Static task
static1
Behavioral task
behavioral1
Sample
6e381a4b4199ad4d0b2d9ac7e9ebf6264623dec0c4c2a33b85fe5a9356233a6c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6e381a4b4199ad4d0b2d9ac7e9ebf6264623dec0c4c2a33b85fe5a9356233a6c.exe
Resource
win10v2004-20220812-en
General
-
Target
6e381a4b4199ad4d0b2d9ac7e9ebf6264623dec0c4c2a33b85fe5a9356233a6c
-
Size
96KB
-
MD5
7a0aa62d365f9a22b4e628004e21f84c
-
SHA1
24c599e1ac8a83c84944a9e06509c1960c61a6e9
-
SHA256
6e381a4b4199ad4d0b2d9ac7e9ebf6264623dec0c4c2a33b85fe5a9356233a6c
-
SHA512
f7b47c077314b4c71ffb6afc27766922b29b551e79b3241fbebe1f5f0747844e38b8a0e190abe24061a24ac4f8621c7555d23066a1beb1b3e969ae5c3ff11520
-
SSDEEP
1536:Rsd7ns2I2aHD9XgZ3T55CGbVyPp1LYPeyx8kcuBrVMMN28R:RsS2aHD9XgNzb8pJPyxIuBI8R
Malware Config
Signatures
Files
-
6e381a4b4199ad4d0b2d9ac7e9ebf6264623dec0c4c2a33b85fe5a9356233a6c.exe windows x86
42121022f01fde16e0da3794c1cb6389
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
LCMapStringA
ReadFile
GetSystemInfo
VirtualProtect
SetStdHandle
CreateFileA
SetFilePointer
VirtualQuery
InterlockedExchange
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetLocaleInfoA
UnhandledExceptionFilter
GetStdHandle
FlushFileBuffers
WriteFile
GetCurrentProcess
TerminateProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetVersionExA
GetCommandLineA
GetStartupInfoA
SetEndOfFile
WideCharToMultiByte
GetProcessHeap
SystemTimeToFileTime
HeapAlloc
HeapFree
GetCurrentDirectoryA
FindFirstFileA
GetPrivateProfileSectionNamesA
FindNextFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteFileA
CreateEventA
ResumeThread
SetEvent
GetModuleHandleA
ExitProcess
GetLastError
GetCurrentThreadId
GetPrivateProfileStringA
GetPrivateProfileIntA
CloseHandle
CreateThread
WaitForSingleObject
GetSystemTime
FileTimeToSystemTime
FreeEnvironmentStringsA
HeapSize
user32
MoveWindow
RegisterClassExA
CreateDialogParamA
ShowWindow
SetWindowPos
UpdateWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
SetDlgItemTextA
SetWindowTextA
SendDlgItemMessageA
PostQuitMessage
LoadBitmapA
LoadCursorA
LoadIconA
GetWindowLongA
SetWindowLongA
MessageBoxA
InvalidateRect
GetComboBoxInfo
GetKeyState
GetActiveWindow
CallWindowProcA
SystemParametersInfoA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
GetWindowRect
GetDlgCtrlID
GetClientRect
GetDC
DrawFocusRect
SetCursor
GetFocus
SetFocus
GetDlgItem
SendMessageA
DestroyIcon
DestroyWindow
gdi32
CreateFontIndirectA
CreateCompatibleDC
GetObjectA
DPtoLP
CreateBitmap
CreateCompatibleBitmap
GetMapMode
SetMapMode
BitBlt
SetBkColor
DeleteDC
GetTextExtentPoint32A
CreateBrushIndirect
SetTextColor
SelectObject
GetTextExtentExPointA
DeleteObject
SetBkMode
winspool.drv
EnumPrintersA
advapi32
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
shell32
ShellExecuteExA
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ