Static task
static1
Behavioral task
behavioral1
Sample
e84314bd8e6d16c5f759c5295b1561fa9c000cb3ee594dfa7b6dcc4fb4abb28d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e84314bd8e6d16c5f759c5295b1561fa9c000cb3ee594dfa7b6dcc4fb4abb28d.exe
Resource
win10v2004-20221111-en
General
-
Target
e84314bd8e6d16c5f759c5295b1561fa9c000cb3ee594dfa7b6dcc4fb4abb28d
-
Size
502KB
-
MD5
e9aacff08be163162dd01acaf2fe9e76
-
SHA1
430d77ec921c55bb03fd37716b96aee6992393df
-
SHA256
e84314bd8e6d16c5f759c5295b1561fa9c000cb3ee594dfa7b6dcc4fb4abb28d
-
SHA512
585c135c010766acf261c4db360bbc6f0625df4cbfb6b67edc0334fea625949e1568f9241f7dc3bcca2a6b2f2ce4b87215200b89cde42c74698be581bfe12853
-
SSDEEP
6144:vwpJeUzgDpp405g9D2SEu5901EpH+K3mME48D/QV07zvnNeMwt:YpJD8DppJ5gEijxpC44O0H1eDt
Malware Config
Signatures
Files
-
e84314bd8e6d16c5f759c5295b1561fa9c000cb3ee594dfa7b6dcc4fb4abb28d.exe windows x86
c2612c9e39f395acf8621edd7858edf9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetSystemTime
HeapFree
HeapAlloc
WriteFile
DeleteFileA
GetTimeZoneInformation
LCMapStringW
CompareStringW
GetDriveTypeA
RemoveDirectoryA
ReadFile
SetEnvironmentVariableA
CreatePipe
CreateFileA
SetFilePointer
UnlockFile
LockFile
GetStringTypeW
HeapLock
HeapWalk
GetProcessHeap
HeapValidate
SetLocalTime
GetLogicalDrives
GetVersion
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputA
SetStdHandle
SystemTimeToFileTime
SetFileTime
GetLocalTime
GetFileType
GetFileInformationByHandle
FindNextFileA
HeapReAlloc
DuplicateHandle
GetStdHandle
GetExitCodeProcess
WriteConsoleA
FlushFileBuffers
SetEndOfFile
SetFileAttributesA
SetCurrentDirectoryA
GetConsoleMode
ReadConsoleA
SetConsoleMode
CloseHandle
ExitThread
CreateThread
GetFileAttributesA
RtlUnwind
GetCurrentThread
TlsFree
TlsSetValue
ExitProcess
GetCommandLineA
GetEnvironmentStrings
GetDiskFreeSpaceA
LocalFree
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
GetLastError
DisableThreadLibraryCalls
FreeLibrary
Sleep
QueryPerformanceCounter
GetCurrentProcess
SetUnhandledExceptionFilter
QueueUserWorkItem
VirtualLock
lstrcmpA
GetStartupInfoW
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
CreateProcessA
GetCPInfo
GetLocaleInfoW
IsValidCodePage
GetOEMCP
GetUserDefaultLCID
RaiseException
OutputDebugStringA
GetVersionExA
GetVersionExW
HeapDestroy
WideCharToMultiByte
HeapSize
SetLastError
FindResourceExW
GetThreadLocale
SetThreadLocale
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
lstrcmpiW
GetModuleHandleW
EnterCriticalSection
lstrlenW
LocalAlloc
EnumUILanguagesW
CreateFileW
GetFullPathNameW
ExpandEnvironmentStringsW
UnregisterWaitEx
RegisterWaitForSingleObject
WaitForSingleObject
CreateEventW
user32
FindWindowW
UnregisterClassA
CharNextW
GetParent
CallNextHookEx
SetParent
EnableWindow
GetShellWindow
advapi32
OpenProcessToken
GetLengthSid
CopySid
FreeSid
SetThreadToken
RevertToSelf
LogonUserW
RegConnectRegistryW
GetSecurityDescriptorOwner
GetTokenInformation
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
GetSecurityDescriptorDacl
GetAce
MapGenericMask
RegisterEventSourceW
DeregisterEventSource
OpenThreadToken
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
shell32
SHGetFileInfoW
ole32
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CoTaskMemAlloc
CoInitializeEx
msvcrt
memset
malloc
free
wcsncmp
iswspace
wcschr
crypt32
CertVerifyCertificateChainPolicy
CertGetCertificateContextProperty
CertFindCertificateInStore
CertOpenStore
CertGetNameStringW
CertGetEnhancedKeyUsage
CertFreeCertificateChain
CertFreeCertificateContext
CertFindExtension
CertCloseStore
rpcrt4
UuidCreate
ws2_32
getnameinfo
getaddrinfo
Sections
.text Size: 325KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE