Static task
static1
Behavioral task
behavioral1
Sample
e14a53c77344ddb698f0597413a9fbdffcfa8c6208430d4ef03b2502fa7f75a8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e14a53c77344ddb698f0597413a9fbdffcfa8c6208430d4ef03b2502fa7f75a8.exe
Resource
win10v2004-20220901-en
General
-
Target
e14a53c77344ddb698f0597413a9fbdffcfa8c6208430d4ef03b2502fa7f75a8
-
Size
228KB
-
MD5
92b3f794ff8083546eaff64108010c26
-
SHA1
d0f85812bfd5a6090e51c351171700d0998c6423
-
SHA256
e14a53c77344ddb698f0597413a9fbdffcfa8c6208430d4ef03b2502fa7f75a8
-
SHA512
23209fffeab107330a534b99b47265d2f9597b5dc38c5d07934da3e0c014dc491390c437cf2651aff298dea47eed74352f8dd534e7418e2b18dc724b468d79a3
-
SSDEEP
3072:SZWweNqHyUEUjn2Utnc9YrWNZ5rDEJadu1hmOMyvdueFR3Wd6QzbqgogAQnfGT:S9eSEUj+Yro5QHPweKbn
Malware Config
Signatures
Files
-
e14a53c77344ddb698f0597413a9fbdffcfa8c6208430d4ef03b2502fa7f75a8.exe windows x86
17a352cb2f9cf34e9ed2496ea43efa24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
GetFileTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
RaiseException
GetTickCount
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapFree
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
FindNextFileA
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetCurrentDirectoryA
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileSize
GetFileAttributesA
GetCPInfo
GetOEMCP
TlsGetValue
GetProcessVersion
GlobalFlags
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
GlobalHandle
DeleteCriticalSection
FileTimeToLocalFileTime
InitializeCriticalSection
LocalAlloc
LocalFree
FileTimeToSystemTime
FormatMessageA
InterlockedIncrement
WideCharToMultiByte
InterlockedDecrement
GetThreadLocale
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
WritePrivateProfileStringA
GetVersionExA
GetLogicalDrives
GetDriveTypeA
RemoveDirectoryA
CreateDirectoryA
GetLocalTime
DeleteFileA
CopyFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
MultiByteToWideChar
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcpynA
lstrlenA
CloseHandle
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
VirtualFree
SetUnhandledExceptionFilter
GetEnvironmentStringsW
SetHandleCount
SetFileAttributesA
user32
PtInRect
LoadStringA
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
InvalidateRect
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
ShowOwnedPopups
PostQuitMessage
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
IsWindowEnabled
GetClassNameA
GetSysColorBrush
SetWindowTextA
IsDialogMessageA
LoadIconA
PostMessageA
UpdateWindow
SendDlgItemMessageA
BringWindowToTop
GetSysColor
PeekMessageA
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetParent
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
CharUpperA
ShowWindow
MoveWindow
MapWindowPoints
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SendMessageA
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
SetTimer
EnableWindow
LoadCursorA
GetFocus
DispatchMessageA
EnableMenuItem
UnregisterClassA
gdi32
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetViewportExtEx
SetMapMode
SelectObject
RestoreDC
GetStockObject
DeleteDC
SaveDC
GetObjectA
SetBkColor
CreateBitmap
SetTextColor
GetClipBox
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
shell32
DragFinish
DragQueryFileA
comctl32
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
olepro32
ord253
oleaut32
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
Sections
.text Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ