Static task
static1
Behavioral task
behavioral1
Sample
eea5bdd18c7748dc4f5f6b2c1be6d0b614ecf330e89c2f954a5bc8f077938a2d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eea5bdd18c7748dc4f5f6b2c1be6d0b614ecf330e89c2f954a5bc8f077938a2d.exe
Resource
win10v2004-20221111-en
General
-
Target
eea5bdd18c7748dc4f5f6b2c1be6d0b614ecf330e89c2f954a5bc8f077938a2d
-
Size
2.7MB
-
MD5
3f84057e5bb3e5fbab2741e3c06f7aea
-
SHA1
8aea325b5f7ad56498847c95b5e1debadac8e735
-
SHA256
eea5bdd18c7748dc4f5f6b2c1be6d0b614ecf330e89c2f954a5bc8f077938a2d
-
SHA512
a7448003bd5cbc6582a88458eadcebb3bb686c0d138f2803c64ec8796e3bbf7f38f96997796286a0baae49d95cf6fd0bebaf6e8e907997ac0c0ab96afe36b2f2
-
SSDEEP
49152:HRbc43RSlzQiC1wbmlDXWCjSjMaDzdqqAixoudLMWJNPWTSAixoudLMWJNPa:xh3RSMoUXWYSjMWQqAWAx
Malware Config
Signatures
Files
-
eea5bdd18c7748dc4f5f6b2c1be6d0b614ecf330e89c2f954a5bc8f077938a2d.exe windows x86
9e3d41b1ad03a92108a90716c046578d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord3830
ord3831
ord3825
ord3079
ord4080
ord826
ord4622
ord4424
ord1182
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord3953
ord5714
ord5289
ord1116
ord5307
ord4698
ord4079
ord2725
ord342
ord5302
ord5300
ord3346
ord1577
ord1168
ord1575
ord1176
ord500
ord6142
ord772
ord823
ord815
ord600
ord1578
ord6467
ord3738
ord1253
ord1570
ord1197
ord1243
ord269
ord2976
ord561
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord1255
ord825
msvcrt
_ftol
sprintf
div
_CIacos
qsort
rand
_cabs
ceil
_CIfmod
longjmp
_setjmp3
__CxxLongjmpUnwind
printf
isprint
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strdup
_close
_lseek
_write
_read
_setmode
floor
_CxxThrowException
strncpy
strncmp
realloc
malloc
_mbsnbcpy
_CIpow
__CxxFrameHandler
getc
fputc
fflush
ftell
fseek
fwrite
fread
fopen
fclose
_purecall
free
calloc
_except_handler3
abort
fprintf
_iob
strtod
_unlink
_open
strtok
exp
vfprintf
strchr
atof
atoi
__mb_cur_max
_isctype
_pctype
vsprintf
tmpnam
exit
sscanf
getenv
strcpy
strlen
memcpy
memset
memmove
pow
log
sqrt
fabs
atan2
strstr
kernel32
GlobalFree
LocalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
SizeofResource
LoadResource
LockResource
LocalAlloc
MulDiv
HeapDestroy
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
InterlockedCompareExchange
GetSystemInfo
VirtualQuery
VirtualProtect
InterlockedExchange
SetStdHandle
IsBadCodePtr
IsBadReadPtr
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
GetEnvironmentStrings
IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
VirtualFree
HeapCreate
CloseHandle
WaitForSingleObject
CreateProcessA
GetTickCount
GetCommandLineA
MulDiv
GetProcAddress
GetModuleHandleA
GetVolumeInformationA
SetCurrentDirectoryA
CreateDirectoryA
CopyFileA
DeleteFileA
MoveFileA
GetFileAttributesA
FindClose
FindFirstFileA
GlobalUnlock
GlobalLock
GlobalAlloc
ExpandEnvironmentStringsA
Sleep
CreateEventA
CreateThread
WritePrivateProfileStringA
GetVersionExA
GetLastError
LoadLibraryA
FreeLibrary
GetFullPathNameA
GetUserDefaultLCID
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GlobalReAlloc
FindNextFileA
lstrcpyA
WinExec
lstrlenA
lstrcatA
InitializeCriticalSection
DeleteCriticalSection
GlobalFree
GlobalSize
ExitProcess
GetCurrentThreadId
GetModuleFileNameA
RemoveDirectoryA
lstrlenW
ReadFile
LockResource
LoadResource
FindResourceA
SetEvent
CreateFileA
WaitForMultipleObjects
WriteFile
GetProfileStringA
LeaveCriticalSection
EnterCriticalSection
ReleaseSemaphore
ResumeThread
CreateSemaphoreA
GetCurrentProcess
MultiByteToWideChar
WideCharToMultiByte
TerminateThread
IsDBCSLeadByte
lstrcmpA
lstrcmpiA
lstrcpynA
FileTimeToSystemTime
FileTimeToDosDateTime
FileTimeToLocalFileTime
SetFilePointer
GetFileSize
GetFileInformationByHandle
GetFileType
MapViewOfFile
CreateFileMappingA
DuplicateHandle
UnmapViewOfFile
SystemTimeToFileTime
GetLocalTime
CreateMutexA
ReleaseMutex
SuspendThread
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetACP
HeapSize
TerminateProcess
InterlockedIncrement
GetSystemTime
GetTimeZoneInformation
RaiseException
RtlUnwind
GetStartupInfoA
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
GlobalFlags
GetCurrentThread
GetFileTime
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetStringTypeExA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetLastError
LocalFree
InterlockedDecrement
SetUnhandledExceptionFilter
user32
ReleaseDC
GetIconInfo
DrawTextA
GetSysColor
GetDC
ReleaseDC
IsChild
TrackPopupMenu
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
UnregisterClassA
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBoxA
GetCursorPos
GetSystemMetrics
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfA
WaitForInputIdle
GetWindowTextA
GetWindowTextLengthA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
IsRectEmpty
GetNextDlgTabItem
GetWindowPlacement
TranslateAcceleratorA
GetLastActivePopup
GetMessageTime
RemovePropA
GetPropA
UnhookWindowsHookEx
EnableWindow
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetScrollPos
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
GetClassNameA
GetDesktopWindow
FillRect
GetDC
SetCursor
LoadCursorA
SetCursorPos
SetActiveWindow
GetSysColor
SetWindowLongA
GetWindowLongA
EndDialog
RedrawWindow
LoadStringA
GetSysColorBrush
IsWindowVisible
OffsetRect
PtInRect
DestroyIcon
IntersectRect
UnregisterHotKey
RegisterHotKey
CreateWindowExA
CallWindowProcA
CharUpperA
GetForegroundWindow
LoadIconA
TranslateMessage
DrawFrameControl
DrawEdge
DrawFocusRect
WindowFromPoint
GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
CreateIconFromResourceEx
CreateIconFromResource
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetClassInfoA
DefWindowProcA
GetSystemMenu
DeleteMenu
GetMenu
SetMenu
PeekMessageA
DrawIconEx
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
GetDlgCtrlID
GetSubMenu
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
LoadImageA
SystemParametersInfoA
ShowWindow
SetPropA
IsWindowEnabled
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
SetRect
RegisterWindowMessageA
InflateRect
gdi32
PlayEnhMetaFile
CreateDIBitmap
GetDeviceCaps
GetStockObject
GetObjectA
DeleteDC
SetEnhMetaFileBits
GetEnhMetaFileHeader
SetWinMetaFileBits
DeleteEnhMetaFile
ExtTextOutA
GetEnhMetaFilePaletteEntries
CreatePalette
SelectPalette
CreateCompatibleDC
CreateRectRgn
CombineRgn
CreateFontIndirectA
SetTextColor
SetBkMode
StretchDIBits
RectVisible
CreateCompatibleBitmap
CreateBitmap
SetBkColor
StretchBlt
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
BitBlt
DeleteObject
SelectObject
RealizePalette
GetDIBits
CreateDIBSection
BitBlt
StartPage
StartDocA
DeleteDC
EndDoc
CreateCompatibleDC
GetTextMetricsA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
Ellipse
GetViewportExtEx
ExtSelectClipRgn
LineTo
MoveToEx
ExcludeClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
EndPage
GetObjectA
GetStockObject
CreateFontIndirectA
CreateSolidBrush
FillRgn
CreateRectRgn
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
GetTextExtentPoint32A
PatBlt
CombineRgn
CreatePen
SelectObject
CreateBitmap
CreateDCA
CreateCompatibleBitmap
GetPolyFillMode
GetStretchBltMode
GetROP2
GetBkColor
GetBkMode
GetTextColor
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
EndPath
BeginPath
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetDIBits
GetDeviceCaps
RealizePalette
SelectPalette
StretchBlt
CreatePalette
GetSystemPaletteEntries
TranslateCharsetInfo
CreateFontA
SetBkColor
CreateRectRgnIndirect
SetStretchBltMode
GetClipRgn
CreatePolygonRgn
SelectClipRgn
DeleteObject
CreateDIBitmap
winmm
midiStreamClose
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutRestart
midiStreamRestart
midiStreamOpen
midiStreamProperty
midiOutPrepareHeader
midiStreamOut
midiStreamStop
midiOutReset
midiOutUnprepareHeader
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegQueryValueExA
RegCreateKeyExA
shell32
DragFinish
DragAcceptFiles
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
Shell_NotifyIconA
ShellExecuteA
DragQueryFileA
ole32
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
CLSIDFromProgID
OleInitialize
OleRun
CoCreateInstance
CLSIDFromString
OleUninitialize
oleaut32
UnRegisterTypeLi
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayPutElement
SafeArrayCreate
SafeArrayDestroy
SysAllocString
VariantInit
VariantCopyInd
SafeArrayGetElement
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
VariantClear
VariantCopy
odbc32
ord4
ord49
ord20
ord17
ord59
ord8
ord44
ord46
ord68
ord43
ord41
ord2
ord1
ord23
ord50
ord45
ord51
ord15
ord9
ord14
ord11
ord10
ord3
ord19
ord72
ord12
ord18
ord13
ord61
ord16
ord5
ord48
comctl32
ImageList_DragShowNolock
ImageList_GetIcon
ImageList_Duplicate
ImageList_Read
ord17
ImageList_EndDrag
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_Destroy
ImageList_Create
ImageList_BeginDrag
ImageList_Add
ImageList_SetBkColor
ImageList_GetImageCount
ws2_32
recvfrom
closesocket
inet_ntoa
WSACleanup
WSAAsyncSelect
ntohl
accept
getpeername
recv
ioctlsocket
wldap32
ord29
comdlg32
GetFileTitleA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 616KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 244KB - Virtual size: 511KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ