Static task
static1
Behavioral task
behavioral1
Sample
e4a76a09ee3dd4e79a2e2bb1977f36a9d81411e9c355380c432311d00a82fc29.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e4a76a09ee3dd4e79a2e2bb1977f36a9d81411e9c355380c432311d00a82fc29.exe
Resource
win10v2004-20221111-en
General
-
Target
e4a76a09ee3dd4e79a2e2bb1977f36a9d81411e9c355380c432311d00a82fc29
-
Size
432KB
-
MD5
9b0bbbf8e79c51b3a06f09358bbbb11d
-
SHA1
d196f69ce4bcbb585bfed12691cec2fd9adba0e3
-
SHA256
e4a76a09ee3dd4e79a2e2bb1977f36a9d81411e9c355380c432311d00a82fc29
-
SHA512
4944b8ec4c4f429aae17376eb15f75be3713a1484b16366f6bd06e18a44f5df64acb326d270da4d5eaec436463833fff5d2ac27565b6afa90790d96c45c5254e
-
SSDEEP
12288:SxSKCbOwST3j0HhGZvACkQz5kkhMGDk9ucm:SO/SzAHhGFkNDm
Malware Config
Signatures
Files
-
e4a76a09ee3dd4e79a2e2bb1977f36a9d81411e9c355380c432311d00a82fc29.exe windows x86
08a2671b35e4632d4976691ebe6fc280
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseFontW
ChooseFontA
kernel32
SetConsoleCP
ExitProcess
Sleep
GetEnvironmentStringsW
MoveFileExW
CompareStringA
GetStartupInfoA
ContinueDebugEvent
HeapReAlloc
OpenMutexW
SetConsoleActiveScreenBuffer
InterlockedExchange
LCMapStringW
MultiByteToWideChar
EnumSystemCodePagesW
GetDateFormatA
GetOEMCP
OutputDebugStringW
FillConsoleOutputAttribute
FreeResource
HeapFree
GetTickCount
ReadConsoleOutputCharacterA
GetCurrentProcessId
UnhandledExceptionFilter
WriteFile
SetEnvironmentVariableA
RtlUnwind
TlsSetValue
FindFirstFileExA
GetProcAddress
VirtualFree
FreeLibrary
TlsGetValue
GetStdHandle
GetLongPathNameW
QueryPerformanceCounter
VirtualQuery
DosDateTimeToFileTime
HeapSize
GetModuleHandleW
GetModuleFileNameA
GetLocaleInfoW
CompareStringW
GetCurrentThread
LoadLibraryA
GetLastError
EnumCalendarInfoW
GetConsoleTitleA
EnterCriticalSection
VirtualQueryEx
GetCurrentThreadId
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
TlsFree
WritePrivateProfileStructW
GetCurrentProcess
IsDebuggerPresent
MapViewOfFile
GetCPInfo
lstrcatA
DeleteCriticalSection
HeapCreate
GetStringTypeA
GetACP
InterlockedDecrement
GetModuleHandleA
VirtualAlloc
EnumSystemLocalesA
TlsAlloc
HeapAlloc
LeaveCriticalSection
GetSystemTimeAsFileTime
GetFileType
GetProfileSectionA
SetHandleCount
IsValidCodePage
InterlockedIncrement
GetStartupInfoW
IsValidLocale
GetTimeFormatA
SetUnhandledExceptionFilter
GetModuleFileNameW
SetLastError
GetTimeZoneInformation
LCMapStringA
GetLocaleInfoA
GetCommandLineW
WideCharToMultiByte
SetConsoleCtrlHandler
GetStringTypeW
TerminateProcess
HeapDestroy
FreeEnvironmentStringsW
lstrcmpW
shell32
SHGetSettings
SHAppBarMessage
ExtractAssociatedIconExW
SHGetFileInfoW
SHQueryRecycleBinA
wininet
UrlZonesDetach
InternetAutodialHangup
InternetHangUp
InternetAlgIdToStringW
InternetTimeFromSystemTimeW
InternetWriteFileExA
Sections
.text Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 279KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ