Static task
static1
Behavioral task
behavioral1
Sample
e7adf47d64b4bd43eb06040564e6fb0ad66bc5e86825e6084e0aaca6264fb11d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e7adf47d64b4bd43eb06040564e6fb0ad66bc5e86825e6084e0aaca6264fb11d.exe
Resource
win10v2004-20220812-en
General
-
Target
e7adf47d64b4bd43eb06040564e6fb0ad66bc5e86825e6084e0aaca6264fb11d
-
Size
805KB
-
MD5
6a26fddc13d5f18d4b68d0954cf7bd41
-
SHA1
eaad498e7ae774a8ab168bace53d3a918bc8ce50
-
SHA256
e7adf47d64b4bd43eb06040564e6fb0ad66bc5e86825e6084e0aaca6264fb11d
-
SHA512
2a3b2a5f336d1b44d3e761d98967433e276dda59fabfff0ff2d058f205eb50a406bb03cf144eb30623457bef345e56ad87d985191dcd7cf7797deb7b52d0054a
-
SSDEEP
12288:VfGSonHcp3h5MPAkOG0LPvRYkwHDQeh+oA5r4YQFpEcAd7zGdgx:xoqnMIBG0L3RpuDZ+afE7d7ad
Malware Config
Signatures
Files
-
e7adf47d64b4bd43eb06040564e6fb0ad66bc5e86825e6084e0aaca6264fb11d.exe windows x86
06dd39d76e2e889170ae644f7c72a5ff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
InterlockedExchange
QueryPerformanceCounter
InterlockedExchange
GetModuleFileNameW
DisableThreadLibraryCalls
UnhandledExceptionFilter
SetLastError
LeaveCriticalSection
GetLastError
FreeLibrary
CreateFileW
CreateEventW
GetModuleFileNameA
VirtualProtect
Sleep
LocalAlloc
QueryPerformanceCounter
HeapAlloc
DisableThreadLibraryCalls
EnterCriticalSection
CreateThread
LoadLibraryW
MultiByteToWideChar
VirtualProtect
lstrlenA
CreateEventW
InterlockedDecrement
LoadLibraryA
InterlockedIncrement
GetCurrentThreadId
InterlockedExchange
EnterCriticalSection
UnhandledExceptionFilter
GetModuleFileNameW
UnhandledExceptionFilter
CreateThread
InterlockedCompareExchange
GetCurrentThreadId
GetModuleHandleW
LeaveCriticalSection
InitializeCriticalSection
GetModuleHandleA
VirtualProtect
LoadLibraryW
CreateFileW
GetModuleFileNameA
HeapDestroy
GetModuleHandleA
LocalAlloc
HeapFree
GetProcAddress
LocalAlloc
GetCurrentProcess
QueryPerformanceCounter
GetLastError
LocalFree
GetModuleFileNameA
MultiByteToWideChar
GetCurrentProcessId
GetCurrentThreadId
GetVersionExA
LocalFree
InitializeCriticalSection
CloseHandle
CreateFileW
GetSystemTimeAsFileTime
MultiByteToWideChar
GetProcessHeap
InterlockedDecrement
VirtualProtect
CreateFileW
HeapFree
GetModuleHandleA
CreateFileW
GetModuleHandleA
lstrlenA
LocalAlloc
LocalFree
QueryPerformanceCounter
CloseHandle
CreateEventW
VirtualProtect
user32
TranslateMessage
DialogBoxParamW
GetSysColor
SendDlgItemMessageW
LoadCursorW
GetWindowRect
GetDlgItem
KillTimer
SetDlgItemTextW
LoadCursorW
SetFocus
LoadStringW
DefWindowProcW
SetWindowLongW
SetWindowPos
wsprintfA
GetWindowRect
SetCursor
DispatchMessageW
GetParent
GetClientRect
GetDlgItem
SetFocus
SetFocus
PostMessageW
SendDlgItemMessageW
DestroyWindow
BeginPaint
BeginPaint
BeginPaint
GetDC
SetWindowPos
EndPaint
SetForegroundWindow
DefWindowProcW
SetForegroundWindow
SetForegroundWindow
GetWindowLongW
KillTimer
GetDlgItem
CreateWindowExW
GetWindowLongW
SendMessageW
SendMessageW
PostMessageW
SetForegroundWindow
DefWindowProcW
SendMessageW
DefWindowProcW
BeginPaint
GetDlgItem
DestroyWindow
GetDlgItem
InvalidateRect
DefWindowProcW
SetForegroundWindow
GetClientRect
MessageBoxW
DispatchMessageW
SetCursor
PostQuitMessage
GetWindowLongW
IsWindow
SetTimer
GetDC
LoadStringW
GetParent
SetWindowPos
KillTimer
IsDlgButtonChecked
CharNextW
DefWindowProcW
GetParent
TranslateMessage
MessageBoxW
CreateWindowExW
SetDlgItemTextW
GetWindowLongW
LoadIconW
IsWindow
LoadCursorW
MessageBoxW
GetParent
SetCursor
SetForegroundWindow
GetSystemMetrics
Sections
.text Size: 718KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ