Static task
static1
Behavioral task
behavioral1
Sample
6734c914cfb1ee473ea18a15c4dd3f9fa073a29e0647a8b6685a4f1d18ccb7e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6734c914cfb1ee473ea18a15c4dd3f9fa073a29e0647a8b6685a4f1d18ccb7e8.exe
Resource
win10v2004-20220812-en
General
-
Target
6734c914cfb1ee473ea18a15c4dd3f9fa073a29e0647a8b6685a4f1d18ccb7e8
-
Size
527KB
-
MD5
44bc9601b95eb10a82d6cf1d7d56ed76
-
SHA1
4fa2365864c0f97f399e9e67063012e18c80523e
-
SHA256
6734c914cfb1ee473ea18a15c4dd3f9fa073a29e0647a8b6685a4f1d18ccb7e8
-
SHA512
08f5e58da0b95e9ece43c9102d775caba2a5ee1bd4a2f49802850b04d7096a1bf7470519d777828291fb9c597bb06400a7112841744a4c466ac443d14b185f01
-
SSDEEP
12288:te4gOtIiDAxGKYh/docfcgLPzHFJpnmAr+DJ3Y6QO+sx7pY:aiDAxG3DXlJFtr+p7p1Vq
Malware Config
Signatures
Files
-
6734c914cfb1ee473ea18a15c4dd3f9fa073a29e0647a8b6685a4f1d18ccb7e8.exe windows x86
5f325bf7b330cd54ce48abcf83f5e110
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteColorSpace
SelectPalette
GetCharacterPlacementW
SetPolyFillMode
ScaleWindowExtEx
Pie
GetMetaRgn
CreateFontIndirectW
FixBrushOrgEx
CombineTransform
ColorMatchToTarget
SetROP2
SetBrushOrgEx
RectInRegion
CreatePenIndirect
GetObjectA
BitBlt
ExtEscape
GetTextFaceW
EnumEnhMetaFile
GetEnhMetaFileW
GetFontData
user32
RegisterClassExA
BeginDeferWindowPos
GetCursorInfo
SendDlgItemMessageW
SetCursor
GetClassInfoA
SetProcessDefaultLayout
DestroyWindow
DefWindowProcA
CreateWindowExW
TrackPopupMenuEx
ArrangeIconicWindows
LoadImageW
MessageBoxW
RegisterClassA
ShowWindow
comctl32
ImageList_Draw
ImageList_Read
ImageList_EndDrag
ImageList_Destroy
ImageList_GetFlags
ImageList_Replace
ImageList_LoadImageW
DrawStatusTextA
CreateToolbar
InitCommonControlsEx
ImageList_AddIcon
CreateStatusWindow
ImageList_LoadImage
advapi32
AbortSystemShutdownA
RegReplaceKeyA
RegEnumKeyExW
RegQueryMultipleValuesW
RegFlushKey
LookupPrivilegeNameA
RegNotifyChangeKeyValue
kernel32
SetHandleCount
SetStdHandle
GetProcAddress
EnumSystemLocalesA
WriteConsoleA
GetModuleHandleW
IsDebuggerPresent
TlsGetValue
HeapFree
LeaveCriticalSection
GetLocaleInfoW
InterlockedIncrement
CreateMutexA
GetTimeFormatA
OpenMutexA
SetEnvironmentVariableA
TlsFree
GetCPInfo
GetCurrentThreadId
VirtualFree
GetFileType
RtlUnwind
GetStringTypeA
HeapDestroy
LCMapStringA
CompareStringA
GetCurrentProcess
GetConsoleOutputCP
GetConsoleCP
FreeEnvironmentStringsW
HeapReAlloc
HeapSize
GetModuleHandleA
GetEnvironmentStringsW
InterlockedExchange
HeapCreate
GetLastError
IsValidLocale
Sleep
UnhandledExceptionFilter
LCMapStringW
SetLastError
FindNextChangeNotification
ReleaseSemaphore
CloseHandle
GetStartupInfoW
HeapAlloc
GetProfileStringA
GetModuleFileNameW
ReadFile
ExitProcess
GetStringTypeW
QueryPerformanceCounter
SetFilePointer
VirtualQuery
EnterCriticalSection
WideCharToMultiByte
IsValidCodePage
FlushFileBuffers
CreateFileA
GetCurrentThread
WriteFile
GetStartupInfoA
GetConsoleMode
GetLocaleInfoA
VirtualAlloc
GetCurrentProcessId
GetTimeZoneInformation
GetACP
GetStdHandle
WriteConsoleW
GetSystemTimeAsFileTime
TlsAlloc
MultiByteToWideChar
GetUserDefaultLCID
GetCommandLineW
SetConsoleCtrlHandler
SetUnhandledExceptionFilter
FreeLibrary
LoadLibraryA
TerminateProcess
InitializeCriticalSectionAndSpinCount
GetOEMCP
GetModuleFileNameA
GetDateFormatA
GetCommandLineA
TlsSetValue
DeleteCriticalSection
GetTickCount
InterlockedDecrement
CompareStringW
wininet
InternetGetLastResponseInfoA
Sections
.text Size: 310KB - Virtual size: 310KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 87KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ