Static task
static1
Behavioral task
behavioral1
Sample
e6997098d3be779e4930818935cd571f883eb390c7dcf2388ee13a48ce9dd2f3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6997098d3be779e4930818935cd571f883eb390c7dcf2388ee13a48ce9dd2f3.exe
Resource
win10v2004-20221111-en
General
-
Target
e6997098d3be779e4930818935cd571f883eb390c7dcf2388ee13a48ce9dd2f3
-
Size
208KB
-
MD5
d1bc7cb2593d29012dfac3eb60722470
-
SHA1
ffd6c0036ce999e673cd8d97144134f13042d357
-
SHA256
e6997098d3be779e4930818935cd571f883eb390c7dcf2388ee13a48ce9dd2f3
-
SHA512
8bb9f81246596b50ba05a4ba56709788fc2b845dcee97dc1e0565e07a7702eee4ccbbeef8dd453f91b0a6924727d966603f55eb37e058684614550a57f73714d
-
SSDEEP
3072:LDQvTNtgbmVizpYxx+whH5FLkMbsGs5/isscwQdAOj/GqVI84xxhjcWBq0KC8:6flViWbhH5ej/isuCfj/PH+JPK
Malware Config
Signatures
Files
-
e6997098d3be779e4930818935cd571f883eb390c7dcf2388ee13a48ce9dd2f3.exe windows x86
51965226386f21a8f31c5fc78ce38962
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsCharAlphaNumericW
imagehlp
UpdateDebugInfoFileEx
SymGetOptions
UnMapAndLoad
FindDebugInfoFile
msvcrt
_acmdln
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_exit
exit
_XcptFilter
_except_handler3
lz32
CopyLZFile
LZCopy
LZOpenFileW
LZClose
LZRead
kernel32
FindFirstFileA
GetStartupInfoA
GetProfileStringW
CreateFileA
GetVersionExW
GetProcessHeap
GetFileAttributesW
GetProfileIntA
BeginUpdateResourceA
CreateMutexA
GetTempFileNameW
CreateMutexW
GetDateFormatW
FindResourceA
DeleteFileW
GetExitCodeThread
GetHandleInformation
DeviceIoControl
GetFileAttributesExA
GetOverlappedResult
FatalAppExitW
GlobalFlags
GetEnvironmentVariableW
EnumDateFormatsW
GlobalGetAtomNameW
HeapAlloc
FlushConsoleInputBuffer
FindNextChangeNotification
GetNumberOfConsoleInputEvents
FoldStringW
HeapFree
GetDiskFreeSpaceA
DeleteFileA
GetTempFileNameA
Module32First
FindClose
GetQueuedCompletionStatus
DefineDosDeviceW
GetCommConfig
FormatMessageW
HeapLock
GetThreadPriority
GetDevicePowerState
AddAtomA
DuplicateHandle
FatalExit
GetDiskFreeSpaceExA
EnumResourceNamesA
GetConsoleMode
GetTempPathW
GetStringTypeW
BeginUpdateResourceW
CreateConsoleScreenBuffer
GlobalFindAtomA
GlobalReAlloc
FreeLibraryAndExitThread
DosDateTimeToFileTime
CreateThread
FreeResource
GlobalHandle
CreateFileMappingW
GetStdHandle
GetNumberOfConsoleMouseButtons
CreateDirectoryExW
GetModuleHandleA
GetCommandLineW
GetDateFormatA
ConvertDefaultLocale
FindCloseChangeNotification
GetCommTimeouts
GetSystemInfo
GlobalAlloc
EnumDateFormatsA
CompareFileTime
GetThreadLocale
GetBinaryTypeA
EndUpdateResourceW
GetStringTypeA
BuildCommDCBW
GetUserDefaultLCID
FoldStringA
Module32Next
GetProcessAffinityMask
EnumResourceNamesW
GetModuleFileNameW
GetProcessPriorityBoost
GetFullPathNameA
FatalAppExitA
GetConsoleTitleA
GetTimeFormatW
GetDefaultCommConfigW
FindFirstFileW
Process32First
GlobalCompact
GetThreadPriorityBoost
FindResourceW
advapi32
RegSetKeySecurity
shell32
SHGetSettings
oleacc
AccessibleObjectFromPoint
WindowFromAccessibleObject
AccessibleChildren
CreateStdAccessibleObject
GetStateTextW
AccessibleObjectFromEvent
GetRoleTextW
AccessibleObjectFromWindow
LresultFromObject
comdlg32
GetOpenFileNameA
ChooseColorW
GetSaveFileNameW
CommDlgExtendedError
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ