Static task
static1
Behavioral task
behavioral1
Sample
2e6d71ea5a964e35203aa41a739fd9b4a1fa1008095f10b4f9094423f2604e65.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2e6d71ea5a964e35203aa41a739fd9b4a1fa1008095f10b4f9094423f2604e65.exe
Resource
win10v2004-20220812-en
General
-
Target
2e6d71ea5a964e35203aa41a739fd9b4a1fa1008095f10b4f9094423f2604e65
-
Size
685KB
-
MD5
c3955e1a939254d0baba61e7b2975653
-
SHA1
1b5a5cb1f4eb10776d7ee8ca766e420cd6fa6c57
-
SHA256
2e6d71ea5a964e35203aa41a739fd9b4a1fa1008095f10b4f9094423f2604e65
-
SHA512
94a22ed7884399306a3ae64dc111295511b8fbcf35433c9bb065dbe9057dbb5fd2371cbd0584662d24031215b719eb19d1f2b3e8efcf0d0e4a7c8242ee2d6875
-
SSDEEP
12288:RtUBGy8Xz0MqcPHDc2YpKSouCsBvplyt1E5Mx8QVfqlrI+SyjDyD0lRWbk7SZ:UBaXz0MqcPHDc2YpKSo1sBh8t1E5MxZ/
Malware Config
Signatures
Files
-
2e6d71ea5a964e35203aa41a739fd9b4a1fa1008095f10b4f9094423f2604e65.exe windows x86
1393d4319b48b07367ea7efec0646a8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
CommandLineToArgvW
ShellExecuteExW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
kernel32
CreateFileA
GetLastError
GetProcAddress
HeapFree
LoadLibraryW
FreeLibrary
GetProcessHeap
HeapAlloc
GetModuleFileNameW
LocalFree
CreateProcessW
WaitForSingleObject
SetCurrentDirectoryW
GetCurrentDirectoryW
CloseHandle
SetFileApisToOEM
GetEnvironmentVariableW
SetThreadPriority
GetCurrentProcess
SetPriorityClass
GetCurrentThread
GetModuleHandleW
GetVersionExW
ExpandEnvironmentStringsW
CreateFileW
GetCommandLineW
GetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
FindNextFileW
FindFirstFileW
FindClose
FormatMessageW
InterlockedExchangeAdd
SetFileTime
WriteFile
SetEndOfFile
GetFileSize
ReadFile
SetFilePointer
ResumeThread
WideCharToMultiByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrlenW
GetTempPathW
GetFullPathNameW
GetWindowsDirectoryW
DeleteFileW
GetTempFileNameW
SetFileAttributesW
GetLongPathNameW
MoveFileW
CreateEventW
SetEvent
ResetEvent
FindResourceW
FileTimeToSystemTime
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
MultiByteToWideChar
WaitForMultipleObjects
GetACP
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetVersionExA
GetStartupInfoW
ExitThread
GetCurrentThreadId
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
user32
EnableWindow
PostQuitMessage
DispatchMessageW
IsDialogMessageW
SetTimer
CreateDialogParamW
LoadIconW
TranslateMessage
IsWindowVisible
DestroyIcon
IsWindow
MessageBoxW
ShowWindow
PostMessageW
DialogBoxParamW
SetWindowPos
GetWindowRect
GetSystemMetrics
SetFocus
GetWindowTextW
SetWindowTextW
GetDlgItem
SendMessageW
EndDialog
KillTimer
GetDesktopWindow
LoadStringW
GetMessageW
ScreenToClient
gdi32
DeleteObject
CreateSolidBrush
ole32
CoUninitialize
CoTaskMemFree
CoInitializeEx
CoInitialize
CoCreateInstance
Sections
.text Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ