Static task
static1
Behavioral task
behavioral1
Sample
6f62ce42874db8258e9aeae0bab7fad155de946364c3861bd0dc94c12b8c2d3e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6f62ce42874db8258e9aeae0bab7fad155de946364c3861bd0dc94c12b8c2d3e.exe
Resource
win10v2004-20220812-en
General
-
Target
6f62ce42874db8258e9aeae0bab7fad155de946364c3861bd0dc94c12b8c2d3e
-
Size
377KB
-
MD5
69a0c8690d0c3a3d650d3c0a212f89b0
-
SHA1
bcd566dc2054c6292999fe8f370e4ab01ce78c90
-
SHA256
6f62ce42874db8258e9aeae0bab7fad155de946364c3861bd0dc94c12b8c2d3e
-
SHA512
f538cdeb5bce07e148eda1a0c435c4e7f1969731f584c7ba6a0dae56d368f7c02afe28aaa829543d935532b8cd6d433c1f99c65004099445164c8778e8106e0c
-
SSDEEP
6144:oBvsIuTAmvWJ6RkphLBRiUU/Hv18oKZP0+mSmwlifexFSPH:oB0IbmeARMBRi5/H+ZPuoliG
Malware Config
Signatures
Files
-
6f62ce42874db8258e9aeae0bab7fad155de946364c3861bd0dc94c12b8c2d3e.exe windows x86
bb0de2b83a1d02f65f5b7718027f2e45
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetProcAddress
GetVersion
LocalFree
OpenProcess
GetCurrentProcess
TerminateProcess
WaitForSingleObject
Sleep
GetFileSize
CloseHandle
GetSystemInfo
FormatMessageA
GetModuleFileNameA
GetModuleHandleA
GetEnvironmentVariableA
CreateDirectoryA
CreateFileA
GetFileAttributesA
CopyFileA
MultiByteToWideChar
CreateToolhelp32Snapshot
Process32First
Process32Next
ExitThread
SetEndOfFile
CreateFileW
LoadLibraryW
ReadConsoleW
WriteConsoleW
SetStdHandle
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
DeleteFileA
DecodePointer
GetCurrentProcessId
QueryPerformanceCounter
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
DuplicateHandle
FreeLibraryAndExitThread
GetThreadTimes
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
CreateTimerQueue
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
EncodePointer
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
AreFileApisANSI
WideCharToMultiByte
RtlUnwind
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
CreateSemaphoreW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThread
GetCurrentThreadId
GetStdHandle
WriteFile
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileType
ReadFile
SetFilePointerEx
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
user32
CreateWindowExA
DestroyWindow
DispatchMessageA
RegisterClassExA
PostQuitMessage
ShowWindow
DialogBoxParamA
EndDialog
LoadAcceleratorsA
TranslateMessage
GetMessageA
DisableProcessWindowsGhosting
DefWindowProcA
LoadStringA
LoadIconA
LoadCursorA
EndPaint
BeginPaint
UpdateWindow
TranslateAcceleratorA
advapi32
GetCurrentHwProfileA
shell32
SHFileOperationA
ShellExecuteExA
SHGetFolderPathA
ShellExecuteA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
shlwapi
PathFindFileNameA
urlmon
URLDownloadToFileA
wininet
InternetCloseHandle
DeleteUrlCacheEntry
InternetCheckConnectionA
HttpSendRequestW
HttpOpenRequestW
InternetReadFile
InternetOpenW
InternetConnectW
Sections
.text Size: 279KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ