Static task
static1
Behavioral task
behavioral1
Sample
6eacb9521ad46e995984a2dd25d95ad393b9470409b364a9e450c02e89902ad1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6eacb9521ad46e995984a2dd25d95ad393b9470409b364a9e450c02e89902ad1.exe
Resource
win10v2004-20220812-en
General
-
Target
6eacb9521ad46e995984a2dd25d95ad393b9470409b364a9e450c02e89902ad1
-
Size
647KB
-
MD5
64ea3f202eb2fdc9050d80b4b90f822a
-
SHA1
c2977ebc33775ce8c33beaf49645f9eb047f058c
-
SHA256
6eacb9521ad46e995984a2dd25d95ad393b9470409b364a9e450c02e89902ad1
-
SHA512
1d2ff984d8ed7681ffcd761cd60f82a66cdb432ebd68c279ef2b3e078b2320df65501e94dbe460b750978ecb41a8a98cd17d6a33ac6e39f86f0ab6fbd9ac42cc
-
SSDEEP
12288:r07s170J7hLFt0yw1/1JTcysThbofu2Ibhgd8cc+hvCc1zm7W:5KJ7jqlDTcyyhHb2d8cc+8cVf
Malware Config
Signatures
Files
-
6eacb9521ad46e995984a2dd25d95ad393b9470409b364a9e450c02e89902ad1.exe windows x86
4777092650c1b5c320b9435a11f12d07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteDC
SelectObject
CreateFontIndirectA
DeleteObject
CreateSolidBrush
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
kernel32
GetCurrentThread
GetVersion
GetModuleHandleA
GetCommandLineA
GetLastError
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
ExitProcess
VirtualAlloc
SetConsoleCtrlHandler
VirtualFree
HeapCreate
IsValidCodePage
CreateProcessA
GetEnvironmentStrings
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
RaiseException
Sleep
GetCurrentDirectoryA
GetCommandLineW
SizeofResource
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
LeaveCriticalSection
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GetProcAddress
FindFirstFileW
CompareStringA
CompareStringW
GetProcessHeap
GlobalLock
GetCPInfo
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
GetOEMCP
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
SetEndOfFile
TerminateProcess
MulDiv
SetUnhandledExceptionFilter
CreateThread
CreateMutexA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
SetLastError
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
LocalFree
SetEvent
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
WideCharToMultiByte
GetLocaleInfoW
FreeEnvironmentStringsW
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
HeapDestroy
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
user32
SetCursor
GetFocus
GetClientRect
InvalidateRect
IsWindowVisible
GetSysColor
SetForegroundWindow
LoadIconA
ScreenToClient
GetDlgItem
CreateWindowExA
CheckMenuItem
SetWindowTextA
SetWindowLongA
PostMessageA
GetWindowRect
BeginPaint
SetFocus
EndPaint
FillRect
SetTimer
GetWindowLongA
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetMessageA
DestroyWindow
SendMessageA
GetDC
IsWindow
SetWindowPos
PostQuitMessage
DestroyMenu
Sections
.text Size: 597KB - Virtual size: 923KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ