Static task
static1
Behavioral task
behavioral1
Sample
6221a2f056c1c169a5f1f912a6b98877.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6221a2f056c1c169a5f1f912a6b98877.exe
Resource
win10v2004-20220812-en
General
-
Target
6221a2f056c1c169a5f1f912a6b98877.exe
-
Size
1.6MB
-
MD5
6221a2f056c1c169a5f1f912a6b98877
-
SHA1
24c4bd73d7ed67cac28eaf6b27256344730fa340
-
SHA256
2d17f7332b469876ce6cca8a251ca570b0bf5ec2207ff2aceff459d6e10f5c6d
-
SHA512
7c3f1dcccfa5c926d1593d046359421e51cf5a47d75fce3701c401ba4821ef99607698e5cc368d2b32f84bf4fb11b588c1b111440eb26f4fc83021b2e1493f65
-
SSDEEP
49152:gPia6cbHXiLlqK7+8ICM6ZIeMp2qEeLxS+1VxnT2:G6eHy5qK7+NB6ZIeMpdjS4x
Malware Config
Signatures
Files
-
6221a2f056c1c169a5f1f912a6b98877.exe.exe windows x86
e1dc193f9171d192f93b0c96cd907f7d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
WriteConsoleW
SetEnvironmentVariableA
WideCharToMultiByte
SizeofResource
GetProcessHeap
GetConsoleOutputCP
GetConsoleMode
LockResource
LoadResource
FindResourceA
WritePrivateProfileStringA
GetPrivateProfileStringA
SetLastError
GetLastError
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetConsoleCP
lstrcpynA
GetModuleFileNameA
GetCommandLineW
FreeLibrary
ReleaseMutex
MultiByteToWideChar
GetFileAttributesA
GetUserDefaultUILanguage
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
GetTempPathA
CreateThread
lstrlenA
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
MulDiv
GlobalReAlloc
GlobalFree
Sleep
lstrlenW
LocalFree
FormatMessageA
GlobalSize
CopyFileA
GetVersionExA
lstrcmpW
CompareStringA
GlobalDeleteAtom
CompareStringW
GetDriveTypeA
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapSize
ExitThread
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
RaiseException
HeapReAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
HeapFree
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
FindResourceExA
VirtualProtect
GetFileTime
GetFileSizeEx
GetProfileIntA
GetTickCount
SearchPathA
GetTempFileNameA
SetErrorMode
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetFileSize
lstrcpyA
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetModuleHandleW
GetThreadLocale
GlobalFlags
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
GetPrivateProfileIntA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
GetCurrentThreadId
user32
UnpackDDElParam
ReuseDDElParam
InsertMenuItemA
TranslateAcceleratorA
EnableScrollBar
DrawEdge
InvalidateRgn
CharNextA
IsClipboardFormatAvailable
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
DrawStateA
RegisterClipboardFormatA
BringWindowToTop
IsMenu
SetClassLongA
CreatePopupMenu
NotifyWinEvent
CreateAcceleratorTableA
LoadAcceleratorsA
DestroyAcceleratorTable
GetAsyncKeyState
CharUpperA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
PostThreadMessageA
DeleteMenu
WaitMessage
UnregisterClassA
DestroyMenu
GetMenuItemInfoA
DrawIconEx
GetNextDlgGroupItem
IsRectEmpty
ShowOwnedPopups
GetMessageA
ValidateRect
CopyImage
GetIconInfo
DestroyIcon
SetRectEmpty
SetWindowContextHelpId
MapDialogRect
MessageBeep
IsZoomed
PostQuitMessage
GetWindowThreadProcessId
MapVirtualKeyA
GetKeyNameTextA
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
SetCursorPos
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
IsWindowVisible
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
DefWindowProcA
CallWindowProcA
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MoveWindow
SetWindowLongA
GetDlgCtrlID
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
SetWindowTextA
GetDlgItem
EnableWindow
SendMessageA
TranslateMessage
CheckDlgButton
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
GetWindow
SetFocus
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
SetMenuDefaultItem
GetMenuDefaultItem
IsCharLowerA
MapVirtualKeyExA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
FrameRect
GetUpdateRect
IsWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetCapture
ReleaseCapture
LoadBitmapA
CopyRect
RedrawWindow
OffsetRect
GetWindowRgn
CharUpperBuffA
CopyIcon
SubtractRect
GetDoubleClickTime
CreateMenu
DestroyCursor
GetLastActivePopup
DispatchMessageA
GetParent
GetKeyState
GetFocus
GetSysColor
GetDC
GetWindowRect
ReleaseDC
InflateRect
DrawFocusRect
DrawFrameControl
PtInRect
UnionRect
InvalidateRect
GetClientRect
UpdateWindow
ScreenToClient
SetCursor
LoadCursorA
GetMessagePos
ClientToScreen
SetWindowRgn
SetParent
ShowWindow
GetCursorPos
WindowFromPoint
EnumChildWindows
LoadIconA
GetSystemMenu
IsIconic
GetSystemMetrics
DrawIcon
MessageBoxA
SetWindowPos
KillTimer
SetTimer
LockWindowUpdate
LoadMenuA
GetSubMenu
ModifyMenuA
PostMessageA
LoadImageA
GetDesktopWindow
SetRect
FillRect
GetSysColorBrush
GetWindowLongA
UpdateLayeredWindow
gdi32
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
GetStockObject
SelectPalette
CopyMetaFileA
GetObjectType
CreatePen
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
SetRectRgn
GetMapMode
DPtoLP
OffsetRgn
GetRgnBox
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetTextColor
SetDIBColorTable
SetPixel
GetBkColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
Rectangle
GetWindowOrgEx
PtInRegion
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExA
GetTextFaceA
SetPixelV
SelectClipRgn
GetObjectA
GetPaletteEntries
RealizePalette
CreatePalette
GetDIBits
DeleteDC
DeleteObject
ExtCreateRegion
BitBlt
SelectObject
CreateDIBSection
CreateCompatibleBitmap
GetDeviceCaps
CreateFontA
CreatePolygonRgn
CreateRoundRectRgn
GetTextExtentPoint32A
FrameRgn
FillRgn
CreateSolidBrush
CombineRgn
CreateRectRgn
StretchBlt
CreateCompatibleDC
CreateFontIndirectA
GetTextMetricsA
GetCurrentObject
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegFlushKey
RegDeleteKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
shell32
SHBrowseForFolderA
DragQueryFileA
DragFinish
CommandLineToArgvW
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHAppBarMessage
SHGetMalloc
SHGetFileInfoA
ShellExecuteA
comctl32
InitCommonControlsEx
ImageList_GetIconSize
shlwapi
PathFileExistsA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA
PathIsDirectoryA
oledlg
ord8
ole32
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleGetClipboard
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleLockRunning
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CoInitializeEx
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
CoUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
StgOpenStorageOnILockBytes
oleaut32
SysAllocStringByteLen
VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
SysFreeString
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
SysStringLen
VariantClear
SysAllocString
OleLoadPicturePath
VariantTimeToSystemTime
winmm
PlaySoundA
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
gdiplus
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCloneImage
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 277KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ