Static task
static1
Behavioral task
behavioral1
Sample
6830e3732756e0c5f1fd185e846473ed57149aee94d45c1ce1c0288ba85f2f6e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6830e3732756e0c5f1fd185e846473ed57149aee94d45c1ce1c0288ba85f2f6e.exe
Resource
win10v2004-20220901-en
General
-
Target
6830e3732756e0c5f1fd185e846473ed57149aee94d45c1ce1c0288ba85f2f6e
-
Size
158KB
-
MD5
6dbfe241f27f83b46980d3ed2e359649
-
SHA1
c991de9f843dfc37b913a8730a3bbc40b845ffdc
-
SHA256
6830e3732756e0c5f1fd185e846473ed57149aee94d45c1ce1c0288ba85f2f6e
-
SHA512
fa4e1876be932caf1203c126397f444bb3608dbcda6568036090cde63f28c857e3cf1cafa3022e1ff40f0222e1484d6e09191b27153033afaf9405e38138a30c
-
SSDEEP
3072:aZ6EkFq5vYt1ybvDIEcKz9J+aOwVLR2wt2RyBGO/:amAgHybLMUzhOIRm
Malware Config
Signatures
Files
-
6830e3732756e0c5f1fd185e846473ed57149aee94d45c1ce1c0288ba85f2f6e.exe windows x86
40fbc3d40929b6d24c4b5c32fe7fa783
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
CM_Reenumerate_DevNode
SetupDiGetDeviceInstallParamsW
CM_Locate_DevNode_ExW
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsW
SetupDiEnumDeviceInfo
kernel32
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameW
HeapReAlloc
CreateEventW
CreateFileW
CreateThread
SetThreadPriority
CancelIo
DisconnectNamedPipe
ReleaseMutex
SetEvent
WaitForSingleObject
ReadFile
TerminateThread
GetLastError
CloseHandle
HeapFree
WaitForMultipleObjects
GetCurrentThreadId
HeapSize
lstrlenW
ResetEvent
ExitThread
GetOverlappedResult
HeapValidate
WriteFile
PeekNamedPipe
GetEnvironmentStringsW
ConnectNamedPipe
HeapAlloc
IsBadCodePtr
GetTickCount
CreateMutexW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
DeviceIoControl
MultiByteToWideChar
WideCharToMultiByte
GetVersionExW
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
GetStringTypeW
GetCommandLineA
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
GetStringTypeA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
GetStdHandle
GetModuleFileNameA
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
LoadLibraryA
user32
UnregisterClassW
UpdateWindow
ShowWindow
RegisterDeviceNotificationW
PostMessageW
CharUpperBuffW
UnregisterDeviceNotification
CreateWindowExW
RegisterClassExW
DispatchMessageW
GetMessageW
PostQuitMessage
DefWindowProcW
advapi32
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyW
RegQueryInfoKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
shell32
SHGetSpecialFolderPathW
ole32
CoTaskMemFree
CLSIDFromString
CoTaskMemAlloc
StringFromCLSID
oleaut32
VarBstrCat
SysAllocStringByteLen
SysStringByteLen
VarBstrCmp
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocString
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ