Static task
static1
Behavioral task
behavioral1
Sample
eb77f808aebcff6fdbd5e0631a52adea6e51c680fd4cb851fef0d724b2f75bc3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eb77f808aebcff6fdbd5e0631a52adea6e51c680fd4cb851fef0d724b2f75bc3.exe
Resource
win10v2004-20221111-en
General
-
Target
eb77f808aebcff6fdbd5e0631a52adea6e51c680fd4cb851fef0d724b2f75bc3
-
Size
548KB
-
MD5
50d26d8d71c9eb415826e3c38c67c4ef
-
SHA1
d6f8b7fff18c738824c681a7d23240b33e042d56
-
SHA256
eb77f808aebcff6fdbd5e0631a52adea6e51c680fd4cb851fef0d724b2f75bc3
-
SHA512
3d19e11c4f9bfbd9b8b662347488f36d3a48c49f7062626b031703afb40e847ffaa25743c5830f2e40c9359cc5abe32b922c1ba167349b2eef7e93457e33d69b
-
SSDEEP
12288:/zqXo5Y4KPiHkDPRZT0xH/MW/Wm7MDgTuaZxZMma:bv5Y4rSPRuJt7kgqSM
Malware Config
Signatures
Files
-
eb77f808aebcff6fdbd5e0631a52adea6e51c680fd4cb851fef0d724b2f75bc3.exe windows x86
d10109842c58e9656992fc92257ec4d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DragAcceptFiles
DragQueryFileA
DragFinish
user32
SetRect
SetWindowWord
UpdateWindow
GetWindowWord
RegisterClassA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
CreateWindowExA
InvalidateRect
DestroyWindow
ShowWindow
CreateDialogParamA
EnumChildWindows
CallWindowProcA
GetCursorPos
SetCursorPos
LoadCursorA
SetCursor
GetActiveWindow
CharUpperA
CharToOemA
EnumWindows
GetLastActivePopup
PostMessageA
GetPropA
SetWindowsHookA
LoadStringA
DialogBoxParamA
UnhookWindowsHook
SetWindowTextA
GetWindowTextA
LoadIconA
GetWindowLongA
SetWindowLongA
SendMessageA
SetPropA
GetDlgItem
SendDlgItemMessageA
CheckRadioButton
EnableWindow
OemToCharA
SetActiveWindow
GetDlgItemTextA
SetFocus
BringWindowToTop
SetForegroundWindow
EndDialog
DestroyIcon
RemovePropA
GetSysColor
GetClientRect
BeginPaint
EndPaint
DefWindowProcA
SetDlgItemTextA
SetWindowPos
wsprintfA
MessageBoxA
SystemParametersInfoA
GetClassNameA
IsWindow
DispatchMessageA
GetSystemMetrics
GetWindowRect
MoveWindow
PeekMessageA
TranslateMessage
kernel32
GetCurrentProcess
HeapReAlloc
GlobalSize
TerminateProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
ReadFile
SetEndOfFile
GetLocaleInfoW
FlushFileBuffers
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsBadCodePtr
GetOEMCP
VirtualQuery
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
GetTimeZoneInformation
SetStdHandle
VirtualAlloc
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
SetUnhandledExceptionFilter
HeapSize
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
lstrcpyA
lstrlenA
WinExec
GlobalDeleteAtom
GlobalGetAtomNameA
GetDriveTypeA
GetVersionExA
GetModuleFileNameA
FreeLibrary
GetACP
GetProcAddress
LoadLibraryA
SetErrorMode
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
GetTickCount
CloseHandle
GetFileSize
CreateFileA
GlobalAddAtomA
GetVersion
lstrcatA
SetCurrentDirectoryA
IsBadReadPtr
LocalFree
FormatMessageA
GetLastError
GlobalMemoryStatus
GetLocalTime
GetVolumeInformationA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
DeleteFileA
GlobalHandle
GetPrivateProfileIntA
GetPrivateProfileStringA
ExitProcess
FileTimeToSystemTime
DosDateTimeToFileTime
GetSystemTime
SystemTimeToFileTime
FileTimeToDosDateTime
GetDateFormatA
GetTimeFormatA
WideCharToMultiByte
IsBadWritePtr
GetFullPathNameA
GetShortPathNameA
FindClose
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
RtlUnwind
RaiseException
HeapCompact
HeapFree
HeapAlloc
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentDirectoryA
gdi32
MoveToEx
LineTo
SetTextColor
SelectObject
SetBkColor
DeleteObject
SetTextAlign
GetBkColor
GetTextExtentPoint32A
ExtTextOutA
CreateDCA
GetDeviceCaps
CreateFontIndirectA
DeleteDC
CreatePen
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegEnumValueA
RegCloseKey
RegDeleteKeyA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Sections
.text Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�Z� Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE