Static task
static1
Behavioral task
behavioral1
Sample
e5e98e1ae2c8526d4fa8762fd65b7c044cff87888064f4def35ed729e809925b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e5e98e1ae2c8526d4fa8762fd65b7c044cff87888064f4def35ed729e809925b.exe
Resource
win10v2004-20220901-en
General
-
Target
e5e98e1ae2c8526d4fa8762fd65b7c044cff87888064f4def35ed729e809925b
-
Size
307KB
-
MD5
0b4a05ce20f24a77fbd7b252d60f32ec
-
SHA1
bb407ce965f681c59502a6d527c35c7fa5ce3317
-
SHA256
e5e98e1ae2c8526d4fa8762fd65b7c044cff87888064f4def35ed729e809925b
-
SHA512
2e3fb884582f757351d71c44f68c6c967bc9da1aaa62f87ba84028ed06c70edc0aacab57dbcc94adbc8e05a7f867edf39af8114665819e76d3882fbb5db148b2
-
SSDEEP
6144:mMOAC+y3EH/yio70OkKt+F1vc2MNRHRaH70ouVEzKFic1SZbfBykd:ROR+y3+y158k2MNjauV9dSZbfj
Malware Config
Signatures
Files
-
e5e98e1ae2c8526d4fa8762fd65b7c044cff87888064f4def35ed729e809925b.exe windows x86
170126d58ba481a9061211233bbee508
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AppendMenuA
GetCursorPos
CallWindowProcA
GetClassInfoExA
GetWindowTextLengthA
GetKeyNameTextA
RegisterClassExA
SetFocus
MapVirtualKeyA
EndPaint
GetScrollPos
SetTimer
GetFocus
winspool.drv
DeleteFormA
DeleteMonitorA
DeletePortA
DeletePrintProcessorA
DeletePrintProvidorA
DeletePrinter
DeletePrinterConnectionA
DeletePrinterDataExA
DeletePrinterKeyA
EndDocPrinter
EndPagePrinter
EnumFormsA
EnumJobsA
EnumMonitorsA
EnumPortsA
EnumPrintProcessorDatatypesA
EnumPrintProcessorsA
EnumPrinterDataExA
EnumPrinterDataA
EnumPrinterDriversA
EnumPrinterKeyA
EnumPrintersA
ConfigurePortA
FlushPrinter
GetFormA
GetJobA
GetPrintProcessorDirectoryA
GetPrinterDataExA
GetPrinterDriverA
GetPrinterA
OpenPrinterA
PrinterMessageBoxA
ReadPrinter
ResetPrinterA
ScheduleJob
SetFormA
SetJobA
SetPortA
SetPrinterDataExA
SetPrinterDataA
StartDocPrinterA
StartPagePrinter
WaitForPrinterChange
WritePrinter
XcvDataW
ClosePrinter
AddPrinterA
AddPrinterDriverA
AddPrinterDriverExA
AddPrinterConnectionA
AddPrintProvidorA
AddPrintProcessorA
AddPortA
AddMonitorA
AddJobA
AddFormA
AbortPrinter
FindClosePrinterChangeNotification
kernel32
HeapAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
CreateFileW
GetStringTypeW
LCMapStringW
ReadFile
GetProcessHeap
SetEndOfFile
IsProcessorFeaturePresent
MultiByteToWideChar
WriteConsoleW
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
Sleep
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
RaiseException
HeapDestroy
HeapCreate
GetModuleFileNameW
GetStdHandle
WriteFile
GetCurrentThread
InterlockedDecrement
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
FatalAppExitA
DeleteCriticalSection
RtlUnwind
InitializeCriticalSectionAndSpinCount
SetFilePointer
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
HeapSetInformation
GetCommandLineA
HeapReAlloc
GetLastError
DecodePointer
GetFileAttributesA
GetTempFileNameA
CopyFileA
GetShortPathNameA
GetEnvironmentVariableA
WaitForMultipleObjects
InterlockedCompareExchange
InterlockedIncrement
DeviceIoControl
WaitForSingleObject
LoadLibraryA
HeapValidate
GetLocalTime
CreateFileA
HeapFree
CreateDirectoryA
ResetEvent
VirtualFree
VirtualProtect
VirtualAlloc
GetProfileStringW
AddAtomA
LoadLibraryExA
GetNativeSystemInfo
ExpandEnvironmentStringsA
GetDriveTypeA
GetVolumeInformationA
GetProcAddress
GetModuleHandleW
ExitProcess
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ