Static task
static1
Behavioral task
behavioral1
Sample
7b6cd8a609a7d08b2829f373cf26e16d9ed113ebc9ff13bdf1673d216d3b5761.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7b6cd8a609a7d08b2829f373cf26e16d9ed113ebc9ff13bdf1673d216d3b5761.exe
Resource
win10v2004-20220901-en
General
-
Target
7b6cd8a609a7d08b2829f373cf26e16d9ed113ebc9ff13bdf1673d216d3b5761
-
Size
138KB
-
MD5
6afc19d756503967a9ea9417188694e0
-
SHA1
9892d9854b04917ce4d5c577a24beda0278d36ef
-
SHA256
7b6cd8a609a7d08b2829f373cf26e16d9ed113ebc9ff13bdf1673d216d3b5761
-
SHA512
cb43500c2e67b899bea4501e5c396e593d4163946d3bc1a4bf29e8d5d010e04d2d11bab227f2b9f5b86e36e51ae0b6ffe0c68b0f23e3e7d1e639d1f9cbdc5836
-
SSDEEP
1536:tSF6nnA2i2CIdTzA1+UCeJb7THgXZgR61IEKRWU8Lilsts4PniWiBLJx9ESF6nnX:oF6Bju1R/R7THgwoIaLil0ibBL79tF6
Malware Config
Signatures
Files
-
7b6cd8a609a7d08b2829f373cf26e16d9ed113ebc9ff13bdf1673d216d3b5761.exe windows x86
676304dc9904664854779ca8c6ddaef5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msi
ord151
gdi32
GetStretchBltMode
SelectObject
SetROP2
LPtoDP
GetWindowExtEx
IntersectClipRect
SelectClipRgn
CreateHalftonePalette
SetWindowOrgEx
Rectangle
PatBlt
CreateFontW
PolylineTo
SetMapMode
GetPaletteEntries
CreateDIBSection
GetDIBits
SetStretchBltMode
DPtoLP
DeleteObject
RoundRect
SetPixelV
SetWindowExtEx
SetViewportExtEx
DeleteDC
GetMapMode
UnrealizeObject
PolyPolyline
CreateDIBitmap
CreatePolygonRgn
SaveDC
RectVisible
Escape
ExtSelectClipRgn
CreateCompatibleBitmap
SetTextColor
ScaleViewportExtEx
CreateDCA
Polyline
GetObjectW
EndPage
GetClipBox
MoveToEx
SetBrushOrgEx
shlwapi
PathGetCharTypeA
kernel32
GetExitCodeProcess
CompareStringW
CompareStringA
GetTimeZoneInformation
GetCommandLineW
GetEnvironmentStringsW
GetModuleHandleW
lstrcmpA
VirtualAlloc
GetCommandLineA
lstrlenA
GetFileAttributesA
GetStartupInfoW
DeleteFileW
GetSystemInfo
GetStartupInfoA
LoadLibraryExW
EnterCriticalSection
CreateFileA
DeleteCriticalSection
SetLastError
LoadResource
SizeofResource
lstrlenW
HeapSize
CreateEventW
WideCharToMultiByte
FreeLibrary
CreateEventA
GetFileAttributesW
ReadFile
WriteFile
LoadLibraryA
SetHandleCount
LocalAlloc
WaitForSingleObject
SetEnvironmentVariableA
SetFilePointerEx
HeapCreate
FindFirstFileW
SetFilePointer
LCMapStringW
GetOEMCP
FreeLibraryAndExitThread
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
GetStringTypeW
HeapAlloc
ExitProcess
GetLocaleInfoA
LoadLibraryW
GetModuleFileNameA
WaitForSingleObjectEx
FreeEnvironmentStringsW
FindNextFileW
GetModuleHandleA
FindClose
HeapDestroy
GetVersionExW
LocalFree
SetEndOfFile
TlsFree
SetErrorMode
SetStdHandle
TryEnterCriticalSection
MultiByteToWideChar
FormatMessageW
HeapFree
GetVersionExA
GetProcessHeap
GetProcAddress
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetLastError
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSection
GetCPInfo
GetACP
Sleep
HeapReAlloc
RtlUnwind
GetLocaleInfoW
LCMapStringA
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ