Static task
static1
Behavioral task
behavioral1
Sample
e377c29da64e23a346015da6f59269d6b98a764cc035b00ca0860d6b5c87f6e7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e377c29da64e23a346015da6f59269d6b98a764cc035b00ca0860d6b5c87f6e7.exe
Resource
win10v2004-20220901-en
General
-
Target
e377c29da64e23a346015da6f59269d6b98a764cc035b00ca0860d6b5c87f6e7
-
Size
615KB
-
MD5
32a0182cb605ca1a540871d5bd113757
-
SHA1
7b8bd093329c1d6b2bd4ee5965d92ba24323de97
-
SHA256
e377c29da64e23a346015da6f59269d6b98a764cc035b00ca0860d6b5c87f6e7
-
SHA512
2c8a7aec7964324e069fed8ba102436080cc488b940aa456fd4b065247cbf5769955163976028be2372cfd5b198cd113df057ebdb83c82ac123d5e0933eed26a
-
SSDEEP
12288:cVaDpBAjiY1clSxFc6iDa7Yuln7C3pd42Sk/WgkZJIDBtgfl0vUJ:cVaeCZna7nlu3g2SuWluBt2l0e
Malware Config
Signatures
Files
-
e377c29da64e23a346015da6f59269d6b98a764cc035b00ca0860d6b5c87f6e7.exe windows x86
4d8ab09629f45d1a39de3fb187d973ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragMove
ImageList_AddIcon
InitCommonControlsEx
ImageList_LoadImageW
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_LoadImageA
CreateStatusWindow
ImageList_GetDragImage
DrawStatusTextA
ImageList_Remove
DrawStatusTextW
CreateStatusWindowA
CreatePropertySheetPageW
kernel32
LCMapStringA
GetFileType
GetCurrentProcess
GetEnvironmentStringsW
GetCurrentThread
GetEnvironmentStrings
GetCurrencyFormatW
SetHandleCount
CreateMutexA
InterlockedExchange
TlsAlloc
ExitProcess
HeapReAlloc
TerminateProcess
GetLocaleInfoW
QueryPerformanceCounter
TlsFree
CompareStringA
OpenFileMappingA
SetStdHandle
FreeEnvironmentStringsW
VirtualAlloc
FreeEnvironmentStringsA
VirtualProtect
HeapSize
VirtualFree
GetProcAddress
HeapAlloc
GetCurrentThreadId
GetCommandLineW
GetUserDefaultLCID
GetTickCount
UnhandledExceptionFilter
EnterCriticalSection
GetSystemInfo
WriteFile
LCMapStringW
SetEnvironmentVariableA
LeaveCriticalSection
HeapCreate
GetDateFormatA
VirtualQuery
GetStringTypeA
DeleteCriticalSection
HeapDestroy
GetStringTypeW
GetVersionExA
GetSystemTimeAsFileTime
CloseHandle
GetOEMCP
InitializeCriticalSection
SetLastError
ReadFile
GetLocaleInfoA
IsBadWritePtr
GetCurrentProcessId
GetCommandLineA
HeapFree
IsValidLocale
WideCharToMultiByte
GetLastError
GetStartupInfoW
OpenMutexA
GetACP
EnumSystemLocalesA
MultiByteToWideChar
GetModuleFileNameW
ExpandEnvironmentStringsA
TlsSetValue
GetStdHandle
GetTimeZoneInformation
TlsGetValue
GetModuleHandleA
GetTimeFormatA
GetCPInfo
LoadLibraryA
RtlUnwind
GetModuleFileNameA
IsValidCodePage
GetStartupInfoA
SetFilePointer
CompareStringW
FlushFileBuffers
user32
DdeSetUserHandle
CallNextHookEx
DdePostAdvise
SystemParametersInfoA
OpenDesktopW
GetClassNameW
DestroyAcceleratorTable
CreateDialogParamA
SetClassLongA
GetClassLongA
UnregisterHotKey
SetSysColors
EndTask
GetShellWindow
EnumDisplayDevicesW
OpenClipboard
RegisterClassA
GetWindowTextA
DestroyWindow
RegisterClassExA
SetForegroundWindow
DefWindowProcA
SetDlgItemTextW
DialogBoxIndirectParamA
CheckMenuItem
CreateWindowExW
MessageBoxA
SetWindowPos
SendMessageTimeoutA
EditWndProc
GetClassInfoExA
CreateIconIndirect
ShowWindow
GetInputDesktop
VkKeyScanExA
Sections
.text Size: 405KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ