Static task
static1
Behavioral task
behavioral1
Sample
e30b325175f133691c90c255fe14800eb9b7df6c6d08b68da3836a33c2b1227e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e30b325175f133691c90c255fe14800eb9b7df6c6d08b68da3836a33c2b1227e.exe
Resource
win10v2004-20220901-en
General
-
Target
e30b325175f133691c90c255fe14800eb9b7df6c6d08b68da3836a33c2b1227e
-
Size
444KB
-
MD5
ecd6ea11256bed04787e4f4396269b84
-
SHA1
d064f9a9b74d60dde168c250fec2f72d5a8f9ff2
-
SHA256
e30b325175f133691c90c255fe14800eb9b7df6c6d08b68da3836a33c2b1227e
-
SHA512
1cb8935187168180ddf26115d14136afb2e276575a839d6ca7003539779ea3165d8e4365181337af7797a596ab50731bd5709e542ad72c921e774e31de709e98
-
SSDEEP
12288:XRo7E6GNPCD9AVd7bNugInPc0oEf0uTSF5OwK9b:XS7EBUD9k9uvnFowPSF5OwK9
Malware Config
Signatures
Files
-
e30b325175f133691c90c255fe14800eb9b7df6c6d08b68da3836a33c2b1227e.exe windows x86
bc7d3bff6b7dcaefbe1983ed3a558855
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_wcslwr
_wcsupr
_wcsicmp
wcscmp
isalpha
wcschr
wcsrchr
wcsstr
wcsspn
wcscspn
towupper
isdigit
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
atol
iswctype
sprintf
setlocale
wprintf
wctomb
wcslen
wcscat
isprint
toupper
isspace
strcspn
mbtowc
_except_handler3
strchr
wcsncmp
swprintf
wcscpy
qsort
memmove
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
CompareStringW
MultiByteToWideChar
FindFirstFileW
GetStdHandle
GetSystemTime
GetDateFormatW
GetSystemDefaultLCID
GetTimeFormatW
CompareFileTime
SystemTimeToFileTime
FileTimeToSystemTime
GetTempPathW
GetTempFileNameW
GlobalFree
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetFileType
GetDriveTypeW
SearchPathW
GetEnvironmentVariableW
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
FreeLibrary
GetVolumeInformationW
LocalAlloc
SetLastError
DeviceIoControl
LocalFree
DeleteVolumeMountPointW
WriteFile
GetLargestConsoleWindowSize
SetConsoleWindowInfo
SetConsoleScreenBufferSize
WriteConsoleW
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
IsDBCSLeadByte
GetCurrentProcess
GetCommandLineW
GetLastError
FormatMessageW
InterlockedDecrement
GetModuleHandleW
LoadLibraryExW
InterlockedCompareExchange
SetThreadLocale
GetUserDefaultLCID
GetConsoleOutputCP
CloseHandle
SetCommState
GetCommTimeouts
GetCommState
SetCommTimeouts
CreateFileW
CreateDirectoryW
FindClose
FindNextFileW
RemoveDirectoryW
DeleteFileW
SetFileAttributesW
PrivCopyFileExW
GetFileAttributesW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
SetFilePointerEx
ReadFile
SetFileTime
MoveFileW
SetConsoleMode
GetConsoleMode
SetConsoleCtrlHandler
FlushConsoleInputBuffer
PeekConsoleInputW
GetNumberOfConsoleInputEvents
WideCharToMultiByte
GetFullPathNameW
FindVolumeMountPointClose
FindNextVolumeMountPointW
FindFirstVolumeMountPointW
SetErrorMode
GetVolumeNameForVolumeMountPointW
ExitProcess
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
GetConsoleCP
SetConsoleCP
SetConsoleOutputCP
user32
wsprintfA
CharUpperW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
IsTextUnicode
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fhj5 Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fhj50 Size: 512B - Virtual size: 202B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fhj51 Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fhj52 Size: 201KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fhj53 Size: 201KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fhj54 Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fhj55 Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fhj56 Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fhj57 Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fhj58 Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fhj59 Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1231 Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JAKS Size: 512B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.GAHS Size: 512B - Virtual size: 194B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HAJS Size: 512B - Virtual size: 166B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HnJS Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ