Static task
static1
Behavioral task
behavioral1
Sample
e076a4de91215390c931cba41034b839d26be07a2a17f50345bdded1133e7d6b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e076a4de91215390c931cba41034b839d26be07a2a17f50345bdded1133e7d6b.exe
Resource
win10v2004-20220901-en
General
-
Target
e076a4de91215390c931cba41034b839d26be07a2a17f50345bdded1133e7d6b
-
Size
181KB
-
MD5
56c3cbace752092bd3e68d24a4b3f0e6
-
SHA1
9352eb8dcd2070cb8ee67897f17e67ad8b42d8a1
-
SHA256
e076a4de91215390c931cba41034b839d26be07a2a17f50345bdded1133e7d6b
-
SHA512
6c6f74c069c6cc3525150c22435b52696331ae8c8beddaf26d1ae0d90f751ecabef91fa5e4f2d1725e653c945578bcfe63d5d6747b8cd360453bea6c9e46a5d5
-
SSDEEP
1536:ATW14o2XIbiBRt0o/DY5k493w0RyKOzkKc7uCsF2ggXq4IgD2gckApiTHnrtnUib:ATW14oqU0iaGxjrGi+C2n8Y0M7Z93S
Malware Config
Signatures
Files
-
e076a4de91215390c931cba41034b839d26be07a2a17f50345bdded1133e7d6b.exe windows x86
5a641f20d095a127b251d671ba1e15d2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowLongA
ReleaseDC
SetWindowLongA
DefWindowProcA
PostQuitMessage
InvalidateRect
GetDC
EndPaint
LoadStringA
MessageBoxA
ExitWindowsEx
PostThreadMessageA
LoadImageA
AdjustWindowRectEx
GetDesktopWindow
GetWindowRect
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
BeginPaint
kernel32
GetSystemDirectoryA
HeapSize
GetLocaleInfoA
RaiseException
CreateFileA
LoadLibraryA
IsValidCodePage
ReadFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetTickCount
VirtualAlloc
lstrlenA
GetFullPathNameA
ReadConsoleInputA
GetFileSizeEx
GetWindowsDirectoryW
GetCompressedFileSizeA
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
TlsAlloc
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapFree
SetLastError
WideCharToMultiByte
GetEnvironmentStrings
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
ExitProcess
GetFileAttributesA
GetLastError
CloseHandle
CreateThread
GetModuleFileNameA
FreeLibrary
TlsGetValue
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
GetModuleHandleA
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
DeleteCriticalSection
SetCurrentDirectoryA
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
QueryPerformanceCounter
Sections
.dec Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ