Static task
static1
Behavioral task
behavioral1
Sample
e939039d48fa8801d0617cb4a515c611cc7b0e16358bebd7e80f216681fe923f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e939039d48fa8801d0617cb4a515c611cc7b0e16358bebd7e80f216681fe923f.exe
Resource
win10v2004-20221111-en
General
-
Target
e939039d48fa8801d0617cb4a515c611cc7b0e16358bebd7e80f216681fe923f
-
Size
708KB
-
MD5
58a8a9059ef413f96ad61bcbcbf154a9
-
SHA1
06fb61a3002ec66112e8a26ece5a30455cae387b
-
SHA256
e939039d48fa8801d0617cb4a515c611cc7b0e16358bebd7e80f216681fe923f
-
SHA512
d87850ffe7023b5449fdb41a454df97a1c33a18cd748667a1ebaaa2b958e6e48d60d334acb9c67adaca23b07c62a770f3b79f3a821936d9d2704bb082244a891
-
SSDEEP
12288:CI0Ua17Mn7WU44P+b/jAe09dVYKpmEgGJdQJf3f8HuqXIJ2HXMq1UxcedtJIG:CIH7rV6cekz7pwGPErbuXUyedT
Malware Config
Signatures
Files
-
e939039d48fa8801d0617cb4a515c611cc7b0e16358bebd7e80f216681fe923f.exe windows x86
f32dff1cca7633277a3119e714afee19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GlobalUnlock
SetCurrentDirectoryW
CancelWaitableTimer
SetFileApisToOEM
GetThreadContext
ConnectNamedPipe
WaitNamedPipeW
IsDBCSLeadByte
CreateDirectoryA
WaitForMultipleObjects
GetOverlappedResult
CreateNamedPipeA
GetPrivateProfileSectionNamesW
InitAtomTable
GetDateFormatW
DnsHostnameToComputerNameW
LocalSize
OutputDebugStringA
SetMessageWaitingIndicator
FreeEnvironmentStringsW
GetThreadSelectorEntry
GetNumberFormatW
GetThreadLocale
FindNextChangeNotification
RequestDeviceWakeup
WriteProfileSectionA
lstrcmpA
InterlockedCompareExchange
DebugActiveProcess
LoadModule
DeleteTimerQueue
GetCommModemStatus
GetDevicePowerState
FindNextVolumeW
GetPrivateProfileStringW
GetDiskFreeSpaceExA
GetThreadPriorityBoost
DuplicateHandle
PeekNamedPipe
CreateWaitableTimerW
GetProfileStringA
UnmapViewOfFile
CreateJobObjectA
OpenFileMappingA
GetSystemTime
user32
WinHelpA
SetClassLongW
CreateIcon
CharToOemW
DdeAccessData
LoadIconW
IsClipboardFormatAvailable
GetPropW
DestroyMenu
SendDlgItemMessageA
DdeConnectList
MonitorFromPoint
UnpackDDElParam
GetListBoxInfo
DialogBoxIndirectParamA
SetWindowContextHelpId
PtInRect
GetWindowInfo
DdeSetQualityOfService
IMPQueryIMEA
SetLayeredWindowAttributes
SetKeyboardState
GetWindowTextA
CharLowerBuffW
GetDialogBaseUnits
EnumThreadWindows
SetWindowsHookExA
DefWindowProcW
PostMessageA
ScrollWindow
DdeUnaccessData
DdeAddData
ShowCursor
DdeGetData
OemToCharA
RegisterWindowMessageA
GetMenuItemID
MessageBoxExW
DdeDisconnect
MessageBoxA
LoadCursorA
UnregisterHotKey
GetMessageW
CallWindowProcA
IntersectRect
CascadeWindows
ArrangeIconicWindows
DdeQueryStringA
SetRect
GetMenu
IsWindowEnabled
GetDesktopWindow
SetCaretPos
DrawFrameControl
SetShellWindow
GetMessageTime
SubtractRect
SetDebugErrorLevel
InsertMenuW
IsWindow
DeferWindowPos
VkKeyScanExW
FreeDDElParam
DdeQueryStringW
RegisterShellHookWindow
TrackMouseEvent
CreateMenu
CopyImage
CreateIconIndirect
EmptyClipboard
MonitorFromWindow
RealChildWindowFromPoint
CreateAcceleratorTableA
DdePostAdvise
GetClassNameA
GetKBCodePage
EnumDesktopsW
LoadCursorFromFileA
UnloadKeyboardLayout
ReuseDDElParam
Sections
.text Size: 245KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 232KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 221KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ