Static task
static1
Behavioral task
behavioral1
Sample
e3706d7c8ee1ab2a82bdf406ffb9dd09223180f1778275647f2aa84d0ab2533c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3706d7c8ee1ab2a82bdf406ffb9dd09223180f1778275647f2aa84d0ab2533c.exe
Resource
win10v2004-20220901-en
General
-
Target
e3706d7c8ee1ab2a82bdf406ffb9dd09223180f1778275647f2aa84d0ab2533c
-
Size
299KB
-
MD5
ff1c206643fc75baeeedf8c2eeca336c
-
SHA1
4076b84bb861e3fce5b96163c8cdb4ed24462061
-
SHA256
e3706d7c8ee1ab2a82bdf406ffb9dd09223180f1778275647f2aa84d0ab2533c
-
SHA512
adb7db7c49c983491d0c85c1eca5118f53de306f62476a4a1307561bd9d789b550102e2c1f9941d29d9cda47014c5030d0c4eb2a9a098d1208022267eaa2b920
-
SSDEEP
6144:Jk+k5YL/yeYu42/4MsQiYmiN/lIa+b5FIF1LeZdd:WIzP/UQrm6yFG9e
Malware Config
Signatures
Files
-
e3706d7c8ee1ab2a82bdf406ffb9dd09223180f1778275647f2aa84d0ab2533c.exe windows x86
45cd2155622bb0b0ed74ebc323f7f1e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
LocalUnlock
GetSystemTime
SetEvent
LocalFree
CloseHandle
GetCurrentDirectoryA
PulseEvent
UnmapViewOfFile
GetModuleHandleA
GetComputerNameA
GetTickCount
HeapCreate
lstrlenA
SetLastError
CreateThread
Sleep
GetCommandLineW
CreateThread
CreateFileA
user32
GetDC
DrawEdge
SetFocus
GetKeyState
GetScrollBarInfo
CallWindowProcA
DispatchMessageA
GetDlgItem
CheckRadioButton
DrawMenuBar
FillRect
IsWindow
CreateWindowExA
clbcatq
CheckMemoryGates
UpdateFromAppChange
SetupOpen
SetSetupSave
DowngradeAPL
desk.cpl
InstallScreenSaver
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ