Static task
static1
Behavioral task
behavioral1
Sample
6ba8d050cbc1d589061e875cd7645713.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ba8d050cbc1d589061e875cd7645713.exe
Resource
win10v2004-20220812-en
General
-
Target
6ba8d050cbc1d589061e875cd7645713.exe
-
Size
412KB
-
MD5
6ba8d050cbc1d589061e875cd7645713
-
SHA1
92addf085c5a48edeb54c2e7632e702ad2f16e9f
-
SHA256
52e3968a57dd29320163f5a754ad0d432f82a1e22a5546f7effb4486e3d12c6f
-
SHA512
cbe0150d6782688d9cc4bfe6982d1daf0bc10708fb8c3fb692ac4cb93aaf24e8fd27af8a20c3670f2e56c8ef335a204e5589a35f386013aff928b77d63a41b6c
-
SSDEEP
12288:y9w9iYHFJm5ND8gqpsLHea+XLPP+5/iyRGHW/QMMDLZH8XjU3o9d93y88INLCIxw:y9waeWzb5i+/gt79/zEaW
Malware Config
Signatures
Files
-
6ba8d050cbc1d589061e875cd7645713.exe.exe windows x86
bc46faff0b4be65da4363b1199004b7e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
DeleteUrlCacheEntryW
HttpSendRequestW
HttpOpenRequestW
InternetReadFile
InternetConnectW
InternetCloseHandle
InternetOpenW
urlmon
URLDownloadToFileW
shlwapi
PathFileExistsW
user32
GetKeyboardLayout
CloseClipboard
ToUnicodeEx
SetClipboardData
OpenClipboard
DispatchMessageW
TranslateMessage
GetClipboardData
GetForegroundWindow
EmptyClipboard
SetProcessDPIAware
GetMonitorInfoW
MonitorFromWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindowTextW
GetDC
IsClipboardFormatAvailable
GetKeyboardState
GetAsyncKeyState
GetKeyState
GetMessageW
shell32
SHGetFolderPathW
SHGetKnownFolderPath
SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW
crypt32
CryptUnprotectData
gdi32
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
GetDeviceCaps
SelectObject
gdiplus
GdiplusStartup
GdiplusShutdown
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
kernel32
IsValidCodePage
FindFirstFileExW
OutputDebugStringW
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
HeapReAlloc
HeapAlloc
HeapFree
WriteFile
WriteConsoleW
GetFileType
GetStdHandle
QueryPerformanceFrequency
GetModuleHandleExW
ExitProcess
LoadLibraryExW
RtlUnwind
RaiseException
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
SetEnvironmentVariableW
GlobalAlloc
InitializeSListHead
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
SetEvent
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileSize
GetFileSizeEx
ReadFile
CloseHandle
GetLastError
WaitForSingleObject
CreateMutexA
Sleep
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateThread
OpenProcess
GlobalMemoryStatusEx
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryW
SetEndOfFile
GlobalUnlock
GlobalLock
GetPrivateProfileStringW
CopyFileW
MoveFileExW
MultiByteToWideChar
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetCPInfo
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
UnhandledExceptionFilter
Sections
.text Size: 320KB - Virtual size: 319KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ