Static task
static1
Behavioral task
behavioral1
Sample
e5d4391a0f5c9d8f575040602494945be4054aa75fd5201cf197b011d13041c2.exe
Resource
win7-20220901-en
General
-
Target
e5d4391a0f5c9d8f575040602494945be4054aa75fd5201cf197b011d13041c2
-
Size
101KB
-
MD5
4d51e98da74912c6ca6ea2c294b8e856
-
SHA1
ce9bc5f71b7c3eee186e22fe80ea92585adf9969
-
SHA256
e5d4391a0f5c9d8f575040602494945be4054aa75fd5201cf197b011d13041c2
-
SHA512
faa03aa1e1ab35962bdcf8b266eaa903fd4ec546718ca6ef2c8eb5ea5478922c1bc2aae015552f5dfbd931ffef430e11c227823da0b27a6bee3c143aa8544861
-
SSDEEP
3072:UPZeqIOOKXbw10IY5VXRy/Y0MLDy8Zfhs1:UEqIOOKsqVhV0Ma8
Malware Config
Signatures
Files
-
e5d4391a0f5c9d8f575040602494945be4054aa75fd5201cf197b011d13041c2.exe windows x86
a997e1f77bc49c7952d292cc78aaa357
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
PatBlt
GetTextExtentPoint32W
SelectObject
GetPaletteEntries
GetStockObject
GetObjectW
user32
SetDlgItemTextW
DefWindowProcW
TranslateMessage
GetDesktopWindow
SetDlgItemInt
DestroyWindow
MoveWindow
IsRectEmpty
PeekMessageW
CheckDlgButton
ShowWindow
GetDC
IsWindowVisible
IsWindow
GetClientRect
InvalidateRect
LoadStringW
EnableWindow
SetWindowLongW
CreateDialogParamW
GetDlgItemInt
SendMessageW
LoadCursorW
GetDlgItem
SetCursor
GetWindowLongW
wsprintfW
DispatchMessageW
ReleaseDC
ClientToScreen
GetAsyncKeyState
GetWindowRect
CheckRadioButton
kernel32
GetFileSize
FreeLibrary
GetSystemTimeAsFileTime
CreateEventW
DeleteCriticalSection
CreateIoCompletionPort
QueryPerformanceCounter
GlobalUnlock
lstrlenW
ReadFile
IsBadCodePtr
ResetEvent
IsBadWritePtr
GlobalAlloc
lstrlenA
InitializeCriticalSection
SetFilePointer
GlobalLock
GetCurrentProcessId
GetStartupInfoA
IsBadReadPtr
CloseHandle
EnterCriticalSection
WideCharToMultiByte
MulDiv
HeapAlloc
lstrcpyA
SetThreadPriority
GlobalMemoryStatus
CreateFileW
lstrcpynW
InterlockedExchange
WriteFile
GetVersionExW
PostQueuedCompletionStatus
WaitForSingleObject
lstrcmpW
LoadLibraryW
GetFileAttributesW
SetEndOfFile
GlobalHandle
GetProfileIntA
GetThreadPriority
HeapFree
CreateSemaphoreW
CreateThread
GetDiskFreeSpaceW
GetProcessHeap
GetSystemInfo
LeaveCriticalSection
DeleteFileW
WaitForMultipleObjects
lstrcpyW
GlobalFree
SetUnhandledExceptionFilter
InterlockedIncrement
GetFullPathNameW
SetEvent
VirtualFree
lstrcmpiW
ReleaseSemaphore
GetCurrentThread
GetLastError
GetSystemDefaultLangID
GetTickCount
GetModuleFileNameA
GetPrivateProfileStringW
MultiByteToWideChar
GetCurrentProcess
InterlockedDecrement
GetQueuedCompletionStatus
GetEnvironmentStringsW
winmm
mixerGetLineInfoW
mixerClose
waveInReset
mixerGetLineControlsW
waveInPrepareHeader
waveInStop
mixerGetID
SendDriverMessage
waveInGetDevCapsW
CloseDriver
waveInUnprepareHeader
waveInClose
mixerSetControlDetails
mixerOpen
mixerGetControlDetailsW
waveInOpen
OpenDriver
waveInAddBuffer
waveInStart
msvfw32
ICGetInfo
ICLocate
ICSendMessage
ICDecompress
ICCompress
ICOpen
ICClose
advapi32
RegCreateKeyW
RegQueryValueExW
RegSetValueW
RegEnumKeyW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegOpenKeyW
RegCloseKey
RegDeleteKeyW
msvcrt
_ftol
??3@YAXPAX@Z
_except_handler3
wcslen
_purecall
??2@YAPAXI@Z
ole32
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ