Static task
static1
Behavioral task
behavioral1
Sample
e4daebe8415eaec69ca56def00e37936b7d6a705a8f0eb7a0f512db4b021b953.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e4daebe8415eaec69ca56def00e37936b7d6a705a8f0eb7a0f512db4b021b953.exe
Resource
win10v2004-20220901-en
General
-
Target
e4daebe8415eaec69ca56def00e37936b7d6a705a8f0eb7a0f512db4b021b953
-
Size
182KB
-
MD5
e304d667066e4578bc2e0e2a89371567
-
SHA1
568163acb66403cce9dc0b203cfa3d25760afa49
-
SHA256
e4daebe8415eaec69ca56def00e37936b7d6a705a8f0eb7a0f512db4b021b953
-
SHA512
43d87d8c54e384b19233928ca63da309f1a957caca381a64195a32d74049caafece97480e2786d03aae762c8b466d5bb9ee362ede5c0b8f23f9bacf121a916e7
-
SSDEEP
3072:AmshRuNGjuvwpm1rNuAYUnNtH+0JdL8yzxw4uZMtNhT/SJxD:At/uNuppm1rNxYi/xwjatNhGJ
Malware Config
Signatures
Files
-
e4daebe8415eaec69ca56def00e37936b7d6a705a8f0eb7a0f512db4b021b953.exe windows x86
908e2129b5b1c543880a527bbc9e4c06
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileW
GetVersion
LocalFree
LocalAlloc
GetVolumeInformationW
DeleteCriticalSection
GetLocalTime
CreateFileW
GetModuleHandleW
InitializeCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetProfileStringW
HeapFree
HeapAlloc
GetProcessHeap
LCMapStringA
RemoveDirectoryW
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetCPInfo
GetStringTypeW
GetStringTypeA
SetStdHandle
ReadFile
SetEndOfFile
FlushFileBuffers
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
SetFilePointer
CreateFileA
GetEnvironmentVariableW
GetShortPathNameW
CreateProcessW
SetEnvironmentVariableA
SetFileAttributesW
CloseHandle
GetLastError
GetModuleFileNameA
WriteFile
RtlUnwind
VirtualFree
HeapCreate
LCMapStringW
HeapDestroy
GetStartupInfoA
GetFileType
GetStdHandle
GetModuleHandleA
GetStartupInfoW
ExitProcess
WideCharToMultiByte
GetTimeZoneInformation
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
user32
CreateWindowExW
SetWindowsHookExW
PostMessageW
DrawFrameControl
AppendMenuW
GetSysColorBrush
CreatePopupMenu
GetActiveWindow
FillRect
MessageBoxW
DialogBoxIndirectParamW
LoadIconW
SetMenuItemInfoW
GetSysColor
LockWindowUpdate
SetScrollInfo
EnableWindow
IsWindow
IsDialogMessageW
gdi32
SetViewportExtEx
ScaleViewportExtEx
ScaleWindowExtEx
OffsetViewportOrgEx
wininet
InternetCloseHandle
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetQueryDataAvailable
InternetOpenW
InternetSetStatusCallbackW
InternetWriteFile
InternetReadFile
InternetOpenUrlW
InternetSetFilePointer
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ