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4191a1918604660732d74d64a1728e49bf6abcf744bec3f3fd8e106b2b45724.exe
Resource
win10v2004-20221111-en
General
-
Target
e4191a1918604660732d74d64a1728e49bf6abcf744bec3f3fd8e106b2b45724
-
Size
711KB
-
MD5
c4becfbce2c772295b7a305421d1db99
-
SHA1
afe683651d6fd89ea4abb227654ee40732af3155
-
SHA256
e4191a1918604660732d74d64a1728e49bf6abcf744bec3f3fd8e106b2b45724
-
SHA512
afac1dcd4e4725056d4f9b1e7cc6fd241fc003215a24b74aad71394e9cf8d69201b29a1cfb1dbdfd80c537d516dcba6c2a472476f476e1fd8400513f1f14e9df
-
SSDEEP
12288:tBLtRmJNgjsneknOGAdhfgZmZwyxPQNTRF08oNYlqlUjNtEIf2xbH36LzW:3yJNndAdeZKwePQJro2lCUJtbgq3
Malware Config
Signatures
Files
-
e4191a1918604660732d74d64a1728e49bf6abcf744bec3f3fd8e106b2b45724.exe windows x86
a9b669b2435058a38f846351d8698cef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsProcessorFeaturePresent
EnumSystemLanguageGroupsW
GetCommTimeouts
user32
UpdateWindow
LoadCursorW
CheckDlgButton
RegisterClassW
LoadBitmapW
MessageBoxW
SendMessageW
MoveWindow
FrameRect
TranslateAcceleratorW
OffsetRect
wsprintfW
LoadAcceleratorsW
SetDlgItemTextW
PostMessageW
GetClientRect
CheckRadioButton
GetDlgItem
GetForegroundWindow
DispatchMessageW
GetDesktopWindow
DialogBoxParamW
DrawMenuBar
GetSystemMetrics
InvalidateRect
DrawTextW
SetCapture
BeginPaint
GetWindowPlacement
LoadIconW
DefWindowProcW
WinHelpW
IsDlgButtonChecked
ShowWindow
CreateWindowExW
InvertRect
EndPaint
SetRect
PeekMessageW
GetMenu
GetDlgItemTextW
IntersectRect
EnableMenuItem
ReleaseCapture
GetSubMenu
FillRect
PtInRect
GetDC
IsZoomed
GetWindowRect
GetMessageW
EndDialog
UnionRect
ReleaseDC
DestroyWindow
WaitMessage
iphlpapi
SetIfEntry
imm32
ImmSimulateHotKey
comctl32
InitCommonControlsEx
Sections
.text Size: 233KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 211KB - Virtual size: 566KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 241KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ