Static task
static1
Behavioral task
behavioral1
Sample
ea46e6d0d9de4ff232fcc1b103a686f1d6e646f20f862caf509fc4eaaf281442.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ea46e6d0d9de4ff232fcc1b103a686f1d6e646f20f862caf509fc4eaaf281442.exe
Resource
win10v2004-20221111-en
General
-
Target
ea46e6d0d9de4ff232fcc1b103a686f1d6e646f20f862caf509fc4eaaf281442
-
Size
280KB
-
MD5
3caefb0180f04675f7eaf3195072adba
-
SHA1
64cad981a75a6e58d21b749771c0db6c2f9f6019
-
SHA256
ea46e6d0d9de4ff232fcc1b103a686f1d6e646f20f862caf509fc4eaaf281442
-
SHA512
8c18695749ce7e7a441b12750ced29658f4f10e51d58a661b69224bbfe671f3f5fea47a260c5f515fd6b3c49e9630eb67ba6febd12f1bd768cf7d9ebc6271e12
-
SSDEEP
6144:+wdRWAEJFSZPvC6bNm2jfOFuVLtlltZFAXjBOjl5Y1FysG1dXZ:+wW9MvCe82jWF6pc4jXYrysG1d
Malware Config
Signatures
Files
-
ea46e6d0d9de4ff232fcc1b103a686f1d6e646f20f862caf509fc4eaaf281442.exe windows x86
4e76def7f5363efe8815c75c778f7bc5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ReadFileScatter
FindFirstFileExW
GetCompressedFileSizeW
FindFirstFileW
IsDBCSLeadByteEx
IsValidLocale
CloseHandle
_hread
PeekNamedPipe
GetLogicalDriveStringsA
SetConsoleOutputCP
WritePrivateProfileStructA
GetFileAttributesA
GetProcessHeap
GlobalFree
_llseek
WritePrivateProfileSectionA
GetTempFileNameA
GlobalGetAtomNameW
UnmapViewOfFile
CompareStringA
SwitchToFiber
CreateMutexW
lstrcpyA
GetConsoleMode
GlobalReAlloc
SetEvent
GetTapeStatus
lstrcpynA
VirtualFree
GetUserDefaultLCID
IsBadWritePtr
MultiByteToWideChar
CreateMutexA
EnumTimeFormatsW
GlobalFlags
GetTimeZoneInformation
GlobalUnlock
SetConsoleCursorPosition
_lread
LocalAlloc
ReadConsoleA
OpenMutexA
GetACP
SetEnvironmentVariableW
GetModuleHandleA
SetCommTimeouts
FormatMessageW
GetTickCount
RaiseException
GetCommModemStatus
GetDiskFreeSpaceExA
CreateDirectoryW
FillConsoleOutputCharacterA
WritePrivateProfileStringW
OutputDebugStringA
GetCPInfo
DosDateTimeToFileTime
GetOverlappedResult
InitializeCriticalSection
EnumSystemCodePagesW
LoadLibraryExA
GetStartupInfoA
GetPrivateProfileSectionW
ReadFile
LoadResource
GetBinaryTypeW
GetFullPathNameA
FindFirstFileA
LCMapStringA
GlobalFindAtomA
GetTempPathW
FreeLibraryAndExitThread
ExitProcess
FreeEnvironmentStringsA
GetFileType
GetEnvironmentVariableW
EnumCalendarInfoW
lstrlenA
GetCurrentDirectoryW
VirtualAlloc
user32
CreateWindowStationW
CreateDesktopW
SetDlgItemTextA
TileWindows
SetThreadDesktop
GetMenuItemRect
OpenClipboard
SetScrollRange
GetIconInfo
MsgWaitForMultipleObjects
DrawTextExW
CreateWindowExW
CharLowerBuffA
GetDialogBaseUnits
GetMenuInfo
LoadCursorW
SetActiveWindow
DialogBoxIndirectParamA
BroadcastSystemMessageW
InvalidateRgn
AdjustWindowRectEx
gdi32
GetROP2
PolyBezier
CopyMetaFileA
Ellipse
SetSystemPaletteUse
GetDCOrgEx
GetEnhMetaFileDescriptionA
CreatePolyPolygonRgn
RestoreDC
ScaleViewportExtEx
comdlg32
FindTextW
advapi32
SetServiceStatus
CloseEventLog
CryptSetProvParam
RegCreateKeyW
CryptGetProvParam
GetFileSecurityA
CryptGetUserKey
ReadEventLogW
GetServiceDisplayNameW
RegisterEventSourceA
InitializeSecurityDescriptor
ObjectCloseAuditAlarmA
RegSetValueA
RegQueryInfoKeyA
CryptGetKeyParam
RegisterEventSourceW
FreeSid
RegDeleteKeyW
RegEnumValueW
shell32
SHGetDesktopFolder
DragAcceptFiles
SHChangeNotify
SHGetSettings
ole32
CoGetTreatAsClass
CoDisconnectObject
CoImpersonateClient
OleRegGetUserType
CoLockObjectExternal
StringFromGUID2
OleRegGetMiscStatus
StgOpenStorage
CreateStreamOnHGlobal
StgCreateStorageEx
oleaut32
LoadTypeLi
SafeArrayCreate
SysStringLen
SafeArrayGetLBound
LoadTypeLibEx
comctl32
ord17
ImageList_Create
shlwapi
HashData
SHSetValueW
PathIsUNCA
StrCmpLogicalW
PathFileExistsW
StrPBrkW
SHEnumValueW
StrDupW
StrCmpNIW
SHDeleteKeyA
PathRemoveFileSpecA
UrlCreateFromPathW
UrlGetPartA
SHQueryValueExW
ChrCmpIW
StrCpyW
msvcrt
__setusermatherr
_acmdln
exit
_XcptFilter
_exit
_initterm
__getmainargs
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 236KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE