Static task
static1
Behavioral task
behavioral1
Sample
e727e9bd3807889a94173e30079d83164c42ab340724134782f680f9a9b1676b.exe
Resource
win7-20220901-en
General
-
Target
e727e9bd3807889a94173e30079d83164c42ab340724134782f680f9a9b1676b
-
Size
281KB
-
MD5
518fdfa1f64a057bcb770a733be5171e
-
SHA1
0c98846763e7b4ea0db9f17000cc314e6cf3dde8
-
SHA256
e727e9bd3807889a94173e30079d83164c42ab340724134782f680f9a9b1676b
-
SHA512
ac92e06ba1692a86651e9d34232565617071483e099e4bd83e6b60c1ea87a661d6dbf813171a3fc6a6a6db0965bda943148226f8556d96f5b5c0875bf7f97468
-
SSDEEP
6144:CPU0c8QP1pHLopaAXekc2TDPc/vynNVhqZly10JVd24MNh42:CPPcNnDk3DP+410JiT42
Malware Config
Signatures
Files
-
e727e9bd3807889a94173e30079d83164c42ab340724134782f680f9a9b1676b.exe windows x86
5d810d7bd1b85fd8608d123e4793e42f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
FindResourceW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetDriveTypeA
GetEnvironmentVariableA
GetEnvironmentVariableW
GetFileAttributesA
GetFileAttributesW
GetLocaleInfoA
FindNextFileW
FindResourceA
GetModuleFileNameW
FindFirstFileW
FindNextFileA
GetPrivateProfileStringW
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
GetLocaleInfoW
GetPrivateProfileStringA
GetVersionExW
GetWindowsDirectoryA
GetWindowsDirectoryW
LoadLibraryA
LoadLibraryW
lstrcatW
ExpandEnvironmentStringsA
GetProcessHeap
lstrcpynW
RemoveDirectoryA
RemoveDirectoryW
SearchPathA
SearchPathW
SetCurrentDirectoryA
SetCurrentDirectoryW
SetFileAttributesA
SetFileAttributesW
GetUserDefaultLCID
GetLastError
lstrcmpiA
lstrcmpA
lstrlenA
lstrcpyA
GetTickCount
CloseHandle
FindClose
LocalFree
LocalAlloc
GetVersionExA
GetCommandLineW
SetErrorMode
LoadResource
SizeofResource
GlobalAlloc
lstrlenW
GlobalFree
GetSystemDefaultLangID
IsDBCSLeadByte
MultiByteToWideChar
GetFileSize
WideCharToMultiByte
WriteFile
ReadFile
FindFirstFileA
ExpandEnvironmentStringsW
CreateProcessW
DeleteFileW
DeleteFileA
CreateFileA
CreateProcessA
CreateFileW
CreateDirectoryW
CreateDirectoryA
CompareStringA
CompareStringW
HeapFree
SetLastError
GetProcAddress
FreeLibrary
HeapAlloc
HeapReAlloc
SetEndOfFile
OpenProcess
lstrcpyW
VirtualFree
HeapCreate
SetFilePointer
VirtualAlloc
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileType
GetCurrentProcess
TerminateProcess
ExitProcess
GetFullPathNameW
GetFullPathNameA
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetStdHandle
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetEnvironmentVariableA
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
EnableMenuItem
CreateWindowExW
CreateWindowExA
CreateDialogParamW
CreateDialogParamA
CreateDialogIndirectParamW
CharPrevW
CharNextW
CallWindowProcW
CallWindowProcA
CharNextA
CharUpperA
TranslateMessage
SetCursor
GetDesktopWindow
ClientToScreen
MoveWindow
MapWindowPoints
GetSystemMetrics
GetWindowTextLengthA
DialogBoxIndirectParamA
SendMessageW
SendMessageA
GetKeyboardLayout
SetDlgItemTextA
SetDlgItemTextW
WinHelpW
IsWindowVisible
PostMessageA
PeekMessageA
SetWindowTextA
SetWindowTextW
wsprintfW
wsprintfA
ScreenToClient
SetWindowPos
GetParent
BeginPaint
IsWindowEnabled
EndPaint
DestroyWindow
SetParent
EnumChildWindows
EndDialog
InvalidateRect
ShowWindow
EnableWindow
GetDlgItem
GetClientRect
GetSysColor
GetWindowRect
MessageBoxW
MessageBoxA
LoadStringW
LoadStringA
LoadImageW
SystemParametersInfoA
WinHelpA
SystemParametersInfoW
SendDlgItemMessageW
PostMessageW
IsWindowUnicode
LoadImageA
LoadIconW
LoadIconA
LoadCursorW
LoadCursorA
LoadBitmapW
LoadBitmapA
SetWindowLongW
SetWindowLongA
GetDC
ReleaseDC
IsDialogMessageA
GetWindowTextW
GetWindowTextA
GetWindowLongW
GetWindowLongA
GetDlgItemTextW
GetClassNameW
GetClassNameA
DrawTextW
DrawTextA
DispatchMessageA
DialogBoxParamW
DialogBoxParamA
UpdateWindow
IsDlgButtonChecked
SetFocus
CharUpperW
CreateDialogIndirectParamA
DialogBoxIndirectParamW
gdi32
Rectangle
DeleteDC
StretchBlt
CreateSolidBrush
CreateCompatibleDC
SetTextColor
SetStretchBltMode
SetBkMode
CreateFontIndirectA
CreateFontIndirectW
GetDeviceCaps
EnumFontFamiliesExW
EnumFontFamiliesExA
GetObjectA
GetObjectW
GetTextExtentPoint32W
GetTextExtentPoint32A
DeleteObject
SelectObject
comdlg32
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
GetSaveFileNameW
GetOpenFileNameW
comctl32
ImageList_Destroy
advapi32
RegEnumValueA
RegEnumValueW
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueA
RegDeleteValueW
RegEnumKeyA
RegEnumKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
msi
ord109
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE