Static task
static1
Behavioral task
behavioral1
Sample
e63b2e47ac6ea1afeffae285110c215b1abcb854b27e2f80187d296dc9024f58.exe
Resource
win7-20220812-en
General
-
Target
e63b2e47ac6ea1afeffae285110c215b1abcb854b27e2f80187d296dc9024f58
-
Size
528KB
-
MD5
34bec9c84ad31ded53ba90237cfaa541
-
SHA1
cb41ca6658f1ef1503dfe0cf970b537642015d1a
-
SHA256
e63b2e47ac6ea1afeffae285110c215b1abcb854b27e2f80187d296dc9024f58
-
SHA512
45fec1349b5403f9d9a65cb573d4ce8895ffc865145a82aeee3fb6c1922fe29fb6f46cb86b41e1c360791b05a886748667419c80950d832cddc83431b1998c71
-
SSDEEP
12288:MM1ggkP3Uw5fEs4U/1ORiSEjCK/ygSJKr9mxjNG:s6w5H1ORi/je3Jbj0
Malware Config
Signatures
Files
-
e63b2e47ac6ea1afeffae285110c215b1abcb854b27e2f80187d296dc9024f58.exe windows x86
3169d6c5b446280770f501ebc9e6954d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GlobalAlloc
GetProcAddress
LoadLibraryA
SetErrorMode
InitializeCriticalSection
SystemTimeToFileTime
GetSystemTime
GetTimeZoneInformation
IsDBCSLeadByte
GetACP
GetCPInfo
Sleep
WaitForMultipleObjects
CreateThread
ExitThread
WinExec
CopyFileA
WriteFile
SetEndOfFile
DeleteFileA
GetVersionExA
CreateFileA
GetFileSize
SetFilePointer
CloseHandle
GlobalUnlock
GlobalLock
GetModuleFileNameA
GetCommandLineA
GetModuleHandleA
ExitProcess
lstrlenA
GetStartupInfoA
CreateProcessA
EnterCriticalSection
GlobalFree
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
user32
FillRect
KillTimer
GetFocus
SetCapture
ReleaseCapture
SetCursor
EndPaint
BeginPaint
ClientToScreen
TrackPopupMenu
DestroyMenu
GetCursorPos
WindowFromPoint
ScreenToClient
MapVirtualKeyA
CheckMenuItem
InvalidateRect
MessageBoxA
PostMessageA
GetDlgItemTextA
EnableWindow
SetDlgItemTextA
SetFocus
GetClientRect
GetMenu
SetMenu
GetDesktopWindow
MoveWindow
DialogBoxParamA
LoadMenuA
SetTimer
EnableMenuItem
PostQuitMessage
DeleteMenu
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
TranslateAcceleratorA
GetWindow
GetWindowRect
SetWindowPos
GetWindowLongA
DefWindowProcA
IsWindow
DestroyWindow
CreateWindowExA
SetWindowLongA
DdeInitializeA
DdeCreateStringHandleA
DdeConnect
DdeClientTransaction
DdeDisconnect
DdeFreeStringHandle
DdeUninitialize
GetKeyState
EmptyClipboard
SetClipboardData
EndDialog
GetSubMenu
LoadStringA
OpenClipboard
GetClipboardData
CloseClipboard
GetDC
ReleaseDC
GetWindowTextLengthA
GetDlgItem
GetCapture
gdi32
SetPolyFillMode
StrokePath
ExtCreatePen
DeleteObject
SelectObject
StretchDIBits
SetDIBitsToDevice
GdiFlush
CreateCompatibleBitmap
DeleteDC
CreateDIBSection
GetDeviceCaps
EndPath
CreateCompatibleDC
BitBlt
EnumFontFamiliesA
ExtTextOutA
SetBkColor
GetBkColor
SetTextAlign
SetBkMode
SetTextColor
SelectClipRgn
LineTo
MoveToEx
CreatePen
GetTextExtentPoint32A
GetTextMetricsA
GetTextAlign
GetBkMode
GetTextColor
IntersectClipRect
GetClipRgn
CreateRectRgn
CreateFontIndirectA
DPtoLP
GetObjectA
RealizePalette
StartDocA
LPtoDP
StartPage
EndPage
EndDoc
BeginPath
CreatePalette
SelectPalette
GetSystemPaletteEntries
FillPath
SelectClipPath
PolyBezierTo
GetClipBox
SaveDC
RestoreDC
CreateSolidBrush
comdlg32
GetSaveFileNameA
GetOpenFileNameA
PrintDlgA
advapi32
RegSetValueA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegSetValueExA
shell32
DragQueryFileA
DragAcceptFiles
winmm
timeKillEvent
timeSetEvent
waveOutReset
timeEndPeriod
timeGetTime
timeBeginPeriod
timeGetDevCaps
waveOutGetDevCapsA
waveOutClose
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutOpen
Sections
.text Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.5rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mvnorwa Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE