Static task
static1
Behavioral task
behavioral1
Sample
6fb290c0fab73fa2aab570672a82ee612f406061f7e3363ee278c744219b7db7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6fb290c0fab73fa2aab570672a82ee612f406061f7e3363ee278c744219b7db7.exe
Resource
win10v2004-20220812-en
General
-
Target
6fb290c0fab73fa2aab570672a82ee612f406061f7e3363ee278c744219b7db7
-
Size
409KB
-
MD5
651621594902e52abfb00793101a1aed
-
SHA1
97047deb3b37e5de4b3b98d059fa2a2f2295743d
-
SHA256
6fb290c0fab73fa2aab570672a82ee612f406061f7e3363ee278c744219b7db7
-
SHA512
66fd7254e17057f2a7b828ad61da0cf9a3e10b68eb04e9898d5b723ebdefbc51a058c2d62dae499e5e7754378a632928fc49333da679fd97eb04040df85f28a5
-
SSDEEP
12288:s+kbhmWBGdHvTSzNz5U652rPOEg6q3/J5m5HgjoXV90F:0lmW8xv2zNz5U6Ig6q3/LSHgj
Malware Config
Signatures
Files
-
6fb290c0fab73fa2aab570672a82ee612f406061f7e3363ee278c744219b7db7.exe windows x86
b77d01924545e1b8a549fd6f64cebc0b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
CreateWindowExA
keybd_event
WindowFromPoint
WindowFromDC
WinHelpA
WaitMessage
VkKeyScanW
ValidateRect
UpdateLayeredWindow
UpdateWindow
UnregisterHotKey
UnregisterDeviceNotification
UnregisterClassW
UnregisterClassA
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenuEx
TrackPopupMenu
TrackMouseEvent
ToUnicode
ToAscii
SystemParametersInfoW
SystemParametersInfoA
SubtractRect
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCursor
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowsHookExA
SetWindowTextW
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
glu32
gluQuadricTexture
gluScaleImage
gluSphere
mapi32
BMAPIAddress
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
SetEndOfFile
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
SetEndOfFile
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetTimeZoneInformation
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
DeleteFileA
TerminateProcess
ExitThread
HeapFree
HeapReAlloc
HeapAlloc
GetDateFormatA
GetTimeFormatA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetLastError
GetLocalTime
GetEnvironmentVariableA
SetCommBreak
_lopen
GetCommState
SetCommState
SetCommTimeouts
ClearCommBreak
CreatePipe
SetHandleInformation
GetCurrentThreadId
OpenProcess
LocalAlloc
LocalFree
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcessId
QueryPerformanceCounter
GlobalMemoryStatus
GetCurrentThread
GetThreadTimes
GetCurrentProcess
GetProcessTimes
GetSystemTime
GetSystemTimeAdjustment
GetSystemDirectoryA
WriteFile
CreateEventA
_lread
WaitForSingleObject
GetOverlappedResult
SetEvent
LoadLibraryA
comdlg32
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
ChooseColorA
Sections
.text Size: 1024B - Virtual size: 633B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 498KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 396KB - Virtual size: 398KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE