Static task
static1
Behavioral task
behavioral1
Sample
d6e5b661c58434df6a0235cf75afdb7c6937db125941562ff2e7bd8248f7caf3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d6e5b661c58434df6a0235cf75afdb7c6937db125941562ff2e7bd8248f7caf3.exe
Resource
win10v2004-20220901-en
General
-
Target
d6e5b661c58434df6a0235cf75afdb7c6937db125941562ff2e7bd8248f7caf3
-
Size
327KB
-
MD5
62a8a4919a7316a45d1de89c43d45286
-
SHA1
e902161cc37de131eb086096cae9e651a8de42e7
-
SHA256
d6e5b661c58434df6a0235cf75afdb7c6937db125941562ff2e7bd8248f7caf3
-
SHA512
63b8ec4e31f0f0b799765147255430450b146e038843d231bb08f5f9e9aebdae126c9ec2d29896e87a9a98d8cbac499b0226970e215e8d47f981611773a2d619
-
SSDEEP
6144:Qu+TYhhfZZqjbJk7xMKuoGB/dUlRYFZxZLlMjp7Vm+AAtv5tO:yYXhU3C7uZdU7YFntlawAno
Malware Config
Signatures
Files
-
d6e5b661c58434df6a0235cf75afdb7c6937db125941562ff2e7bd8248f7caf3.exe windows x86
99d4c51d436cdfd2553468c1498141ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetFileTitleA
shell32
SHGetDesktopFolder
SHGetPathFromIDListW
ShellExecuteA
DuplicateIcon
SHGetPathFromIDList
gdi32
GetMapMode
GetROP2
comctl32
CreateUpDownControl
ImageList_DragMove
ImageList_Remove
ImageList_AddIcon
ImageList_SetFilter
CreatePropertySheetPage
ImageList_LoadImage
InitCommonControlsEx
DrawStatusText
ImageList_Destroy
CreatePropertySheetPageW
kernel32
GetEnvironmentStrings
LockFileEx
GetStringTypeA
GetLocaleInfoA
GetEnvironmentStringsW
EnumSystemLocalesA
QueryPerformanceCounter
UnhandledExceptionFilter
IsValidLocale
GetModuleFileNameA
GetSystemTimeAsFileTime
GetProcAddress
InterlockedDecrement
GetTimeZoneInformation
GetUserDefaultLCID
WriteConsoleW
FreeLibrary
HeapAlloc
GetLastError
FoldStringA
GetEnvironmentStringsA
GetStringTypeW
GetCPInfo
LeaveCriticalSection
LoadLibraryA
InterlockedIncrement
OpenMutexA
IsValidCodePage
FreeEnvironmentStringsW
HeapDestroy
LCMapStringA
GetStartupInfoA
SetFilePointer
GetConsoleOutputCP
lstrcmpW
MultiByteToWideChar
WriteConsoleA
GetOEMCP
HeapSize
SetHandleCount
Sleep
VirtualFree
CloseHandle
VirtualQuery
GetTimeFormatA
CreateFileA
GetCurrentThreadId
SetVolumeLabelW
GetFileType
GetACP
IsDebuggerPresent
TlsFree
SetLastError
WideCharToMultiByte
GetConsoleCP
SetStdHandle
GetDateFormatA
GetConsoleMode
CompareFileTime
GetCurrentProcess
TlsGetValue
LCMapStringW
FlushFileBuffers
lstrcpynW
GetCurrentThread
WriteFile
SetUnhandledExceptionFilter
TlsSetValue
GetModuleHandleA
HeapFree
GetTickCount
EnterCriticalSection
FreeEnvironmentStringsA
GetCommandLineA
InterlockedExchange
SetConsoleCtrlHandler
RtlUnwind
GetCurrentProcessId
GetLocaleInfoW
CompareStringA
SetEnvironmentVariableA
HeapCreate
LocalSize
CreateMutexA
DeleteCriticalSection
ExitProcess
ReadFile
GetStdHandle
VirtualAlloc
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
GetModuleHandleW
HeapReAlloc
CompareStringW
user32
RegisterClassExA
CloseWindowStation
GetKeyboardLayoutNameW
ShowCaret
GetOpenClipboardWindow
GetClipboardOwner
MsgWaitForMultipleObjects
GetMessageW
DdeDisconnect
CountClipboardFormats
LoadCursorFromFileW
FillRect
RegisterClassA
PostQuitMessage
RegisterWindowMessageA
GetMessageTime
FindWindowW
GetMenu
SetClassLongA
DrawTextW
FrameRect
GetTitleBarInfo
DefDlgProcA
wininet
InternetSecurityProtocolToStringW
InternetCheckConnectionA
FindNextUrlCacheEntryExA
FtpSetCurrentDirectoryA
HttpOpenRequestA
FtpRenameFileA
GetUrlCacheHeaderData
InternetSetCookieA
UnlockUrlCacheEntryFile
Sections
.text Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ