Static task
static1
Behavioral task
behavioral1
Sample
e53387c076f740e2f8070291f72bc86cd5e3858750ce6bd9f5aeb2dc3c32956e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e53387c076f740e2f8070291f72bc86cd5e3858750ce6bd9f5aeb2dc3c32956e.exe
Resource
win10v2004-20220812-en
General
-
Target
e53387c076f740e2f8070291f72bc86cd5e3858750ce6bd9f5aeb2dc3c32956e
-
Size
356KB
-
MD5
5f3f9a257c209e4e931a394b8f01c6f3
-
SHA1
6070ded74e02a5230a8bd64e878846a07698f205
-
SHA256
e53387c076f740e2f8070291f72bc86cd5e3858750ce6bd9f5aeb2dc3c32956e
-
SHA512
5c69491509debc674abe3413e3cde515120d6f9638e5b2bf08dac43cf7a682c1d9df1c240e4cf7f2d4f7c8000260cb8ef3160217cdc90528962b757307104312
-
SSDEEP
6144:dh476YaCwq2Rx9gTbiROwaIJbtlrPF2EN60n9TNeHCSf+Hrj25EjUa9u8O:dh476YQq2rAmlb7V9TNoC4+Hw6R
Malware Config
Signatures
Files
-
e53387c076f740e2f8070291f72bc86cd5e3858750ce6bd9f5aeb2dc3c32956e.exe windows x86
53649a583168e63a1b434aa97a8cd7f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFile
WaitForMultipleObjects
OpenEventA
GetPrivateProfileSectionNamesA
GetCurrentProcess
MultiByteToWideChar
GetNamedPipeHandleStateA
GetVolumeInformationW
HeapFree
InterlockedExchange
SetFileAttributesW
LockFileEx
TlsFree
TlsAlloc
DeleteCriticalSection
GetSystemDefaultLCID
GetLastError
LockResource
FreeEnvironmentStringsW
GetStartupInfoW
GetCurrentProcessId
SetEnvironmentVariableA
GetCurrentDirectoryA
GetProfileIntA
EnumResourceTypesW
GetProfileSectionW
GetCommandLineA
SetHandleCount
GetModuleFileNameW
IsBadWritePtr
FreeEnvironmentStringsA
GetEnvironmentStrings
SetEndOfFile
CreateMutexA
GetModuleHandleA
lstrcpyn
GetProcAddress
EnumTimeFormatsW
GetModuleFileNameA
GetFileType
GetStringTypeA
LocalUnlock
CompareStringA
GetTickCount
InterlockedDecrement
GetStringTypeW
ExpandEnvironmentStringsA
HeapDestroy
ReadFile
GetSystemTimeAsFileTime
GetCPInfo
SetFilePointer
GetCurrentThreadId
UnhandledExceptionFilter
lstrlenW
VirtualAlloc
VirtualQuery
OpenMutexA
QueryPerformanceCounter
HeapReAlloc
GetCurrentThread
GetCommandLineW
GetStartupInfoA
HeapAlloc
GetEnvironmentStringsW
FindAtomA
EnterCriticalSection
HeapCreate
FindNextFileW
MoveFileExW
GetStdHandle
InitializeCriticalSection
WideCharToMultiByte
CloseHandle
SetStdHandle
TlsSetValue
SetLastError
LCMapStringA
CompareStringW
GetLocalTime
LeaveCriticalSection
GetProfileStringW
InterlockedIncrement
FindNextChangeNotification
ReadFileEx
VirtualFree
FlushFileBuffers
GetSystemTime
TerminateProcess
UnlockFile
TlsGetValue
GetProfileStringA
WriteFile
GetTimeZoneInformation
GetLogicalDriveStringsW
LoadLibraryA
ExitProcess
LCMapStringW
RtlUnwind
GetVersion
user32
DrawTextExA
RealChildWindowFromPoint
ShowWindow
RegisterClassA
GetScrollRange
SetWindowLongA
RegisterClassExA
SendDlgItemMessageA
GetClientRect
UnregisterClassW
GetKeyboardLayoutNameA
CharNextExA
CascadeWindows
ShowScrollBar
SendMessageA
CharLowerA
DestroyWindow
GetMonitorInfoA
MessageBoxA
LoadAcceleratorsW
CloseWindowStation
SetScrollRange
LoadIconA
SetMenuContextHelpId
GetWindowContextHelpId
SendNotifyMessageW
GetThreadDesktop
ImpersonateDdeClientWindow
wsprintfW
DefWindowProcW
GetSystemMenu
InvalidateRgn
CreateWindowStationW
DrawMenuBar
IsCharLowerW
CreateWindowExW
BringWindowToTop
CreateDialogIndirectParamA
GetKeyNameTextW
comctl32
ImageList_LoadImage
ImageList_DragEnter
ImageList_DragLeave
ImageList_Replace
ImageList_SetImageCount
CreateToolbar
ImageList_SetBkColor
ImageList_GetImageRect
ImageList_GetIcon
CreatePropertySheetPageA
CreateStatusWindow
ImageList_SetIconSize
ImageList_GetIconSize
DrawStatusText
ImageList_Duplicate
ImageList_Create
MakeDragList
_TrackMouseEvent
InitCommonControlsEx
CreateUpDownControl
ImageList_EndDrag
ImageList_LoadImageA
ImageList_Copy
CreateToolbarEx
Sections
.text Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ