Static task
static1
Behavioral task
behavioral1
Sample
d6b1869346da3e7d4e684a1e5fec7f87b4c493869b726d985535a47aad81962f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6b1869346da3e7d4e684a1e5fec7f87b4c493869b726d985535a47aad81962f.exe
Resource
win10v2004-20220812-en
General
-
Target
d6b1869346da3e7d4e684a1e5fec7f87b4c493869b726d985535a47aad81962f
-
Size
232KB
-
MD5
6b9de5321bd81072d0da5082173f9220
-
SHA1
2d9f8b7a16297d6c2b8582836151617ffdcce03b
-
SHA256
d6b1869346da3e7d4e684a1e5fec7f87b4c493869b726d985535a47aad81962f
-
SHA512
87b4cdab7a55a793f8a4ab2bf044f1894cea12db2b2d4e78cd7dee9046d384d27203f97e094dd1beffe8ca629b751bd25f5e0a78edb6a64c58724e0a3344bf3e
-
SSDEEP
6144:8yPeE7IOzsK1F2KRWvCpmCanSLBR2TTKWMNW8+i:qOgQ2YWHXStitMP+
Malware Config
Signatures
Files
-
d6b1869346da3e7d4e684a1e5fec7f87b4c493869b726d985535a47aad81962f.exe windows x86
03c98a94f66c809066924253ab34df3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DisconnectNamedPipe
CallNamedPipeW
ConvertDefaultLocale
GetProcAddress
SetMailslotInfo
EnumCalendarInfoExA
FreeLibrary
VirtualFree
HeapValidate
GetHandleInformation
LoadLibraryA
GetLocalTime
EnumDateFormatsW
IsValidLocale
lstrcpyW
FindResourceA
GetNumberOfConsoleInputEvents
ClearCommError
GetModuleHandleA
VirtualAlloc
user32
GetDesktopWindow
SendMessageA
LoadStringA
UnhookWindowsHookEx
LoadIconA
FindWindowA
GetCapture
GetCursor
GetKeyNameTextA
PostThreadMessageA
RegisterWindowMessageW
VkKeyScanA
IMPSetIMEW
IsWindowUnicode
GetForegroundWindow
CharNextA
IsCharLowerW
SetWindowTextW
ClipCursor
keybd_event
GetFocus
SetWindowRgn
GetMessagePos
SetTimer
LoadCursorA
MsgWaitForMultipleObjectsEx
EnableScrollBar
wsprintfA
SetWindowsHookExW
WaitForInputIdle
GetActiveWindow
GetMessageA
MsgWaitForMultipleObjects
OemToCharBuffA
MapVirtualKeyExW
RedrawWindow
GetMessageTime
CallMsgFilterA
gdi32
SetICMProfileA
CreateFontIndirectExA
RemoveFontResourceW
DeleteDC
LineTo
CreateColorSpaceA
CreateDIBSection
SelectObject
OffsetRgn
CombineRgn
GetEnhMetaFilePaletteEntries
CreateCompatibleDC
GetCharWidthFloatA
StrokeAndFillPath
Pie
TranslateCharsetInfo
StartDocW
ResetDCW
SetBkColor
SetPixelFormat
GetStockObject
CreateCompatibleBitmap
GetObjectA
winspool.drv
SeekPrinter
PrinterProperties
AddPortExW
AddPrinterConnectionA
ord213
DeletePrinterDataW
AddPrintProvidorA
DocumentPropertiesA
EnumPrinterDataW
OpenPrinterA
opengl32
glColor4f
GlmfCloseMetaFile
glTexParameteriv
glLightModelfv
glPixelTransferf
wglCreateContext
glClearStencil
glTexParameterf
glRasterPos2sv
GlmfPlayGlsRecord
glLoadMatrixf
glVertexPointer
glMap1d
glColor3ui
glTranslatef
glColor3fv
glGetMapfv
wglDeleteContext
glRenderMode
glDisableClientState
glLightModelf
glVertex4s
wglMakeCurrent
glTexCoordPointer
glGetTexLevelParameteriv
glFogi
glEdgeFlagPointer
shell32
DuplicateIcon
DragQueryFileW
StrRStrW
StrCmpNA
ShellAboutW
StrRStrA
msvcrt
_mbcjistojms
fclose
__STRINGTOLD
malloc
_wsearchenv
fprintf
wcscpy
_mbsnbcpy
_setmode
_exit
feof
abs
_wfsopen
_unlink
_stricoll
_strncoll
strncat
_chsize
_errno
fflush
_ui64tow
memmove
memcpy
_ismbcl0
_sys_errlist
_wspawnl
_adj_fdiv_m32i
_itow
wcsrchr
atoi
fread
fsetpos
free
_findnexti64
realloc
fputs
fputc
_mbsrchr
__p___argv
fwrite
memset
ftell
_i64toa
_execvpe
_wcsset
_isatty
fwprintf
fseek
sprintf
ferror
_toupper
fopen
_isctype
wcscspn
printf
strlen
Sections
.text Size: 192KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 726B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE