Static task
static1
Behavioral task
behavioral1
Sample
e0306da93c30c35c73722c8392bebfe5743ca2ccf2f74a2e7a07d23bd98f43f5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e0306da93c30c35c73722c8392bebfe5743ca2ccf2f74a2e7a07d23bd98f43f5.exe
Resource
win10v2004-20221111-en
General
-
Target
e0306da93c30c35c73722c8392bebfe5743ca2ccf2f74a2e7a07d23bd98f43f5
-
Size
173KB
-
MD5
6e46039761ac74b596b87295ff874cb0
-
SHA1
52e5bc02303cad85f5a470036b240b7b1597ca52
-
SHA256
e0306da93c30c35c73722c8392bebfe5743ca2ccf2f74a2e7a07d23bd98f43f5
-
SHA512
33f40443395359273176579f4d01a3b39764799b350d0c4d55bedc7a07a89e11276440cddc2ee3a386af3f747f4e39cb9a54fa01e99f2a598da5c47590a0efb2
-
SSDEEP
3072:/CWWFMG4eW321crUVro+yCJdVSNJXA5pjX/sk6e2qZdyTQ34:TWvl12dCJdVSX8pjX/zLI
Malware Config
Signatures
Files
-
e0306da93c30c35c73722c8392bebfe5743ca2ccf2f74a2e7a07d23bd98f43f5.exe windows x86
555a2cf033059621fccd272146b76291
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyAcceleratorTableW
SetRect
SetPropW
RemovePropW
SendDlgItemMessageA
CreateWindowExW
GetClassLongW
GetClassInfoExW
CharUpperW
GetPropW
InvalidateRgn
RegisterWindowMessageW
GetNextDlgTabItem
InvalidateRect
MessageBeep
WinHelpW
CharNextW
IsRectEmpty
GetNextDlgGroupItem
DestroyMenu
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
gdi32
TextOutW
ExtSelectClipRgn
SetViewportOrgEx
SetWindowExtEx
ExtTextOutW
GetTextColor
SelectObject
PtVisible
DeleteDC
Escape
GetMapMode
ScaleWindowExtEx
GetDeviceCaps
GetBkColor
RectVisible
GetStockObject
ScaleViewportExtEx
OffsetViewportOrgEx
GetRgnBox
oleacc
LresultFromObject
CreateStdAccessibleObject
ole32
OleIsCurrentClipboard
StgOpenStorageOnILockBytes
CoTaskMemFree
CoGetClassObject
CoInitialize
OleFlushClipboard
CoRetireServer
CLSIDFromProgID
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoCreateInstance
OleUninitialize
OleInitialize
CoUninitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
CoRegisterMessageFilter
CLSIDFromString
advapi32
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumKeyExW
RegQueryValueW
RegCloseKey
RegEnumKeyW
RegOpenKeyW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
shlwapi
PathFindExtensionW
PathStripToRootW
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
PathIsUNCW
PathAppendW
kernel32
GetCalendarInfoW
MultiByteToWideChar
WriteFile
GetLocaleInfoW
GetCurrentProcessId
CreateFileW
FindNextFileW
EnumResourceLanguagesW
MoveFileW
GetSystemDefaultLangID
GetFileAttributesW
lstrcpyW
InterlockedDecrement
RemoveDirectoryW
EnumResourceNamesA
GetCurrentDirectoryW
SetFilePointer
FindClose
SystemTimeToFileTime
FindFirstFileW
ExitProcess
GetVersion
DeleteFileW
LoadLibraryW
SetFileTime
GetModuleFileNameW
LocalFileTimeToFileTime
CreateDirectoryW
ConvertDefaultLocale
ReadFile
WideCharToMultiByte
GetProcAddress
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ