Static task
static1
Behavioral task
behavioral1
Sample
e4f06a8739cc29821e7e503f259985d01475a58297cb740e848e177d4f2ee06a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e4f06a8739cc29821e7e503f259985d01475a58297cb740e848e177d4f2ee06a.exe
Resource
win10v2004-20220812-en
General
-
Target
e4f06a8739cc29821e7e503f259985d01475a58297cb740e848e177d4f2ee06a
-
Size
712KB
-
MD5
56bf0aff25582874b2b234454c72810a
-
SHA1
4e6011a1632c7a296b69fd79f280f184dcd900ec
-
SHA256
e4f06a8739cc29821e7e503f259985d01475a58297cb740e848e177d4f2ee06a
-
SHA512
5e6fe72530a3505c3339e9c3c889136335625bffe3416132262e6e845b93ffdd9a783b1936583f1fbfc2a45eb8ba4afc7cc8bab687f4d6bc3d9244a67ba57ce4
-
SSDEEP
12288:Al0BphXYn4hTndwoS7v+W5oDnNb4Y8TMpl:20zhXDTEr+lbV8w
Malware Config
Signatures
Files
-
e4f06a8739cc29821e7e503f259985d01475a58297cb740e848e177d4f2ee06a.exe windows x86
7b30e70f1c661bbd4f36a6404d0bafdb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeW
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesW
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameW
GetTickCount
GetVersionExA
GetVolumeInformationW
GetVolumeNameForVolumeMountPointW
GetVolumePathNameW
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
FlushFileBuffers
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
GetCommandLineW
LocalAlloc
LocalFree
MultiByteToWideChar
QueryDosDeviceW
QueryPerformanceCounter
ReadConsoleA
RemoveDirectoryW
SetConsoleMode
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
TryEnterCriticalSection
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcatW
lstrcmpW
lstrcpyW
lstrlenA
lstrlenW
FindVolumeClose
FindNextVolumeW
FindNextFileW
FindFirstVolumeW
FindFirstFileW
FindClose
FileTimeToSystemTime
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LoadLibraryW
FormatMessageW
EnterCriticalSection
DeviceIoControl
DeleteCriticalSection
CreateDirectoryW
CloseHandle
VirtualAllocEx
GetModuleHandleW
GetFileAttributesA
GetCommandLineA
CreateFileW
InterlockedExchangeAdd
Sleep
user32
LoadIconW
GetMenu
EnableMenuItem
LoadIconA
MessageBoxW
wsprintfW
gdi32
CloseEnhMetaFile
EndPage
DeleteDC
DeleteColorSpace
advapi32
QueryUsersOnEncryptedFile
FreeEncryptionCertificateHashList
EncryptFileW
DecryptFileW
CryptReleaseContext
CryptGetUserKey
CryptGenKey
CryptDestroyKey
CryptAcquireContextW
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExW
RegQueryValueExW
RegSetValueExA
SetUserFileEncryptionKey
GetUserNameW
shell32
CommandLineToArgvW
ole32
CoRevokeClassObject
CoRegisterClassObject
CoInitializeSecurity
CoInitialize
StringFromGUID2
winmm
timeGetTime
msvcrt
wcschr
wcscat
towupper
wcscmp
wcscpy
wcslen
_XcptFilter
__getmainargs
__initenv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_get_osfhandle
_initterm
_iob
_putws
_wcsicmp
_wcsnicmp
exit
fgetws
free
malloc
printf
swprintf
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 669KB - Virtual size: 669KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ