Static task
static1
Behavioral task
behavioral1
Sample
e1c16e9513c91b8b2bc7bc940248e95481f35998bd45cd8a928d5baf24e7b1cc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e1c16e9513c91b8b2bc7bc940248e95481f35998bd45cd8a928d5baf24e7b1cc.exe
Resource
win10v2004-20221111-en
General
-
Target
e1c16e9513c91b8b2bc7bc940248e95481f35998bd45cd8a928d5baf24e7b1cc
-
Size
676KB
-
MD5
e10a7d7386dedd5b5efc6bd044e5a9d8
-
SHA1
796df5d026b534ff2570de114237ecc38e3a7912
-
SHA256
e1c16e9513c91b8b2bc7bc940248e95481f35998bd45cd8a928d5baf24e7b1cc
-
SHA512
86232f4d193c7ebf7c4c6a07bfd37445f8d87775856c071712c4ac167d2dea7079d595401faff756050cd7fa10cb674742f5f2ff3084e00657b86bd17bf87d40
-
SSDEEP
12288:8+eADPZR0SbHjbnQ7HEU09zEVQqXsB8cgc5V2:8+eArZR0SHjE+MQqXsB8lsV2
Malware Config
Signatures
Files
-
e1c16e9513c91b8b2bc7bc940248e95481f35998bd45cd8a928d5baf24e7b1cc.exe windows x86
26e6608de7a09b4138aa9e036df6ee87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseFontW
PageSetupDlgW
GetSaveFileNameW
PrintDlgA
comctl32
DrawStatusText
ImageList_Read
InitCommonControlsEx
DrawStatusTextA
ImageList_Merge
ImageList_ReplaceIcon
DestroyPropertySheetPage
ImageList_AddIcon
ImageList_GetDragImage
ImageList_DragShowNolock
CreatePropertySheetPageW
ImageList_EndDrag
InitMUILanguage
ImageList_GetImageRect
ImageList_DragEnter
ImageList_LoadImageW
ImageList_SetDragCursorImage
kernel32
HeapDestroy
HeapReAlloc
GetVersion
SetEnvironmentVariableA
GetProcAddress
RtlUnwind
FreeEnvironmentStringsW
InterlockedIncrement
VirtualAlloc
InterlockedDecrement
GetEnvironmentStrings
GetCurrentThreadId
TlsSetValue
SetCurrentDirectoryW
GetCurrencyFormatA
GetLastError
WideCharToMultiByte
GetCommandLineA
GetStartupInfoA
GetTickCount
LCMapStringW
DeleteCriticalSection
FlushFileBuffers
OpenMutexA
GetOEMCP
GetCurrentProcessId
GetACP
TerminateProcess
CompareStringA
EnterCriticalSection
VirtualQuery
MultiByteToWideChar
TlsAlloc
GetEnvironmentStringsW
HeapFree
SetLastError
ExitProcess
FreeEnvironmentStringsA
GetCurrentThread
QueryPerformanceCounter
SetStdHandle
GetModuleFileNameA
SetHandleCount
GetStdHandle
GetLocalTime
CreateMutexA
TlsFree
GetModuleHandleA
LeaveCriticalSection
IsBadWritePtr
ReadFile
GetStringTypeW
LCMapStringA
GetThreadLocale
GetSystemInfo
IsBadReadPtr
VirtualFree
HeapCreate
InterlockedExchange
GetSystemTime
GetCPInfo
TlsGetValue
GetStringTypeA
UnhandledExceptionFilter
GetFileType
InitializeCriticalSection
GetDiskFreeSpaceExA
GetSystemTimeAsFileTime
CloseHandle
CompareStringW
HeapAlloc
GetTimeZoneInformation
SetFilePointer
LoadLibraryA
GetCurrentProcess
WriteFile
advapi32
LogonUserA
LookupPrivilegeValueA
CryptExportKey
AbortSystemShutdownA
CryptSignHashA
RegDeleteKeyA
CryptSetKeyParam
GetUserNameW
CryptSetHashParam
LookupPrivilegeNameW
CryptDuplicateKey
gdi32
ColorCorrectPalette
gdiPlaySpoolStream
GetGlyphOutlineW
AddFontResourceW
GetCharWidthFloatA
GetGraphicsMode
GetNearestColor
SetColorAdjustment
GdiFlush
FlattenPath
GetTextExtentExPointA
SetBrushOrgEx
GetPolyFillMode
GetAspectRatioFilterEx
CreateDiscardableBitmap
GetStretchBltMode
SwapBuffers
SetTextAlign
MaskBlt
DeleteMetaFile
InvertRgn
RectInRegion
EnumFontsA
user32
SetWindowRgn
CloseClipboard
MessageBoxW
ScrollWindowEx
OemToCharBuffA
IsZoomed
EnumDisplayDevicesA
ChangeDisplaySettingsW
DdeSetUserHandle
CharUpperBuffA
ToAsciiEx
DestroyWindow
IsDialogMessageW
RegisterClipboardFormatW
ShowWindow
ShowWindowAsync
SendNotifyMessageA
CreateAcceleratorTableA
AppendMenuW
IsCharAlphaW
CopyAcceleratorTableW
GetScrollRange
SetWindowTextW
DdeKeepStringHandle
GetDoubleClickTime
DestroyMenu
SwitchDesktop
TabbedTextOutW
CharLowerBuffA
IsIconic
GetMessageExtraInfo
LoadIconA
GetClassWord
DragObject
ArrangeIconicWindows
GetThreadDesktop
CreateWindowExA
DrawTextA
CopyAcceleratorTableA
EnumThreadWindows
DdeUninitialize
FindWindowA
SetWindowsHookW
EnableWindow
SetProcessWindowStation
GetPropA
DefMDIChildProcA
SendMessageW
SetWindowsHookA
IsCharAlphaNumericA
CascadeWindows
CharPrevExA
GetWindowWord
GetWindowDC
UnregisterClassW
SetDebugErrorLevel
ToAscii
DlgDirSelectComboBoxExW
SetDeskWallpaper
SetDlgItemTextA
SetWindowPlacement
MoveWindow
DefWindowProcW
RealChildWindowFromPoint
DlgDirListComboBoxW
DrawMenuBar
RegisterClassExA
GetClassLongW
PostMessageA
CreatePopupMenu
MessageBoxIndirectW
GetDC
GetOpenClipboardWindow
CountClipboardFormats
CreateCursor
GetDlgCtrlID
SendIMEMessageExW
DrawTextExW
RegisterDeviceNotificationA
IsWindowEnabled
DdeConnectList
BroadcastSystemMessageW
GetMessageA
RegisterClassA
PostQuitMessage
RemovePropA
CreateIconFromResource
RedrawWindow
SetMenu
CharToOemBuffA
DefWindowProcA
DdeQueryStringA
WinHelpW
GetWindowRgn
DlgDirListA
WINNLSGetEnableStatus
PtInRect
RegisterDeviceNotificationW
AdjustWindowRectEx
GetCursor
DdeAddData
CharUpperA
Sections
.text Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ