Static task
static1
Behavioral task
behavioral1
Sample
e09114ad8388567c8eeda1dbac353e3876a8f95bb5d5069997236c19efa516b3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e09114ad8388567c8eeda1dbac353e3876a8f95bb5d5069997236c19efa516b3.exe
Resource
win10v2004-20220812-en
General
-
Target
e09114ad8388567c8eeda1dbac353e3876a8f95bb5d5069997236c19efa516b3
-
Size
1.7MB
-
MD5
5a02cab4f3f786fe3fc1fcc79bc5d175
-
SHA1
28e3df06a7f5f3bd5b611c068ddbf774fcad15ac
-
SHA256
e09114ad8388567c8eeda1dbac353e3876a8f95bb5d5069997236c19efa516b3
-
SHA512
3f64f86446d44d7048f0b080232b9c02a567121c525597471db38e18d9235764a46b44a7a1da8f1352d217fef75bf8a1c57c2dc11402fc2aa4f16940d9500686
-
SSDEEP
49152:ZcE3o4/ZVY4zQYb6P8PizOzUUMpx7i+OW:D3o0ZVY4zQYCwzvKO
Malware Config
Signatures
Files
-
e09114ad8388567c8eeda1dbac353e3876a8f95bb5d5069997236c19efa516b3.exe windows x86
7fd187da90d9d565b320c7e2af26178a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AnimateWindow
MenuItemFromPoint
DdeClientTransaction
SetLastErrorEx
DdeInitializeA
OemToCharBuffA
TranslateAccelerator
SwapMouseButton
EnumDisplayDevicesW
EnumDisplayDevicesA
LookupIconIdFromDirectoryEx
MessageBoxW
SetTimer
LockWindowUpdate
TileWindows
GetCursorInfo
DialogBoxParamW
DdeUnaccessData
ToUnicode
TrackPopupMenu
SetSystemCursor
MsgWaitForMultipleObjects
kernel32
GetStartupInfoW
VirtualAlloc
GetEnvironmentStringsW
GetCurrencyFormatW
GetLocaleInfoW
LocalFileTimeToFileTime
GetCurrentProcessId
Sleep
GetNamedPipeHandleStateA
GetModuleHandleA
WriteConsoleOutputW
HeapReAlloc
GetStringTypeW
WriteConsoleInputW
ReadConsoleOutputW
lstrlen
HeapSize
IsDebuggerPresent
GetNamedPipeHandleStateW
CommConfigDialogW
GetCPInfo
SetCurrentDirectoryW
GetAtomNameW
InterlockedIncrement
GetModuleFileNameW
InitializeCriticalSection
UnhandledExceptionFilter
GetCommandLineW
CompareStringA
IsValidLocale
HeapDestroy
DeleteFiber
FreeEnvironmentStringsA
EnumSystemLocalesA
SetEnvironmentVariableA
TlsSetValue
FindNextFileW
GetTimeZoneInformation
GetNumberFormatW
DeleteFileW
LoadLibraryA
GetExitCodeProcess
RtlUnwind
DeleteCriticalSection
SetHandleCount
CreateFileW
WritePrivateProfileStringW
GetTickCount
WideCharToMultiByte
LeaveCriticalSection
GetLogicalDrives
LCMapStringA
GetCurrentThreadId
LocalSize
GetCurrentProcess
GetModuleFileNameA
InterlockedDecrement
GetVersionExA
SetUnhandledExceptionFilter
TlsFree
GetFileType
GetACP
EnterCriticalSection
InterlockedExchange
WriteFile
GetLastError
GetCurrentThread
SetLastError
TlsGetValue
VirtualQuery
VirtualFree
GetTimeFormatA
LCMapStringW
SetConsoleCtrlHandler
GetStringTypeA
GetEnvironmentStrings
lstrcmpiA
QueryPerformanceCounter
GetProcessHeap
GetProcAddress
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
HeapFree
MultiByteToWideChar
GetDateFormatA
ExitProcess
GetLocaleInfoA
TlsAlloc
GetPrivateProfileStructW
GetStartupInfoA
FreeLibrary
TerminateProcess
IsValidCodePage
GetCommandLineA
GetConsoleCP
GetStdHandle
GetOEMCP
HeapAlloc
CompareStringW
HeapCreate
GetUserDefaultLCID
Sections
.text Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ