Static task
static1
Behavioral task
behavioral1
Sample
e6481a921c3130dc1848d5fc1b92cfed0cb1b6337dd4f1183c1e17132407ba5b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e6481a921c3130dc1848d5fc1b92cfed0cb1b6337dd4f1183c1e17132407ba5b.exe
Resource
win10v2004-20220812-en
General
-
Target
e6481a921c3130dc1848d5fc1b92cfed0cb1b6337dd4f1183c1e17132407ba5b
-
Size
240KB
-
MD5
e087d437ad2459594d95be9f4b689af2
-
SHA1
933b7f182b015269120455bf95c554f86066965f
-
SHA256
e6481a921c3130dc1848d5fc1b92cfed0cb1b6337dd4f1183c1e17132407ba5b
-
SHA512
1de922c5bd94219269dc0de611ba27be9f158f973dcf3eb5e5cdbfd90b39858d059c715c4f89d56d68069bd1454a7c7a01550b5545c1b769b668d0ff4b904036
-
SSDEEP
6144:grTg3UdVSqAoB/7zRztgsEfBPcTkyes06:grThzRztOUTkyeO
Malware Config
Signatures
Files
-
e6481a921c3130dc1848d5fc1b92cfed0cb1b6337dd4f1183c1e17132407ba5b.exe windows x86
52f89cbe05ac0b007e7208675f9b7b67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsUNCA
PathFindExtensionA
PathStripToRootA
StrStrA
PathFindFileNameA
SHDeleteKeyA
SHDeleteValueA
PathAppendA
wininet
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
kernel32
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
WritePrivateProfileStringA
GlobalFlags
GetVersionExA
lstrcmpW
GlobalFindAtomA
FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GetCPInfo
GetOEMCP
HeapAlloc
HeapFree
LeaveCriticalSection
VirtualAlloc
RtlUnwind
RaiseException
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetACP
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
LocalAlloc
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
GlobalGetAtomNameA
GetCurrentProcessId
GlobalAddAtomA
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
FreeLibrary
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
SetLastError
GetTickCount
LoadLibraryA
GetProcAddress
GetTempPathA
GetModuleFileNameA
GetModuleHandleA
Sleep
CopyFileA
DeleteFileA
ExitProcess
GetCurrentProcess
GetSystemTimeAsFileTime
CreateFileA
WriteFile
CloseHandle
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
CompareStringW
CompareStringA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
HeapReAlloc
user32
ShowWindow
UnregisterClassA
DestroyMenu
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
GetWindowTextA
SetWindowTextA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
CharUpperA
RegisterWindowMessageA
MessageBoxA
UnhookWindowsHookEx
GetSystemMetrics
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
SetWindowsHookExA
CallNextHookEx
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
PostQuitMessage
GetMessageExtraInfo
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostMessageA
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
SendMessageA
ModifyMenuA
EnableMenuItem
gdi32
ScaleWindowExtEx
DeleteDC
GetStockObject
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetWindowExtEx
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegQueryInfoKeyA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ