Static task
static1
Behavioral task
behavioral1
Sample
e993b8181baef3aef289ea2919fce26627bddffdb941d74112fb348ff3169045.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e993b8181baef3aef289ea2919fce26627bddffdb941d74112fb348ff3169045.exe
Resource
win10v2004-20220812-en
General
-
Target
e993b8181baef3aef289ea2919fce26627bddffdb941d74112fb348ff3169045
-
Size
264KB
-
MD5
3abae642b466df54e9b2a72ff9ec2e75
-
SHA1
0d22ef55387ac112ef5520fb6ebf778d66a24f84
-
SHA256
e993b8181baef3aef289ea2919fce26627bddffdb941d74112fb348ff3169045
-
SHA512
403d945748b2f7d0d038ee2c26cfffca6008d14558da16eac7713fb6d57e84f7d12fa398201573407975fcf839ab46b7946522af67220547f6d16610d6c497c3
-
SSDEEP
6144:yJMTUlATDI7IFFIO6p1ysHC5jYik9m4zrp:yJMAiDIqFIO65HCg9
Malware Config
Signatures
Files
-
e993b8181baef3aef289ea2919fce26627bddffdb941d74112fb348ff3169045.exe windows x86
9fe823480a9b9f73d77388cf3482c7a4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetFileTitleW
ChooseFontW
oleaut32
OleCreateFontIndirect
SysAllocString
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VarR8Pow
VariantChangeType
VariantClear
VariantCopy
VariantInit
VariantTimeToSystemTime
SafeArrayDestroy
shlwapi
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
EnumPrinterDataW
ole32
CoTaskMemFree
CoUninitialize
CoRegisterMessageFilter
CoRegisterChannelHook
CoInitializeEx
CoGetClassObject
CoFreeUnusedLibraries
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleIsCurrentClipboard
OleUninitialize
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
gdi32
TextOutW
StartPage
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetMapMode
SetBkColor
SelectObject
OffsetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
GetTextColor
GetStockObject
GetMapMode
GetDeviceCaps
GetClipBox
ExtTextOutW
ExtSelectClipRgn
Escape
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
CreateBitmap
oledlg
OleUIBusyW
comctl32
InitCommonControlsEx
ImageList_SetFilter
wininet
RunOnceUrlCache
InternetReadFile
InternetGetLastResponseInfoW
InternetCloseHandle
HttpSendRequestW
HttpOpenRequestW
GetUrlCacheEntryInfoExW
advapi32
RegQueryValueW
RegQueryValueExW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegCreateKeyExW
RegCloseKey
OpenTraceW
ConvertSecurityDescriptorToAccessA
user32
MessageBeep
MessageBoxW
ModifyMenuW
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetRect
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WinHelpW
MapWindowPoints
MapDialogRect
LoadImageW
GetWindowDC
GetWindow
GetTopWindow
LoadIconW
GetSysColor
GetSubMenu
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
DefWindowProcW
CreateWindowExW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CharUpperW
CharNextW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
LoadCursorW
LoadBitmapW
IsWindowVisible
IsWindow
IsWindowEnabled
IsRectEmpty
IsIconic
IsDialogMessageW
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetSysColorBrush
GetWindowRect
GetSystemMetrics
shell32
ShellExecuteW
SHGetFolderPathW
kernel32
SetStdHandle
SetLastError
SetFilePointer
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
lstrcmpA
lstrcmpW
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
SetFileAttributesW
SetErrorMode
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
SetEnvironmentVariableA
RtlUnwind
ReadFile
RaiseException
QueryPerformanceCounter
MulDiv
LockResource
LockFile
IsDBCSLeadByteEx
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryW
LoadResource
lstrcpynA
lstrlenW
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersion
GetTimeZoneInformation
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameW
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetEnvironmentStringsW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineA
GetCPInfo
GetBinaryTypeW
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
EnumSystemLocalesA
DuplicateHandle
DeleteCriticalSection
LocalReAlloc
CreateFileW
CreateDirectoryW
ConvertDefaultLocale
Sections
.text Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ