Static task
static1
Behavioral task
behavioral1
Sample
c6906715f3e95662add76542b0d9cbda28bce87c9ab73d2c869bae6d5df9bd97.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c6906715f3e95662add76542b0d9cbda28bce87c9ab73d2c869bae6d5df9bd97.exe
Resource
win10v2004-20220812-en
General
-
Target
c6906715f3e95662add76542b0d9cbda28bce87c9ab73d2c869bae6d5df9bd97
-
Size
718KB
-
MD5
0084073aa961009acc31a774a1100d64
-
SHA1
208140392dd307a5e0ea9d29f819337f42d3c664
-
SHA256
c6906715f3e95662add76542b0d9cbda28bce87c9ab73d2c869bae6d5df9bd97
-
SHA512
1f6f9a7f54912d66981c1be15aee677f71d81ca4eea09602f47b8bc159fa9d224084881e9fe8bed47693e6fa7340aa8fc0571332db0187169967d75c621989a2
-
SSDEEP
12288:BHsyQUsPDva0dT+xJqKoJcbombRWDFt0OtEk/kfOJ5YBos6Yt4KopUBlM:pyUsa8MJqKg6fWnLqAaobYtSUBe
Malware Config
Signatures
Files
-
c6906715f3e95662add76542b0d9cbda28bce87c9ab73d2c869bae6d5df9bd97.exe windows x86
28dcd27c4f92bf1a1cfda02605dc2351
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
GetWindowsDirectoryW
ExitProcess
GetModuleFileNameW
GetDriveTypeW
GetSystemDirectoryW
WideCharToMultiByte
GetTickCount
CreateFileW
GetLastError
ReadFile
SetFilePointer
WriteFile
FlushFileBuffers
CreateFileA
DeviceIoControl
Sleep
GetModuleHandleW
FindResourceW
SizeofResource
LoadResource
LockResource
FreeResource
GetModuleFileNameA
GetTempPathA
CreateProcessW
GetFileSize
SystemTimeToFileTime
MultiByteToWideChar
CloseHandle
FileTimeToSystemTime
GetFileInformationByHandle
UnmapViewOfFile
GetLocalTime
GetProcessHeap
SetEndOfFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
WriteConsoleW
OpenEventW
DeleteFileW
GetFileAttributesW
GetConsoleOutputCP
WriteConsoleA
HeapSize
GetModuleHandleA
SetStdHandle
HeapFree
HeapAlloc
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
RaiseException
GetConsoleCP
GetConsoleMode
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
user32
LoadAcceleratorsW
DialogBoxParamW
GetDesktopWindow
EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcW
DestroyWindow
LoadStringW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
advapi32
RegSetValueExW
RegOpenKeyExW
RegCloseKey
shell32
ShellExecuteA
wtsapi32
WTSRegisterSessionNotification
WTSUnRegisterSessionNotification
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ