Static task
static1
Behavioral task
behavioral1
Sample
e70cbed291dc05aa6f9c9e2b37550300d8a239b265b6af96fd4b0a37f7c60afd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e70cbed291dc05aa6f9c9e2b37550300d8a239b265b6af96fd4b0a37f7c60afd.exe
Resource
win10v2004-20220901-en
General
-
Target
e70cbed291dc05aa6f9c9e2b37550300d8a239b265b6af96fd4b0a37f7c60afd
-
Size
180KB
-
MD5
8c5ff17184f825047f0a7ad16a837ed2
-
SHA1
71ed54388846fe547d641a01908108014b6c60e1
-
SHA256
e70cbed291dc05aa6f9c9e2b37550300d8a239b265b6af96fd4b0a37f7c60afd
-
SHA512
ad28f0bfa79610a8180173ed0cb1f9762bf8983998bd376b246c25a6ba00e8750cd2735c8c3cd66edac99760f54d35b5145be68c44da3c38c205828d2306bc00
-
SSDEEP
3072:QYLiFzn+IBKtOokOfGK5y8IpoE4Sph+IxlT6Xlc4U1Fm9:P8lKUoLOB8IplxphTEc4U1Fm
Malware Config
Signatures
Files
-
e70cbed291dc05aa6f9c9e2b37550300d8a239b265b6af96fd4b0a37f7c60afd.exe windows x86
bdb320c9457c884389c2bec7860fcbb1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
SetMenuItemInfoA
EnableWindow
IsWindow
SetScrollInfo
DialogBoxIndirectParamA
MessageBoxA
GetSysColor
CreateWindowExA
SetFocus
RegisterClassExA
GetKeyNameTextA
GetWindowTextLengthA
GetClassInfoExA
CallWindowProcA
GetCursorPos
GetFocus
AppendMenuA
MapWindowPoints
GetSystemMetrics
DestroyMenu
BeginPaint
EmptyClipboard
InvalidateRect
PostMessageA
ValidateRect
IntersectRect
ExitWindowsEx
EndDeferWindowPos
SetParent
InflateRect
aclui
ord2
ord1
cabinet
ord11
ord12
ord14
ord10
ddraw
DirectDrawCreateClipper
DirectDrawCreate
kernel32
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ReadFile
SetEndOfFile
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
GetCPInfo
GetCurrentProcessId
GetACP
LoadLibraryA
CreateFileA
FlushFileBuffers
SetStdHandle
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetOEMCP
GetVersionExA
SetTapePosition
GetWindowsDirectoryA
ResetEvent
PulseEvent
WaitForSingleObject
CreateEventA
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapFree
GetLastError
CloseHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
SetFilePointer
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 726KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE