Static task
static1
Behavioral task
behavioral1
Sample
e9738a25c18fc5e4ef9653bd96634dd1fb9d976defd0221cbc60d1fa88dfef65.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9738a25c18fc5e4ef9653bd96634dd1fb9d976defd0221cbc60d1fa88dfef65.exe
Resource
win10v2004-20220901-en
General
-
Target
e9738a25c18fc5e4ef9653bd96634dd1fb9d976defd0221cbc60d1fa88dfef65
-
Size
150KB
-
MD5
0ce7bc1f4ae096e165d2868efd90cc8a
-
SHA1
23bf5190e079cc57a9309104d66b60f762d12306
-
SHA256
e9738a25c18fc5e4ef9653bd96634dd1fb9d976defd0221cbc60d1fa88dfef65
-
SHA512
44b598fd74f06134fd485734f61417774860cc06c6f33dec1c5de4012739f89d022c7e5b66c47f49c1ca419fd06853eeefcb107806b4644a16559974cc2d5815
-
SSDEEP
1536:S6HTwADIfscu7ASWK6C5xSuPaJ6q5TqPxJdK5b3ddATqeV7cC/GfoN/KWsxVbZ6z:vNMbouT5aJyrn5JxT6QCsisIzyEeFU
Malware Config
Signatures
Files
-
e9738a25c18fc5e4ef9653bd96634dd1fb9d976defd0221cbc60d1fa88dfef65.exe windows x86
635d08a28a61b880bc0d9cd9e8b992f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawTextA
EndPaint
ShowWindow
CreatePopupMenu
FillRect
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
GetClientRect
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
shell32
SHGetFileInfoA
Shell_NotifyIconA
SHGetSpecialFolderPathA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHFileOperationA
SHGetMalloc
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
gdi32
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SetBkColor
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
kernel32
FlushFileBuffers
GetLocaleInfoA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetTimeZoneInformation
LCMapStringA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetModuleHandleW
HeapCreate
HeapReAlloc
VirtualFree
HeapFree
DeleteCriticalSection
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
GetFileType
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
GetStartupInfoA
ExitThread
GetSystemTimeAsFileTime
GetLocalTime
HeapAlloc
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsDebuggerPresent
GlobalAlloc
GetStdHandle
VirtualAlloc
GetTempPathA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
SetFilePointer
MulDiv
ReadFile
WriteFile
GetPrivateProfileStringA
WritePrivateProfileStringA
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryExA
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
GlobalFree
ExpandEnvironmentStringsA
lstrcmpA
lstrcmpiA
CloseHandle
GetVersion
GetSystemDirectoryA
lstrcatA
lstrlenA
GetTempFileNameA
CreateFileA
RemoveDirectoryA
CreateProcessA
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceA
lstrcpynA
LoadLibraryA
SetErrorMode
GetCommandLineA
SetFileTime
GetWindowsDirectoryA
ExitProcess
CopyFileA
GetCurrentProcess
GetModuleFileNameA
GetFileSize
GetTickCount
Sleep
SetFileAttributesA
CreateDirectoryA
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 52.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ