Static task
static1
Behavioral task
behavioral1
Sample
e4b7973e00341aa435fa0fc93e2af4d326c8b0ca80e0b027ac0e84ad5f600f65.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e4b7973e00341aa435fa0fc93e2af4d326c8b0ca80e0b027ac0e84ad5f600f65.exe
Resource
win10v2004-20220812-en
General
-
Target
e4b7973e00341aa435fa0fc93e2af4d326c8b0ca80e0b027ac0e84ad5f600f65
-
Size
1.2MB
-
MD5
d19f291d28e5e6b0f9356805ed1f4e68
-
SHA1
a8eae29f4a9dbb8e311f0886607d8168d9368f5c
-
SHA256
e4b7973e00341aa435fa0fc93e2af4d326c8b0ca80e0b027ac0e84ad5f600f65
-
SHA512
d2ddde8d1386d5750f22b9207e73a4065c3dadac7b994495a0317d2cd8241b7b819caca3a872f4164735e763f603cf822e6c54c1798ea34052f68a368f865477
-
SSDEEP
24576:Ka5dvFB3PAKYO5EVrXHM8DehmYaK7oSTLuNtfZ2Y3ubjsmJwGnEA6vH:XHBoKYTT1DSmYB7oS3uNXlunrREAC
Malware Config
Signatures
Files
-
e4b7973e00341aa435fa0fc93e2af4d326c8b0ca80e0b027ac0e84ad5f600f65.exe windows x86
cb7f492a68bfd69c665e7a0db6a8b730
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDBCSLeadByte
GlobalDeleteAtom
GlobalAddAtomA
CreateProcessA
GetShortPathNameA
WriteProfileStringA
lstrcpyA
CopyFileA
SystemTimeToFileTime
GetFileTime
GetExitCodeProcess
SetFileAttributesA
GetFileAttributesA
FileTimeToSystemTime
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetCurrentThreadId
GetUserDefaultLangID
GetVersionExA
GetModuleHandleA
GetSystemDirectoryA
SearchPathA
GetEnvironmentVariableA
GetWindowsDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
DeleteFileA
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
GetStartupInfoA
MultiByteToWideChar
lstrcmpA
lstrlenA
lstrcpynA
SetFileTime
FlushFileBuffers
SetLastError
CloseHandle
LocalAlloc
CreateFileA
LocalFree
GetFileSize
ReadFile
SetFilePointer
GetLastError
GetVolumeInformationA
WriteFile
user32
SetFocus
CheckDlgButton
KillTimer
EndPaint
DrawIcon
BeginPaint
IsIconic
DestroyIcon
UnhookWindowsHookEx
SetWindowsHookExA
GetClassInfoA
GetSystemMetrics
SendDlgItemMessageA
SetTimer
CharNextA
GetDesktopWindow
GetWindowRect
GetDlgItem
EnableWindow
PackDDElParam
FreeDDElParam
GetDlgItemTextA
MoveWindow
PostMessageA
FindWindowA
WaitForInputIdle
SendMessageA
LoadIconA
SetWindowTextA
CharUpperA
SetDlgItemTextA
PeekMessageA
IsDialogMessageA
DispatchMessageA
wsprintfA
CharLowerA
CharPrevA
EndDialog
MessageBoxA
GetWindowLongA
CallNextHookEx
DialogBoxIndirectParamA
SystemParametersInfoA
TranslateMessage
gdi32
SetMapMode
GetMapMode
comdlg32
GetOpenFileNameA
GetFileTitleA
advapi32
RegOpenKeyA
RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegSetValueA
shell32
ShellExecuteA
crtdll
strchr
_global_unwind2
memcpy
exit
_local_unwind2
strrchr
atoi
memset
_exit
_XcptFilter
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rrdata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE