Static task
static1
Behavioral task
behavioral1
Sample
e3f2e68e4b5a7afeb71af2b2f078865ad34562f1829dd4246ecd5347a55ac24e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3f2e68e4b5a7afeb71af2b2f078865ad34562f1829dd4246ecd5347a55ac24e.exe
Resource
win10v2004-20221111-en
General
-
Target
e3f2e68e4b5a7afeb71af2b2f078865ad34562f1829dd4246ecd5347a55ac24e
-
Size
838KB
-
MD5
5865bd1280798ae541e8d2fed4141869
-
SHA1
16284ee57ceadd4b8cd81d5e4234db2539c971c4
-
SHA256
e3f2e68e4b5a7afeb71af2b2f078865ad34562f1829dd4246ecd5347a55ac24e
-
SHA512
e67f0583a44a40e1edda3f472559ae3390ea13941cbb012a1a0b54f0c5464f2ce93e30440ec7f16d58288a67468806ad17e61a5244345c46841c337ec7935ed8
-
SSDEEP
24576:rEWbBv6Bh5NjYmsem4fQt0hNDCBmw42e+sg36:B1v67D0m5TcOO3425so
Malware Config
Signatures
Files
-
e3f2e68e4b5a7afeb71af2b2f078865ad34562f1829dd4246ecd5347a55ac24e.exe windows x86
6a19d9e66e644defaf34cdb126645ebf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
CloseHandle
LocalFree
LocalUnlock
GetCurrentDirectoryA
GetSystemTime
CreateThread
LoadLibraryExA
Sleep
PulseEvent
HeapCreate
GetCommandLineW
CreateFileA
GetModuleHandleA
GetComputerNameA
SetEvent
UnmapViewOfFile
SetLastError
CreateThread
GetTickCount
user32
GetKeyState
CallWindowProcA
SetFocus
FillRect
CreateWindowExA
GetDlgItem
DispatchMessageA
GetDC
DrawEdge
DrawMenuBar
GetScrollBarInfo
CheckRadioButton
IsWindow
clbcatq
UpdateFromAppChange
SetSetupSave
DowngradeAPL
CheckMemoryGates
SetupOpen
desk.cpl
InstallScreenSaver
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE