Static task
static1
Behavioral task
behavioral1
Sample
e07588a57192eca3f3fee1987b649a27220c0000ba6bfcd4e658daf29407a631.exe
Resource
win7-20221111-en
General
-
Target
e07588a57192eca3f3fee1987b649a27220c0000ba6bfcd4e658daf29407a631
-
Size
3.4MB
-
MD5
e7c0319a9fbf6fee62e794865e199179
-
SHA1
931346c126a6dc33215919c76707a42189fc4bfc
-
SHA256
e07588a57192eca3f3fee1987b649a27220c0000ba6bfcd4e658daf29407a631
-
SHA512
ffcfb6bf5cd59d981f1be833e61b806867f59f3ae6c4a0fa10769561247ccd0699ea0bfce13d62c5a93dc8ba858b332ae003d2ad2d594710a3d3102db78995ea
-
SSDEEP
98304:O+NtsbZj4LR1I5j3YPi8fUlgMSucqCLFjAR3ar8xdMY+Pr8lHbIlHyR6limIRvOv:OEtqZEnIHjbMy+3
Malware Config
Signatures
Files
-
e07588a57192eca3f3fee1987b649a27220c0000ba6bfcd4e658daf29407a631.exe windows x86
d1f9cd3dcacf2d400394faa92fdb03ab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount64
GetProcessHeap
ExitThread
AddVectoredExceptionHandler
HeapAlloc
HeapFree
DeleteCriticalSection
GetLastError
CreateMutexA
Wow64DisableWow64FsRedirection
Sleep
GetModuleHandleExW
ExitProcess
InterlockedCompareExchange
SetLastError
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
SystemTimeToFileTime
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
IsBadReadPtr
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
GetFileAttributesA
DisableThreadLibraryCalls
GetTempPathA
GetProcAddress
LoadLibraryA
RemoveDirectoryA
ResumeThread
CloseHandle
IsWow64Process
GetTickCount
GetCurrentThreadId
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
SetEndOfFile
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
advapi32
RegEnumKeyW
RegOpenKeyA
RegQueryInfoKeyW
RegCreateKeyW
RegQueryValueExW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyW
user32
DispatchMessageW
AppendMenuW
PostMessageW
FindWindowA
DestroyWindow
GetClientRect
PeekMessageA
DispatchMessageA
CreatePopupMenu
MessageBoxW
GetWindowRect
SetForegroundWindow
LoadIconW
LoadIconA
RegisterClassExA
CheckMenuItem
UpdateWindow
MsgWaitForMultipleObjects
GetWindowTextA
RedrawWindow
TrackPopupMenu
SendMessageA
RegisterClassExW
GetWindowTextW
RegisterWindowMessageA
BringWindowToTop
AppendMenuA
SendMessageW
PostQuitMessage
GetSystemMetrics
FindWindowW
SetWindowPos
PostMessageA
RegisterWindowMessageW
Sections
.text Size: 571KB - Virtual size: 571KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ