Static task
static1
Behavioral task
behavioral1
Sample
e54688bcaefe765a7a31afd02c869b41c0e0bb412dee3c9b42a8d406c9c80ee2.exe
Resource
win7-20221111-en
General
-
Target
e54688bcaefe765a7a31afd02c869b41c0e0bb412dee3c9b42a8d406c9c80ee2
-
Size
208KB
-
MD5
43e8fb9c67cc1994b4aa1d98639f94cb
-
SHA1
9ad58d28cf38bae7711274633eac87b7ecdf5a49
-
SHA256
e54688bcaefe765a7a31afd02c869b41c0e0bb412dee3c9b42a8d406c9c80ee2
-
SHA512
68430e844aeab079600820483d5e9228885c14487b0a9aaa5d638298b30a5c13f705dbc3a6fb23f3d8e6a6374a8aea45ae5afd563ae702b1dd0baf95985b0f5d
-
SSDEEP
6144:ADn0J9NQ4bc3wT994Th6rC2dzT/xQoTh//w2MlKZ1:sUN3o3wT994Th6rC2dOoT7Z1
Malware Config
Signatures
Files
-
e54688bcaefe765a7a31afd02c869b41c0e0bb412dee3c9b42a8d406c9c80ee2.exe windows x86
e924032140d1b95edc0d37cd8da606ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mpr
WNetEnumResourceW
WNetCloseEnum
WNetOpenEnumW
netapi32
NetShareAdd
kernel32
CreateFileW
WriteFile
WideCharToMultiByte
Sleep
GetTickCount
FindFirstFileA
GetSystemTime
CopyFileA
CreateDirectoryW
SetCurrentDirectoryW
GetDriveTypeA
MultiByteToWideChar
LockFile
GetFileSize
FindFirstFileW
GetCurrentDirectoryW
FindNextFileW
FindClose
GlobalAlloc
GlobalFree
SetCurrentDirectoryA
SetProcessShutdownParameters
GetCommandLineA
GetFileAttributesExW
WriteConsoleA
SetStdHandle
GetLocaleInfoA
CloseHandle
WaitForSingleObject
CreateMutexW
SetFileAttributesW
CopyFileW
GetCommandLineW
GetEnvironmentVariableW
ReleaseMutex
CreateThread
GetConsoleOutputCP
WriteConsoleW
CreateFileA
MoveFileW
TerminateProcess
GetStringTypeW
GetStringTypeA
RtlUnwind
InitializeCriticalSection
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
FlushFileBuffers
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetLastError
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
ExitProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
CompareStringA
CompareStringW
SetEnvironmentVariableA
LoadLibraryA
user32
GetDC
SystemParametersInfoW
MessageBoxW
FindWindowW
DrawTextW
gdi32
DeleteObject
SetTextColor
SetBkColor
SelectObject
CreateFontW
DeleteDC
advapi32
RegSetValueExW
RegQueryValueExW
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
shell32
ShellExecuteW
CommandLineToArgvW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.trdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE