Static task
static1
Behavioral task
behavioral1
Sample
6b8baaca45c1827e33b7c30600d59c7276a2e9d39590f8441f1a84622f618842.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b8baaca45c1827e33b7c30600d59c7276a2e9d39590f8441f1a84622f618842.exe
Resource
win10v2004-20220901-en
General
-
Target
6b8baaca45c1827e33b7c30600d59c7276a2e9d39590f8441f1a84622f618842
-
Size
929KB
-
MD5
7c59be2b408dd067fbd70fe6e0799fc0
-
SHA1
f236e206dbc7dbbbad868fb68a01be6c738eddd3
-
SHA256
6b8baaca45c1827e33b7c30600d59c7276a2e9d39590f8441f1a84622f618842
-
SHA512
7ec7aa84fb446906e3babb0ea2110853633a5873ab43aeb98607c2026fb04df7d58ed7b8960422de76a0da2886b2b268566fc83ad73cc9cf174d97f2c49166f3
-
SSDEEP
6144:0SpRSmV5OC6X/wy9/GoyJ56rclPQcLg3qpvonFVw3aZDAnISvl3+:pr5OC6X/w0GlJUrcpQt+h3aZ9SvlO
Malware Config
Signatures
Files
-
6b8baaca45c1827e33b7c30600d59c7276a2e9d39590f8441f1a84622f618842.exe windows x86
8d962bd6cee7bb9083a08341389f9904
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
LogonUserExW
RegCloseKey
RegEnumKeyW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueW
TraceMessage
ConvertSidToStringSidW
ConvertStringSidToSidW
EqualSid
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegCreateKeyExW
RegOpenKeyExW
RegRestoreKeyW
RegSaveKeyW
SetNamedSecurityInfoA
gdi32
CreateScalableFontResourceA
EnumMetaFile
GetTextFaceAliasW
RemoveFontResourceExW
CreateFontIndirectW
CreateICW
CreateSolidBrush
DeleteDC
DeleteObject
ExtTextOutW
GetObjectW
GetStockObject
GetTextExtentPointW
GetTextMetricsW
PlayMetaFile
RestoreDC
SaveDC
SelectObject
SetBkMode
SetBrushOrgEx
SetMapMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
UnrealizeObject
GetMetaFileA
TextOutW
kernel32
VirtualAlloc
FormatMessageW
GetModuleHandleA
LocalAlloc
LocalFree
SetLastError
WideCharToMultiByte
CloseHandle
GetLastError
GlobalUnfix
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
SetEvent
Sleep
lstrcmpW
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FreeLibrary
GetCurrentProcess
GetFileAttributesW
GetFullPathNameW
GetLocaleInfoW
GetNumberFormatW
GetProcAddress
GetShortPathNameW
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
IsBadCodePtr
IsBadReadPtr
IsBadStringPtrW
IsBadWritePtr
LoadLibraryW
LoadResource
LockResource
SearchPathW
SetUnhandledExceptionFilter
TerminateProcess
TlsFree
UnhandledExceptionFilter
lstrcmpiW
lstrcpynW
lstrlenW
AllocConsole
CompareStringW
DeleteTimerQueueEx
EnterCriticalSection
EnumerateLocalComputerNamesA
GetModuleFileNameW
GetProfileIntA
LeaveCriticalSection
ProcessIdToSessionId
RaiseException
RemoveLocalAlternateComputerNameA
WTSGetActiveConsoleSessionId
WaitForSingleObject
WriteFile
ExitThread
GetCurrentThreadId
CreateThread
GetLocalTime
SetLocalTime
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FatalAppExitA
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetModuleHandleW
ExitProcess
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
GetFileType
IsDebuggerPresent
TlsAlloc
TlsGetValue
TlsSetValue
InterlockedIncrement
GetCurrentThread
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
HeapDestroy
LCMapStringW
GetStringTypeW
HeapSize
SetConsoleCtrlHandler
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
GetTimeZoneInformation
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetStdHandle
ReadFile
CreateFileW
SetEnvironmentVariableA
ole32
PropVariantClear
CoUninitialize
CoTestCancel
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
StringFromCLSID
ReleaseStgMedium
OleRegGetUserType
OleQueryLinkFromData
OleMetafilePictFromIconAndLabel
OleGetIconOfFile
OleGetIconOfClass
OleDuplicateData
OleCreateLinkToFile
OleCreateFromFile
OleCreate
GetClassFile
CoGetMalloc
CLSIDFromString
StgIsStorageFile
oleaut32
VarEqv
VariantClear
OaBuildVersion
VarBstrFromI1
rpcrt4
NdrConformantArrayMarshall
NdrDllUnregisterProxy
CStdStubBuffer_DebugServerRelease
user32
SetWindowPos
SetPropW
SetFocus
SetDlgItemTextW
SetCursor
SendMessageW
SetWindowTextW
ScreenToClient
RemovePropW
ReleaseDC
RegisterWindowMessageW
PostMessageW
PeekMessageW
SetWindowWord
ShowCursor
ShowWindow
TranslateMessage
UpdateWindow
WinHelpW
GetClipboardOwner
SendDlgItemMessageW
EndPaint
GetAsyncKeyState
EnumPropsW
LoadIconA
ReleaseCapture
SetParent
SetTimer
SetWindowLongW
BeginPaint
ChangeClipboardChain
CharLowerW
CharNextW
CharPrevW
CheckDlgButton
CheckRadioButton
ChildWindowFromPointEx
CreateWindowExW
DestroyIcon
DestroyMenu
DialogBoxIndirectParamW
DispatchMessageW
DrawFocusRect
DrawMenuBar
EnableWindow
EndDialog
FillRect
GetActiveWindow
GetClientRect
GetCursorPos
GetDC
GetDlgCtrlID
GetDlgItem
GetDlgItemTextW
GetFocus
GetForegroundWindow
GetMenu
GetParent
GetPropW
GetSysColor
GetSystemMetrics
GetWindowLongW
GetWindowRect
GetWindowWord
InflateRect
InsertMenuW
InvalidateRect
IsDialogMessageW
IsDlgButtonChecked
IsWindow
IsWindowEnabled
KillTimer
LoadCursorA
LoadCursorW
LoadIconW
LoadStringW
MapWindowPoints
MessageBoxW
Sections
.text Size: 226KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 590KB - Virtual size: 590KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE