Static task
static1
Behavioral task
behavioral1
Sample
06eb32a3bd863da7fbcc817c63bbec29eae9682c6319f5ee418b7091211501c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06eb32a3bd863da7fbcc817c63bbec29eae9682c6319f5ee418b7091211501c9.exe
Resource
win10v2004-20220812-en
General
-
Target
06eb32a3bd863da7fbcc817c63bbec29eae9682c6319f5ee418b7091211501c9
-
Size
844KB
-
MD5
65962307a7c6ccef8a82747da8ec2b5c
-
SHA1
b90105fcac4e4f393ee102a03c7fb595d3ee6364
-
SHA256
06eb32a3bd863da7fbcc817c63bbec29eae9682c6319f5ee418b7091211501c9
-
SHA512
3b871a30aa54b9e6fdaa73fb67106d1c2c9f66eaa85434b26c26b1d8c21f388ce131dfe06201d436b13b38d924df8c0a1f5c6e3924f5db32cf33f6f18b76c815
-
SSDEEP
24576:2+wivX5gsYdtqWpFjMVdl6A1raYTrcAkbW:2JMX5gjtNp8eA1raYTw3W
Malware Config
Signatures
Files
-
06eb32a3bd863da7fbcc817c63bbec29eae9682c6319f5ee418b7091211501c9.exe windows x86
afc2c489622f72e37ae4a85200475296
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadBitmapA
SetWindowPos
IsWindow
DispatchMessageW
GetCursorPos
SendMessageA
GetClientRect
DestroyWindow
GetParent
UpdateWindow
ShowWindow
EnableWindow
TranslateMessage
IsWindowEnabled
GetWindow
LoadStringA
EnableMenuItem
RegisterClassA
GetWindowLongA
CreateWindowExA
FillRect
PostQuitMessage
SetFocus
PeekMessageA
BeginPaint
KillTimer
DefWindowProcA
GetSystemMetrics
GetWindowRect
IsIconic
PostMessageA
ReleaseCapture
SetWindowLongA
SetWindowTextA
DispatchMessageA
SetTimer
GetDlgItem
SetCursor
ScreenToClient
LoadCursorA
LoadIconA
GetDesktopWindow
EndDialog
SetDlgItemTextA
SetForegroundWindow
ReleaseDC
MessageBoxA
GetSysColor
SystemParametersInfoA
InvalidateRect
CallWindowProcA
kernel32
FlushFileBuffers
IsDebuggerPresent
GetModuleFileNameW
GetTimeZoneInformation
GetModuleFileNameA
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
GetFileAttributesA
WaitForSingleObject
GetDriveTypeA
SetEndOfFile
HeapDestroy
HeapFree
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
GetLocaleInfoA
LocalAlloc
SetErrorMode
FreeEnvironmentStringsW
SetStdHandle
WideCharToMultiByte
GetStringTypeA
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
GetFullPathNameA
GetOEMCP
LocalFree
InitializeCriticalSection
LoadResource
FindClose
InterlockedDecrement
FormatMessageA
OutputDebugStringA
SetLastError
GetLastError
GetVersion
GetCurrentThreadId
GetCommandLineA
GetCurrentThread
GetModuleHandleA
GetCurrentProcessId
ExitProcess
HeapAlloc
GetProcessHeap
CompareStringA
VirtualAlloc
FindResourceA
Sleep
VirtualFree
FindResourceW
UnmapViewOfFile
IsValidCodePage
CreateProcessA
GetEnvironmentStrings
InterlockedExchange
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
LockResource
SizeofResource
CreateProcessW
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GlobalFree
lstrlenA
HeapCreate
LCMapStringW
LeaveCriticalSection
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
UnhandledExceptionFilter
GlobalLock
DuplicateHandle
FindFirstFileW
ResetEvent
FindFirstFileA
lstrcmpA
CompareStringW
GetSystemInfo
GetProcAddress
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
GetVersionExW
lstrcmpiA
SetHandleCount
EnterCriticalSection
WriteConsoleW
SetCurrentDirectoryA
InterlockedIncrement
CreateEventW
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
FindNextFileA
GetLocalTime
MultiByteToWideChar
LoadLibraryExW
TlsGetValue
advapi32
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
gdi32
GetDeviceCaps
SetBkColor
DeleteObject
oleaut32
SysStringLen
SysFreeString
msvcrt
_cexit
_exit
exit
_controlfp
Sections
.text Size: 793KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ