Static task
static1
Behavioral task
behavioral1
Sample
e22a105be359c9a6ce1a78cb23673e75b21e032ff9214b1e46fb9490efe7e2c5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e22a105be359c9a6ce1a78cb23673e75b21e032ff9214b1e46fb9490efe7e2c5.exe
Resource
win10v2004-20221111-en
General
-
Target
e22a105be359c9a6ce1a78cb23673e75b21e032ff9214b1e46fb9490efe7e2c5
-
Size
372KB
-
MD5
25dce6c12cad1728d47a50d5b9bfc6a1
-
SHA1
2c45d3306224b685102238a3d272720d1fb7203c
-
SHA256
e22a105be359c9a6ce1a78cb23673e75b21e032ff9214b1e46fb9490efe7e2c5
-
SHA512
eb667ab2494bd10d6206eb13d4e1b49c8b304123ea52f6a4e55e1da1e9d6684138428c99047d2934d335f7b70350ec5a14d676e79a20c66605f91a355e399142
-
SSDEEP
3072:T3H7HPWO8Cq5O4E4/BqDo7Hknx9BEnZ9Esb+QDGo/eqttMDOCj6T:T3bfu5C4HGyZ9EsbLBttz7T
Malware Config
Signatures
Files
-
e22a105be359c9a6ce1a78cb23673e75b21e032ff9214b1e46fb9490efe7e2c5.exe windows x86
f63be4a9e693c2df00c45f5cfbee0c0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
sndPlaySoundA
kernel32
SystemTimeToFileTime
SetErrorMode
WritePrivateProfileStringA
GetCurrentDirectoryA
GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapSize
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
LocalFileTimeToFileTime
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalFree
GlobalUnlock
GlobalLock
GetPrivateProfileStringA
ExitProcess
GetPrivateProfileIntA
LoadLibraryA
OpenFile
GetModuleFileNameA
GetModuleHandleA
GetUserDefaultLangID
GetLastError
GetFileSize
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetFileAttributesA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
LockResource
WinExec
FindResourceA
LocalFree
InterlockedDecrement
InterlockedIncrement
GetShortPathNameA
WideCharToMultiByte
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
MultiByteToWideChar
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
lstrcpynA
MulDiv
GetProcAddress
SetLastError
GlobalAlloc
GetVersionExA
CreateThread
SetThreadPriority
GetACP
FindResourceExA
LoadResource
VirtualFree
user32
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
LoadIconA
IsDialogMessageA
SetWindowTextA
ShowWindow
InvalidateRect
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
GetDesktopWindow
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
WindowFromPoint
GetClassNameA
InsertMenuA
DeleteMenu
GetMenuStringA
LoadCursorA
GetSysColorBrush
DestroyIcon
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
CopyRect
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetMenuCheckMarkDimensions
UnregisterClassA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
SetCursor
ShowOwnedPopups
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
LoadStringA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
CharUpperA
wsprintfA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
EndDeferWindowPos
DefWindowProcA
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
DestroyMenu
GetSystemMetrics
SendMessageA
PtInRect
DrawTextA
LoadCursorFromFileA
EnableWindow
MessageBoxA
UnhookWindowsHookEx
EnableMenuItem
LoadBitmapA
gdi32
CreateFontIndirectA
TranslateCharsetInfo
StretchDIBits
SetDIBitsToDevice
SetStretchBltMode
SelectPalette
CreatePalette
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
SetBkMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
RealizePalette
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
GetObjectA
GetDeviceCaps
comdlg32
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
GetFileSecurityA
SetFileSecurityA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegSetValueA
shell32
ShellExecuteA
DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA
comctl32
ord17
Sections
.text Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE