Static task
static1
Behavioral task
behavioral1
Sample
6e5cc8bb1bbf415909e96957fb55689905754293aefcbf33a293bca8817efe91.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6e5cc8bb1bbf415909e96957fb55689905754293aefcbf33a293bca8817efe91.exe
Resource
win10v2004-20220901-en
General
-
Target
6e5cc8bb1bbf415909e96957fb55689905754293aefcbf33a293bca8817efe91
-
Size
368KB
-
MD5
0527d953fbfbefebd68cbef8b25b4f2a
-
SHA1
84c2814d4ec02e9956fcd66b8c3c6ff35f5ed15f
-
SHA256
6e5cc8bb1bbf415909e96957fb55689905754293aefcbf33a293bca8817efe91
-
SHA512
e069be334437ac40031136397223fe88a5f23498419c9714f8723db5eaf4079a01f4e4d3a15fcfb7d93d0d4b44cf6ba3e98d64c76e4fae290bbc8b140b9e778d
-
SSDEEP
6144:2gL/UgwRzJHw3c7bOvNd1Y0o7vOkbKPfZSujDCHLDsicvFUFaMuH:2grEzJHw3c7bOvT1Jo7vOcKPfZSaDCrk
Malware Config
Signatures
Files
-
6e5cc8bb1bbf415909e96957fb55689905754293aefcbf33a293bca8817efe91.exe windows x86
e481d4801f46048826ffdb1ac63a7787
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharLowerBuffA
AdjustWindowRect
RegisterClassA
RegisterDeviceNotificationA
RegisterClassExA
DestroyCursor
PostThreadMessageW
GetComboBoxInfo
DdeCmpStringHandles
GetKeyboardState
MessageBoxA
GetLastActivePopup
UnpackDDElParam
EndMenu
GetDoubleClickTime
SetPropA
GetWindowRgn
EnumDisplaySettingsW
wininet
FindFirstUrlCacheEntryExA
CreateUrlCacheEntryW
HttpQueryInfoW
IsUrlCacheEntryExpiredW
GopherGetLocatorTypeA
InternetCreateUrlW
InternetTimeToSystemTimeW
RegisterUrlCacheNotification
kernel32
GetCurrentThread
CreateSemaphoreW
WriteConsoleW
GetCurrentProcessId
GetCommandLineA
LCMapStringW
HeapReAlloc
IsDebuggerPresent
WideCharToMultiByte
CompareStringA
GetCurrentProcess
GetDateFormatA
GetConsoleMode
GetStartupInfoW
LeaveCriticalSection
VirtualFree
CopyFileA
SetLastError
EnterCriticalSection
GetModuleHandleA
RtlUnwind
LoadLibraryA
QueryPerformanceCounter
InterlockedIncrement
LCMapStringA
InterlockedDecrement
TlsFree
CreateMutexA
ExitProcess
GetModuleHandleW
SetHandleCount
SetEnvironmentVariableA
SetUnhandledExceptionFilter
DeleteCriticalSection
TlsGetValue
GetModuleFileNameA
CreateFileA
CloseHandle
VirtualQuery
GetCommandLineW
GetEnvironmentStringsW
SetConsoleCtrlHandler
MultiByteToWideChar
EnumSystemLocalesA
GetCurrentThreadId
EnumCalendarInfoW
WaitForSingleObjectEx
OpenMutexA
GetLocaleInfoA
GetLastError
TlsAlloc
WriteConsoleA
HeapCreate
VirtualAlloc
HeapFree
WriteFile
ReadFile
TlsSetValue
GetUserDefaultLCID
HeapAlloc
GetStdHandle
SetStdHandle
SetFilePointer
UnhandledExceptionFilter
GetCPInfo
TerminateProcess
GetLocaleInfoW
IsValidLocale
GetStartupInfoA
GetACP
IsValidCodePage
CompareStringW
GetFileType
GetProcAddress
HeapSize
GetOEMCP
HeapDestroy
GetConsoleCP
GetModuleFileNameW
GetTickCount
Sleep
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
FreeLibrary
GetTimeFormatA
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
InterlockedExchange
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
comdlg32
GetOpenFileNameA
LoadAlterBitmap
comctl32
InitCommonControlsEx
_TrackMouseEvent
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ