Static task
static1
Behavioral task
behavioral1
Sample
ea68e6f54ac44104c6c0d15b4cd014fb5fdeb8e335581fa399558cbb2a0a6d78.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea68e6f54ac44104c6c0d15b4cd014fb5fdeb8e335581fa399558cbb2a0a6d78.exe
Resource
win10v2004-20220901-en
General
-
Target
ea68e6f54ac44104c6c0d15b4cd014fb5fdeb8e335581fa399558cbb2a0a6d78
-
Size
356KB
-
MD5
4edae8678d21615804f1f53351b36028
-
SHA1
d36e8d71c781d5197e8f3a3f5bcacead0048fffa
-
SHA256
ea68e6f54ac44104c6c0d15b4cd014fb5fdeb8e335581fa399558cbb2a0a6d78
-
SHA512
2f75945216ee7bec45e45866357acc8aac7664d19727438bcecbd23af5fb204353db6dd8b4e57c5840959acb6e77e8cc9f62b0dd7d079e866aa10772781ce09b
-
SSDEEP
6144:psLG491CN82RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:+d1Cq2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
ea68e6f54ac44104c6c0d15b4cd014fb5fdeb8e335581fa399558cbb2a0a6d78.exe windows x86
7c6c82d462bd6cc2f7c48959353799c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SleepEx
GetSystemDefaultLangID
CreateMutexA
CreateFileMappingA
GetLastError
UnmapViewOfFile
OpenProcess
CloseHandle
MapViewOfFile
CreateThread
lstrlenA
GetFullPathNameA
GetVersionExA
lstrcpynA
Sleep
GetSystemDirectoryA
lstrcatA
OpenFile
lstrcpyA
LoadLibraryA
GetProcAddress
lstrcmpA
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
WideCharToMultiByte
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
FlushFileBuffers
HeapFree
FreeLibrary
HeapAlloc
GetLocalTime
GetSystemTime
GetTimeZoneInformation
CompareStringW
SetEnvironmentVariableA
user32
PostMessageA
LoadStringA
mouse_event
GetAsyncKeyState
RegisterClassA
FindWindowA
SendMessageTimeoutA
PostQuitMessage
IsWindowVisible
GetWindowThreadProcessId
CreateWindowExA
MessageBoxA
WindowFromPoint
LoadIconA
GetWindow
KillTimer
DestroyWindow
GetSystemMetrics
SetSystemCursor
GetDesktopWindow
CopyIcon
FindWindowExA
LoadImageA
SetDoubleClickTime
LoadCursorA
SystemParametersInfoA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
keybd_event
LoadMenuA
GetSubMenu
InsertMenuA
DeleteMenu
DrawMenuBar
SetForegroundWindow
CheckMenuItem
TrackPopupMenu
DestroyMenu
GetClassNameA
GetWindowTextA
MessageBeep
GetForegroundWindow
GetParent
GetWindowDC
GetWindowRect
ReleaseDC
GetSystemMenu
GetMenuItemInfoA
GetCursorPos
ClipCursor
GetWindowLongA
IsWindow
SetRect
DefWindowProcA
RegisterWindowMessageA
SendMessageA
WinHelpA
gdi32
GetStockObject
PatBlt
advapi32
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExA
shell32
Shell_NotifyIconA
ShellExecuteA
winmm
PlaySoundA
imm32
ImmDisableIME
psapi
EnumProcessModules
GetModuleFileNameExA
EnumProcesses
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE