Static task
static1
Behavioral task
behavioral1
Sample
0e7d46996f91cb28c03bd44274468b50035278a2766d11d0015b53df57f33cab.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0e7d46996f91cb28c03bd44274468b50035278a2766d11d0015b53df57f33cab.exe
Resource
win10v2004-20221111-en
General
-
Target
0e7d46996f91cb28c03bd44274468b50035278a2766d11d0015b53df57f33cab
-
Size
387KB
-
MD5
c1b1fc7fd1ea855d75c1d3f01e80ceed
-
SHA1
1621c0f1c9ac073a436f90d68ee590fa10311dec
-
SHA256
0e7d46996f91cb28c03bd44274468b50035278a2766d11d0015b53df57f33cab
-
SHA512
d45bd4a08e299d1362a7736ffe9267843ea8956b01b173c2972f24a6c127acf436b3026f342d2ba76bd1fec76f3a8e779293977a87087ba848e6f1c9ac6ef526
-
SSDEEP
6144:XwFMdHbD6LZ1LDc3Nceq5EUbTbF2Zg/6ZLOz8DgV41dWZG:XXbD6LZ1P3DTbQZg/6Z69sB
Malware Config
Signatures
Files
-
0e7d46996f91cb28c03bd44274468b50035278a2766d11d0015b53df57f33cab.exe windows x86
872e183b449b4c84fcd17c443b87e515
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushInstructionCache
GetCurrentProcess
GlobalFree
GlobalHandle
InitializeCriticalSection
GetModuleHandleW
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
lstrcmpiW
GetPrivateProfileStringW
CreateDirectoryW
CreateThread
lstrcpyW
GetFileAttributesW
MoveFileW
lstrcatW
WritePrivateProfileStringW
ReadProcessMemory
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
GetProcAddress
WriteProcessMemory
VirtualAllocEx
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
LeaveCriticalSection
SetFilePointer
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
GetStartupInfoW
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetLastError
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
MulDiv
lstrcmpW
lstrlenW
FindResourceExW
SizeofResource
DeleteCriticalSection
SetLastError
GetCurrentThreadId
WideCharToMultiByte
RaiseException
FindResourceW
LoadResource
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
Sleep
DeleteFileW
CreateFileW
ExitProcess
GetModuleFileNameW
GetFileSize
ReadFile
CloseHandle
WriteFile
CreateProcessW
OpenMutexW
CreateMutexW
GetConsoleCP
user32
FindWindowW
ShowWindow
MapDialogRect
DefWindowProcW
GetWindow
GetWindowRect
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
GetParent
EndDialog
MessageBoxW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CreateWindowExW
SetWindowContextHelpId
RegisterClassExW
LoadCursorW
GetClassInfoExW
RegisterWindowMessageW
SetWindowLongW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
SendMessageW
DestroyAcceleratorTable
GetSysColor
GetFocus
SetFocus
IsChild
EnumWindows
LoadImageW
IsDialogMessageW
CreateDialogParamW
DialogBoxParamW
wsprintfW
PostQuitMessage
GetActiveWindow
GetSystemMetrics
wsprintfA
CreateDialogIndirectParamW
CallWindowProcW
GetDlgItem
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
ScreenToClient
ClientToScreen
MoveWindow
CreateAcceleratorTableW
GetDC
ReleaseDC
GetDesktopWindow
CharNextW
GetClassNameW
RedrawWindow
IsWindow
BeginPaint
FillRect
EndPaint
UnregisterClassA
gdi32
GetObjectW
GetDeviceCaps
CreateSolidBrush
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetStockObject
comdlg32
GetOpenFileNameW
advapi32
CryptGetHashParam
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
CryptAcquireContextW
CryptCreateHash
CryptReleaseContext
CryptHashData
CryptDestroyHash
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
shell32
ShellExecuteW
ole32
CoTaskMemRealloc
CoTaskMemFree
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
oleaut32
VariantClear
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysFreeString
VariantInit
SysAllocString
SysStringLen
SysAllocStringLen
comctl32
InitCommonControlsEx
ws2_32
recv
socket
inet_addr
htons
connect
send
closesocket
WSAStartup
WSACleanup
gethostbyname
wininet
HttpQueryInfoW
InternetOpenW
InternetOpenUrlW
InternetCloseHandle
InternetReadFile
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ