Static task
static1
Behavioral task
behavioral1
Sample
65b167643ed70f678089664393d793576a4dfc0ca9079c54d781a5e266edb219.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
65b167643ed70f678089664393d793576a4dfc0ca9079c54d781a5e266edb219.exe
Resource
win10v2004-20220812-en
General
-
Target
65b167643ed70f678089664393d793576a4dfc0ca9079c54d781a5e266edb219
-
Size
108KB
-
MD5
6b1eb63390996e002da1d3050f935c20
-
SHA1
714eedbc64c25e02a829038e03504a4b9328ca72
-
SHA256
65b167643ed70f678089664393d793576a4dfc0ca9079c54d781a5e266edb219
-
SHA512
60eaa429930dd4feb1e632c94614999de0cba6d355782163299b2ea9f8c38c65057a7f10d7efcb5d413d77c74c608d0a71835176633d870a3ab82989008bf0e7
-
SSDEEP
1536:SZ4YkQRgdeHth62fpo1M9gDOGbjhoEWxRgIlfJ:SkQRT/62ho295ajhopRPlJ
Malware Config
Signatures
Files
-
65b167643ed70f678089664393d793576a4dfc0ca9079c54d781a5e266edb219.exe windows x86
050e86aff4f8e4f186bf90e3747893af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
SetEnvironmentVariableA
EnterCriticalSection
FreeLibrary
WriteFile
ResetEvent
GetACP
WaitForMultipleObjects
GetCurrentProcess
CreateFileA
GetCommandLineW
LeaveCriticalSection
FindFirstFileW
DeleteCriticalSection
FileTimeToSystemTime
WideCharToMultiByte
SetHandleCount
HeapReAlloc
WaitForSingleObject
MultiByteToWideChar
InterlockedExchange
GetStdHandle
WaitForSingleObjectEx
GlobalAlloc
RaiseException
CreateThread
GetEnvironmentStrings
CompareStringA
GetSystemInfo
HeapFree
LocalFree
GetEnvironmentStringsW
GetModuleFileNameA
FormatMessageW
TlsSetValue
CreateFileW
TlsGetValue
CreateEventW
TryEnterCriticalSection
FreeLibraryAndExitThread
GetFileType
CloseHandle
InterlockedExchangeAdd
TerminateProcess
LCMapStringW
FreeEnvironmentStringsW
OutputDebugStringA
lstrlenW
SetEvent
CreateMutexW
VirtualAlloc
GetModuleHandleW
GetStartupInfoW
CompareFileTime
GetCurrentThreadId
InterlockedDecrement
GetStartupInfoA
GetCurrentThread
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
InterlockedIncrement
HeapSize
RtlUnwind
Sleep
IsValidCodePage
GetOEMCP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
GetLocaleInfoW
LoadLibraryW
GetCommandLineA
HeapSetInformation
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetProcAddress
ExitProcess
DecodePointer
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
EncodePointer
TlsAlloc
TlsFree
SetLastError
GetLastError
HeapCreate
HeapDestroy
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
HeapAlloc
user32
GetSystemMetrics
gdi32
GetBitmapBits
CombineRgn
RestoreDC
SetPixelV
CreateCompatibleBitmap
GetMapMode
RealizePalette
GetDeviceCaps
Escape
GetObjectA
GetTextColor
SetTextAlign
SetViewportExtEx
GetSystemPaletteEntries
CreateFontIndirectA
ExcludeClipRect
SetPixel
SetRectRgn
CreateBrushIndirect
BitBlt
GetBkColor
SetStretchBltMode
GetTextMetricsW
MoveToEx
GetClipBox
GetWindowExtEx
Polyline
CreateRectRgnIndirect
Ellipse
SetBrushOrgEx
CreateHalftonePalette
SetBkColor
GetStretchBltMode
IntersectClipRect
CreateFontA
CreateRoundRectRgn
GetStockObject
SetWindowExtEx
EndDoc
GetWindowOrgEx
SetViewportOrgEx
GetTextExtentPoint32A
ExtTextOutW
ScaleViewportExtEx
SetBkMode
CreatePatternBrush
CreateDIBitmap
ExtEscape
GetRgnBox
GetObjectW
DPtoLP
GetDIBColorTable
DeleteObject
GetPaletteEntries
RectVisible
CreateFontW
ExtTextOutA
GetDCOrgEx
ScaleWindowExtEx
SelectObject
CreateCompatibleDC
SelectPalette
SaveDC
SetMapMode
SetDIBColorTable
GetCurrentPositionEx
PolylineTo
RoundRect
CreatePalette
SetWindowOrgEx
CreateDCA
CreatePen
StretchDIBits
UnrealizeObject
PatBlt
GetDIBits
SetTextColor
GetTextExtentPointA
ExtSelectClipRgn
DeleteEnhMetaFile
GetTextExtentPoint32W
LPtoDP
CreateBitmap
DeleteDC
SelectClipRgn
CreatePolygonRgn
ole32
CoTaskMemFree
OleInitialize
OleGetClipboard
CoInitialize
CoSetProxyBlanket
CoTaskMemRealloc
msi
ord46
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ