Static task
static1
Behavioral task
behavioral1
Sample
e5d05a1bbfe29f526e4374337e60a82d5b85e5753fb73d12b466ffb38916f21d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e5d05a1bbfe29f526e4374337e60a82d5b85e5753fb73d12b466ffb38916f21d.exe
Resource
win10v2004-20220901-en
General
-
Target
e5d05a1bbfe29f526e4374337e60a82d5b85e5753fb73d12b466ffb38916f21d
-
Size
780KB
-
MD5
db65705258addde40b1ed8e34290c5db
-
SHA1
d73dd8fc0455deedfff4174cfc0d688167617a1b
-
SHA256
e5d05a1bbfe29f526e4374337e60a82d5b85e5753fb73d12b466ffb38916f21d
-
SHA512
98d115a219fa9899e031c3655516e16ca6fec155b23b20d43a06c4bd8503039d3a8825a8d8d1519a47c1fe1950d27d7d6e3e2eb2f94682be8308eba2ed5d2470
-
SSDEEP
12288:NIYoP+zoDA5Ow9zrpetM6lo45aJ8q9hBV8u1U+HYwneqKqSQxisTiP:eoUi5et08OVywRs3s+P
Malware Config
Signatures
Files
-
e5d05a1bbfe29f526e4374337e60a82d5b85e5753fb73d12b466ffb38916f21d.exe windows x86
aa7a336b563594dae1ce37f18a8f2f70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Copy
ImageList_DragLeave
InitCommonControlsEx
gdi32
CreateFontW
OffsetClipRgn
EnumFontFamiliesW
CreateDCW
SelectObject
GetDeviceCaps
TranslateCharsetInfo
GetRasterizerCaps
EnumFontFamiliesA
EndPath
GetObjectW
SwapBuffers
GetICMProfileA
GetCharWidthA
CreateICW
BitBlt
DeleteEnhMetaFile
DeleteDC
user32
SwitchToThisWindow
FrameRect
ScreenToClient
DlgDirSelectExW
GetListBoxInfo
LoadCursorW
ReleaseDC
RegisterHotKey
SystemParametersInfoW
GetClassInfoExA
SetDlgItemTextA
CreateDesktopA
MessageBoxA
GetWindowRgn
CreateMDIWindowA
GetFocus
DrawTextW
LoadBitmapW
ToAscii
MapDialogRect
MapVirtualKeyA
ShowWindow
DdeKeepStringHandle
CreatePopupMenu
RegisterClassExA
CreateDialogParamW
DestroyWindow
DefWindowProcW
SetWindowsHookA
GetDCEx
SetClassLongA
SetPropA
GetMenuBarInfo
SetWindowsHookW
CreateWindowExA
InsertMenuItemW
GetMessageA
DdeInitializeW
RegisterClassA
GetCapture
TabbedTextOutA
GetMenuItemID
SetMenuContextHelpId
CharNextW
kernel32
CreateMutexA
EnumResourceLanguagesA
CreateEventW
lstrlenW
WriteFile
SetLastError
GetProcessHeap
GetConsoleCP
ConnectNamedPipe
IsValidCodePage
TlsGetValue
HeapSize
OutputDebugStringA
LeaveCriticalSection
LCMapStringA
FindResourceW
OpenWaitableTimerW
GetTimeFormatA
GetCommandLineA
TerminateProcess
FindNextFileA
EnumSystemLocalesA
lstrlen
EnumResourceNamesA
EnumSystemCodePagesW
ReleaseSemaphore
IsDebuggerPresent
RaiseException
GetCurrentProcess
GetPrivateProfileStructA
MultiByteToWideChar
EnterCriticalSection
GetShortPathNameA
CreateFileW
FreeLibrary
GetFileType
LocalSize
VirtualAlloc
HeapValidate
CompareStringW
FindFirstFileW
GetLocaleInfoW
GetProcAddress
UnhandledExceptionFilter
LCMapStringW
CreateFileA
EnumCalendarInfoA
IsValidLocale
ExitProcess
GetCPInfo
DebugBreak
ReadFileEx
GetModuleHandleA
lstrlenA
HeapFree
GetConsoleMode
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetWindowsDirectoryW
HeapDestroy
SetEnvironmentVariableA
RtlUnwind
TryEnterCriticalSection
GetTimeZoneInformation
HeapReAlloc
GetDateFormatA
TlsFree
GetStringTypeW
GetConsoleOutputCP
GetStringTypeA
Sleep
LoadLibraryA
GetModuleFileNameA
OutputDebugStringW
FlushFileBuffers
FreeEnvironmentStringsW
InterlockedIncrement
SetUnhandledExceptionFilter
VirtualFree
TlsAlloc
GetCurrentThread
GetCurrentProcessId
WideCharToMultiByte
LoadModule
GetPrivateProfileSectionNamesA
CloseHandle
GetProfileStringW
GetLastError
GetModuleFileNameW
GetEnvironmentStringsW
GetCurrentThreadId
GlobalFree
GetTempPathA
GetUserDefaultLCID
GetCurrentDirectoryA
WriteConsoleW
GetLocaleInfoA
GetSystemTimeAsFileTime
VirtualQuery
GetStartupInfoW
LoadLibraryW
SetPriorityClass
GetStdHandle
QueryPerformanceCounter
CompareStringA
SetConsoleCtrlHandler
GetCommandLineW
LockFile
GetStartupInfoA
OpenMutexA
HeapCreate
GetTickCount
SetFilePointer
EnumResourceTypesA
SetHandleCount
IsBadReadPtr
GetOEMCP
ReadFile
TlsSetValue
InterlockedDecrement
GetACP
GetCalendarInfoW
EnumDateFormatsExW
WriteConsoleOutputA
SetStdHandle
GetModuleHandleW
GetVolumeInformationA
InterlockedExchange
WriteConsoleA
HeapAlloc
Sections
.text Size: 316KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 296KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ