Static task
static1
Behavioral task
behavioral1
Sample
e9b8d4f558507e511dd8298b9422d8c55043a70ff28ce1cfa35d9868211235e3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9b8d4f558507e511dd8298b9422d8c55043a70ff28ce1cfa35d9868211235e3.exe
Resource
win10v2004-20220812-en
General
-
Target
e9b8d4f558507e511dd8298b9422d8c55043a70ff28ce1cfa35d9868211235e3
-
Size
320KB
-
MD5
7d9f5dee764d8b38e386892d8574a153
-
SHA1
634f359e9027b2fa24a911793f225f7b1fdcd20e
-
SHA256
e9b8d4f558507e511dd8298b9422d8c55043a70ff28ce1cfa35d9868211235e3
-
SHA512
744b664eb1cf5b1e160f5ec61869345755ff4304da537eba9882368427dee7e292b39d33a27c856d0d554f479324717d5d9ac08d5926b32e871c69a5c43d0005
-
SSDEEP
6144:0bzg46kX/oPFjnJIU0mX/egR9p0EQF7cpf42tFFrHdS3p5A6CkABe:C0kXgHamv59pCipAW7dUMtkABe
Malware Config
Signatures
Files
-
e9b8d4f558507e511dd8298b9422d8c55043a70ff28ce1cfa35d9868211235e3.exe windows x86
98d6341c424c70063d9d1f9190a7234f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadStringA
LoadIconA
SetMenuItemInfoA
CallWindowProcA
IsWindow
SetScrollInfo
DialogBoxIndirectParamA
MessageBoxA
GetSysColor
CreateWindowExA
GetClassInfoExA
EnumWindows
CallNextHookEx
GetWindowLongA
DefWindowProcA
ReleaseDC
CheckMenuRadioItem
LoadImageA
DrawIcon
DispatchMessageA
IsWindowEnabled
GetClassNameA
GetWindowTextLengthA
RegisterClassExA
ClientToScreen
FrameRect
SystemParametersInfoA
SetWindowsHookExA
gdi32
GetObjectA
CreateDCA
DPtoLP
GetCharWidthA
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
DeleteDC
CreatePen
DeleteObject
SetMapMode
ole32
CoRevokeClassObject
OleUninitialize
OleInitialize
CoInitialize
advapi32
AllocateAndInitializeSid
SetSecurityDescriptorGroup
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
QueryServiceStatus
OpenThreadToken
OpenServiceA
OpenSCManagerA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
FreeSid
OpenProcessToken
StartServiceCtrlDispatcherA
InitializeSecurityDescriptor
RegEnumKeyA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetSecurityDescriptorDacl
SetServiceStatus
LookupPrivilegeValueA
SetSecurityDescriptorOwner
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ChooseColorA
ChooseFontA
comctl32
ImageList_Draw
ord6
CreateToolbarEx
ImageList_Add
DestroyPropertySheetPage
ImageList_SetOverlayImage
ord17
PropertySheetA
kernel32
GetStringTypeW
GetSystemInfo
LCMapStringW
GetStringTypeA
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
LoadLibraryA
MultiByteToWideChar
WriteFile
LCMapStringA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
SetEndOfFile
GetLocaleInfoA
WriteConsoleW
VirtualProtect
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
GetLastError
CloseHandle
ReadFile
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
SetFilePointer
HeapAlloc
QueryPerformanceCounter
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ