Static task
static1
Behavioral task
behavioral1
Sample
f6045c3d60fb2e0ddbb264cd61adc37736508471aa5b3881f2510ec36ea6c00f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
f6045c3d60fb2e0ddbb264cd61adc37736508471aa5b3881f2510ec36ea6c00f.exe
Resource
win10v2004-20220414-en
General
-
Target
f6045c3d60fb2e0ddbb264cd61adc37736508471aa5b3881f2510ec36ea6c00f.bin
-
Size
329KB
-
MD5
b99c2748e46c0f8ed8da08fd933e0d9f
-
SHA1
b86e4150446e189259db650270edcc02296b4ca5
-
SHA256
f6045c3d60fb2e0ddbb264cd61adc37736508471aa5b3881f2510ec36ea6c00f
-
SHA512
da239c429c2bc7e24f1a4ad1420d501a29e7abde4b89e474f290b4678d10a571c84b2cddb6994104ec2dc80d260122f3f8289e9113b2d0b54c483f249207167f
-
SSDEEP
3072:OODJbBMEjlrdbFDh2vR5w5HaP6yTEu2edjl5m5ejROBFNI4z8l+xL07HnkuTSG1L:JhF9h2f46P6yIu2hUROX4IAHDO9fs7
Malware Config
Signatures
Files
-
f6045c3d60fb2e0ddbb264cd61adc37736508471aa5b3881f2510ec36ea6c00f.bin.exe windows x86
bb151a144be4fa6b60295bac26cd2cd8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
GetSystemTime
GetCurrentProcessId
CloseHandle
GetCurrentThreadId
GetFileTime
GetModuleHandleA
CreatePipe
GetSystemInfo
CreateFileMappingA
LoadLibraryA
GetLocalTime
GetProcAddress
GetLastError
GetStdHandle
FileTimeToSystemTime
GetAtomNameW
HeapCreate
CreateEventA
Sleep
GetVolumeInformationA
GlobalAlloc
GetDateFormatA
GetCurrentThread
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
WriteFile
ExitProcess
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
HeapFree
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetTickCount
GetFileAttributesExA
GetTimeFormatA
SetHandleInformation
GetCurrentProcess
SystemTimeToFileTime
HeapAlloc
VirtualFree
OpenFile
user32
LoadBitmapA
GetDesktopWindow
SendMessageTimeoutA
DispatchMessageA
GetSystemMetrics
GetDlgItem
LoadImageA
FindWindowA
LoadCursorA
GetPropW
MoveWindow
PeekMessageA
SetActiveWindow
MapDialogRect
SetCapture
DrawIconEx
LoadIconA
FindWindowExA
GetClientRect
SendMessageA
RegisterWindowMessageA
BeginPaint
GetIconInfo
GetDC
GetForegroundWindow
GetCursorInfo
CopyIcon
EnumPropsA
gdi32
GetDeviceCaps
MoveToEx
PatBlt
CreateDIBSection
RestoreDC
SetBrushOrgEx
SetBkColor
CreateBitmap
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
SaveDC
SetDCPenColor
CreatePatternBrush
GetTextMetricsA
GetStockObject
ExtTextOutA
advapi32
OpenProcessToken
OpenSCManagerA
OpenThreadToken
shell32
SHGetMalloc
SHQueryRecycleBinA
SHBrowseForFolderA
SHEmptyRecycleBinA
SHGetPathFromIDListA
SHGetDesktopFolder
ole32
CoWaitForMultipleHandles
CoInitialize
odbc32
ord111
ord219
ws2_32
recv
netapi32
NetShareGetInfo
mpr
WNetGetUserW
msimg32
GradientFill
winmm
joySetThreshold
joySetCapture
comctl32
ord17
ImageList_GetImageCount
ImageList_Create
ImageList_Add
pdh
PdhGetFormattedCounterValue
PdhBrowseCountersA
opengl32
glMatrixMode
glViewport
glLoadIdentity
glu32
gluOrtho2D
setupapi
SetupDiGetClassDevsA
urlmon
URLOpenStreamW
URLOpenPullStreamW
UrlMkSetSessionOption
snmpapi
SnmpUtilAsnAnyCpy
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 217KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ