Static task
static1
Behavioral task
behavioral1
Sample
e3d0628c3ca9ad516be7bb403c69a25c0a7f419a9a2524923c65a281b8babbe0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e3d0628c3ca9ad516be7bb403c69a25c0a7f419a9a2524923c65a281b8babbe0.exe
Resource
win10v2004-20220812-en
General
-
Target
e3d0628c3ca9ad516be7bb403c69a25c0a7f419a9a2524923c65a281b8babbe0
-
Size
54KB
-
MD5
cecbca3c933abd9cbed81ede6639e21f
-
SHA1
3587d566cb7e5ddd2678e742d8e9d3b420c0e1ca
-
SHA256
e3d0628c3ca9ad516be7bb403c69a25c0a7f419a9a2524923c65a281b8babbe0
-
SHA512
dd69660ca0815530b2a7eb856817cbd57ed979e29577c63705c4c4578bbeaf2a2b4034f0b9c26be64b29076e3a55969f7548da347337f2ed339614d152820e99
-
SSDEEP
768:dcN7dyUOukDbS/pelcs3RwIbJV8/IBGUBhBJBBBOLaFEP:O5yCAeelpT8KGFa
Malware Config
Signatures
Files
-
e3d0628c3ca9ad516be7bb403c69a25c0a7f419a9a2524923c65a281b8babbe0.exe windows x86
fc4bf55bc6bb1634344aadedf6914bd6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
LoadLibraryW
GetModuleHandleW
GetProcAddress
user32
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsZoomed
LoadAcceleratorsW
LoadIconW
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
GetWindowPlacement
ReleaseCapture
ReleaseDC
ScreenToClient
SetCapture
SetCursor
SetCursorPos
SetWindowTextW
SetWindowsHookExW
ShowCursor
ShowWindow
TranslateMDISysAccel
TranslateMessage
UpdateWindow
wsprintfW
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetMessageW
GetMenu
GetDlgItemInt
GetClipboardData
GetClientRect
FillRect
EnumChildWindows
EndPaint
EnableWindow
DrawMenuBar
DispatchMessageW
DestroyWindow
DefMDIChildProcW
DefFrameProcW
CreateDialogParamW
CloseClipboard
CheckMenuItem
CallNextHookEx
BeginPaint
RegisterWindowMessageW
gdi32
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectW
CreateSolidBrush
TranslateCharsetInfo
TextOutW
StretchBlt
SetTextColor
SetStretchBltMode
SetBkColor
SelectObject
PatBlt
GetTextMetricsW
GetTextFaceW
GetTextExtentPointW
GetTextExtentPoint32W
GetStockObject
GetDeviceCaps
ExtTextOutW
Escape
DeleteObject
DeleteDC
BitBlt
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.33 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.331 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.332 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 690B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ