Static task
static1
Behavioral task
behavioral1
Sample
6342ce3b1196e0469234f1e5018487f150b47ca06a745856cb3b9d2f674beee9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6342ce3b1196e0469234f1e5018487f150b47ca06a745856cb3b9d2f674beee9.exe
Resource
win10v2004-20220812-en
General
-
Target
6342ce3b1196e0469234f1e5018487f150b47ca06a745856cb3b9d2f674beee9
-
Size
260KB
-
MD5
6f06a1c0c79c0c8b1e820c1897e1d14a
-
SHA1
2eb48d6882ffd82af0b41b9301f087056f45d1d4
-
SHA256
6342ce3b1196e0469234f1e5018487f150b47ca06a745856cb3b9d2f674beee9
-
SHA512
8b60bf25d6663df9fc2c5a11b4401497efa8d845fabb0119687821f6430ce08d5e0d1fc20010b425f5ae284307023ac8d262aafb7652e8a7f8e8f23990ca11da
-
SSDEEP
6144:2TwtpVIHyvOQcllalZcqeQSnSc229swo7:2GVIHyvAl8ZpeQSd+
Malware Config
Signatures
Files
-
6342ce3b1196e0469234f1e5018487f150b47ca06a745856cb3b9d2f674beee9.exe windows x86
8cf1b7658d7e9c1183acb695cb209af0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptDestroyHash
RegEnumKeyA
DuplicateTokenEx
OpenProcessToken
AdjustTokenPrivileges
RegQueryValueA
RegQueryInfoKeyA
QueryServiceStatus
RegOpenKeyExW
RegCloseKey
DeregisterEventSource
GetTokenInformation
RegSetValueExA
DuplicateToken
GetLengthSid
RegEnumValueW
RegDeleteValueW
RegCreateKeyW
GetUserNameW
SetSecurityDescriptorDacl
GetFileSecurityA
RegQueryValueW
RegEnumKeyExA
RegFlushKey
LookupPrivilegeValueA
RegEnumValueA
RegSetValueExW
RegOpenKeyA
GetSecurityDescriptorDacl
RegCreateKeyExW
RegCreateKeyA
SetFileSecurityW
RegSetValueA
RevertToSelf
ControlService
RegQueryValueExA
RegOpenKeyW
RegDeleteValueA
DeleteService
InitializeAcl
OpenSCManagerA
ChangeServiceConfigA
MapGenericMask
EqualSid
AddAccessAllowedAce
RegDeleteKeyW
RegOpenKeyExA
OpenServiceA
AllocateAndInitializeSid
RegQueryValueExW
LookupPrivilegeValueW
SetFileSecurityA
CreateServiceW
InitializeSecurityDescriptor
RegDeleteKeyA
StartServiceA
RegCreateKeyExA
CloseServiceHandle
CreateServiceA
AccessCheck
RegisterEventSourceW
RegisterServiceCtrlHandlerA
version
GetFileVersionInfoA
VerLanguageNameA
VerQueryValueA
GetFileVersionInfoSizeA
shell32
DragQueryFileW
CommandLineToArgvW
ExtractIconExA
ShellExecuteW
DragQueryFileA
SHGetFileInfoW
SHGetDesktopFolder
Shell_NotifyIconA
ord155
SHBrowseForFolderA
ShellExecuteA
ShellExecuteExA
ExtractIconA
DragQueryPoint
SHGetFileInfoA
DragAcceptFiles
DragFinish
SHGetMalloc
SHGetPathFromIDListA
user32
ShowWindow
SetWindowPlacement
SetDlgItemTextA
DefDlgProcA
MessageBoxW
GetWindowDC
wsprintfW
CharUpperA
DefWindowProcA
SetTimer
UnionRect
PeekMessageW
SetWindowLongW
FindWindowW
LoadAcceleratorsA
LoadCursorW
CopyAcceleratorTableA
GetClipboardOwner
DrawEdge
EnumWindows
IsZoomed
IsWindowVisible
CopyIcon
RemoveMenu
GetScrollInfo
LoadMenuW
SetMenu
GetWindowPlacement
DestroyWindow
GetWindow
ShowCaret
CreateWindowExA
UnregisterClassA
GetMenuItemID
RedrawWindow
SetScrollInfo
AppendMenuA
HideCaret
DestroyMenu
GetDC
GetDlgItemTextA
SetParent
LoadImageW
CharLowerA
ValidateRect
GetMenuStringA
DrawMenuBar
EmptyClipboard
CopyRect
LoadBitmapA
GetUpdateRgn
SendDlgItemMessageW
GetDesktopWindow
IsRectEmpty
GetSysColorBrush
ReleaseDC
SystemParametersInfoA
SetCursorPos
CloseClipboard
WinHelpW
MapVirtualKeyExA
EnumChildWindows
IsDialogMessageA
SetClipboardData
MessageBoxA
TrackPopupMenuEx
FindWindowExA
DefWindowProcW
ScreenToClient
PostMessageW
KillTimer
LoadIconW
GetDlgItemTextW
DrawTextW
RegisterWindowMessageA
ClientToScreen
GetClientRect
IsDialogMessageW
DestroyAcceleratorTable
BeginDeferWindowPos
TrackPopupMenu
GetMenuState
SetWindowContextHelpId
GetSystemMenu
MapVirtualKeyA
LoadCursorA
GetNextDlgTabItem
CharNextA
FindWindowA
GetMenuItemInfoW
AdjustWindowRect
IntersectRect
InvertRect
DispatchMessageW
SetRectEmpty
GetPropA
EndDeferWindowPos
CopyImage
DrawFrameControl
WinHelpA
AppendMenuW
RegisterClassExA
DeferWindowPos
ShowOwnedPopups
DeleteMenu
CheckDlgButton
GetMenuItemInfoA
UnpackDDElParam
GetNextDlgGroupItem
TranslateMessage
EqualRect
SetFocus
CharToOemA
GetWindowTextA
ClipCursor
GetDlgCtrlID
LoadStringA
IsDlgButtonChecked
GetKeyState
TranslateAcceleratorW
GetCursor
GetClassNameA
SetRect
SetWindowRgn
GetWindowTextW
InvalidateRect
IsWindowUnicode
SetMenuItemBitmaps
ReleaseCapture
GetMenuItemCount
SetWindowsHookExW
UpdateWindow
WindowFromPoint
GetIconInfo
DestroyIcon
IsWindowEnabled
SetPropW
IsChild
CreateDialogIndirectParamA
IsWindow
ModifyMenuA
RemovePropA
DrawIconEx
GetClassNameW
SetDlgItemInt
SendDlgItemMessageA
CheckMenuItem
GetClassLongW
SendMessageA
LoadImageA
ExitWindowsEx
MapDialogRect
SetWindowTextA
CreateIconFromResourceEx
RegisterClassW
GetWindowLongA
GetSysColor
GetLastActivePopup
SetCursor
UnhookWindowsHookEx
IsIconic
GetDlgItemInt
FillRect
CallWindowProcA
SetActiveWindow
GetMenuCheckMarkDimensions
CharUpperW
wsprintfA
UnregisterClassW
EndPaint
SetPropA
CheckMenuRadioItem
ExcludeUpdateRgn
CopyAcceleratorTableW
GetTopWindow
RegisterClipboardFormatA
OpenClipboard
GetCapture
SetClassLongA
SetMenuContextHelpId
GetCursorPos
EnableWindow
InvalidateRgn
RegisterHotKey
DrawStateA
GetMessageTime
SetWindowTextW
DispatchMessageA
GetFocus
MoveWindow
GetWindowRect
RegisterClassA
GetForegroundWindow
OffsetRect
FrameRect
GetClassInfoA
SetScrollPos
PtInRect
CreatePopupMenu
PostMessageA
LoadMenuA
GetWindowTextLengthA
GetMessageA
PostThreadMessageA
MessageBeep
MapWindowPoints
ShowScrollBar
GetActiveWindow
SetForegroundWindow
GetWindowThreadProcessId
GetSubMenu
SetCapture
ShowCursor
GetDCEx
GetMessagePos
InflateRect
PeekMessageA
SetClipboardViewer
DrawTextA
GrayStringA
SetWindowPos
MsgWaitForMultipleObjects
SetWindowsHookExA
GetMenu
GetDialogBaseUnits
GetSystemMetrics
BringWindowToTop
GetParent
PostQuitMessage
CallNextHookEx
GetClassLongA
AttachThreadInput
EndDialog
AdjustWindowRectEx
LoadIconA
GetDlgItem
TrackMouseEvent
BeginPaint
TabbedTextOutA
GetWindowInfo
GetClassInfoExW
ModifyMenuW
EnableMenuItem
SetWindowLongA
ole32
DoDragDrop
CreateDataAdviseHolder
OleDuplicateData
OleCreate
OleSetMenuDescriptor
ReleaseStgMedium
OleGetIconOfClass
StringFromCLSID
CoLockObjectExternal
OleUninitialize
CreateGenericComposite
OleRegGetMiscStatus
OleCreateLinkFromData
OleGetClipboard
OleSetClipboard
StgCreateDocfile
CreateBindCtx
CoRevokeClassObject
CLSIDFromProgID
StgCreateDocfileOnILockBytes
WriteFmtUserTypeStg
OleDestroyMenuDescriptor
CoUnmarshalInterface
StgOpenStorage
CoTreatAsClass
CoUninitialize
OleSetContainedObject
CoInitializeEx
CoDisconnectObject
OleSave
OleFlushClipboard
OleIsCurrentClipboard
CoCreateInstance
CreateILockBytesOnHGlobal
ReadFmtUserTypeStg
SetConvertStg
GetRunningObjectTable
CoTaskMemAlloc
OleTranslateAccelerator
CoTaskMemFree
RevokeDragDrop
CoInitialize
CoLoadLibrary
CreateFileMoniker
OleRegEnumVerbs
WriteClassStm
OleCreateFromFile
CLSIDFromString
OleCreateMenuDescriptor
CoCopyProxy
GetHGlobalFromILockBytes
CoTaskMemRealloc
ReadClassStg
CoFreeUnusedLibraries
OleSaveToStream
GetClassFile
CoRegisterClassObject
WriteClassStg
CoCreateGuid
CreateItemMoniker
OleInitialize
CreateOleAdviseHolder
CoRegisterMessageFilter
StgIsStorageILockBytes
CoGetMalloc
StgOpenStorageOnILockBytes
CreateStreamOnHGlobal
IsAccelerator
CoGetClassObject
OleCreateLinkToFile
OleLockRunning
RegisterDragDrop
comctl32
ImageList_LoadImageW
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Merge
ImageList_GetImageCount
ImageList_Create
ImageList_SetDragCursorImage
ImageList_Destroy
ImageList_DragEnter
ImageList_AddMasked
ImageList_GetIconSize
ImageList_SetBkColor
ImageList_SetImageCount
CreatePropertySheetPageW
InitCommonControlsEx
PropertySheetW
ImageList_GetIcon
CreatePropertySheetPageA
ImageList_GetImageInfo
ImageList_Add
ImageList_LoadImageA
DestroyPropertySheetPage
ord17
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_GetDragImage
_TrackMouseEvent
ImageList_Draw
CreateStatusWindowW
kernel32
GetVersionExA
FormatMessageA
GetCurrentThread
FindNextFileA
lstrcmpW
GetFullPathNameA
IsBadWritePtr
FatalAppExitA
GetStringTypeA
CreateFileW
GetStringTypeW
GetEnvironmentVariableA
FindResourceA
HeapCreate
GetProcessHeap
DeleteFileW
MulDiv
GetPrivateProfileIntA
GetTimeZoneInformation
FindResourceExW
VirtualFree
GetStdHandle
WaitForSingleObject
EnumSystemLocalesA
LoadLibraryW
GlobalAddAtomA
LoadLibraryExW
GetShortPathNameA
OutputDebugStringA
InterlockedDecrement
TlsGetValue
FormatMessageW
SetFileAttributesA
HeapFree
VirtualAlloc
GetFileSizeEx
GlobalHandle
GetOverlappedResult
GetVolumeInformationA
UnmapViewOfFile
CompareStringW
GlobalReAlloc
SetStdHandle
FileTimeToSystemTime
GetVersion
CreateMutexW
GetStringTypeExA
FreeEnvironmentStringsW
GetFileType
GetModuleHandleA
WriteConsoleW
UnhandledExceptionFilter
InterlockedCompareExchange
SetLastError
SetErrorMode
GetFullPathNameW
GetCurrentDirectoryA
GetWindowsDirectoryA
TlsAlloc
CreateDirectoryW
lstrcatA
GetOEMCP
LoadResource
lstrcpyW
SizeofResource
IsDebuggerPresent
ResumeThread
Sleep
FindClose
GetLastError
FreeResource
GetSystemTime
InterlockedExchange
lstrcpynW
GlobalLock
HeapAlloc
GetExitCodeThread
DuplicateHandle
GetTimeFormatA
GlobalSize
GetCurrentThreadId
WritePrivateProfileStringA
DeleteFileA
CreateDirectoryA
GetCurrentProcessId
GetSystemDirectoryA
InterlockedIncrement
SystemTimeToFileTime
GetProcessVersion
lstrcmpiA
lstrcmpA
GetFileTime
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetThreadLocale
WideCharToMultiByte
GetExitCodeProcess
FileTimeToLocalFileTime
FlushFileBuffers
LeaveCriticalSection
LocalFileTimeToFileTime
FreeEnvironmentStringsA
SetCurrentDirectoryA
SetFilePointer
DeleteCriticalSection
TerminateThread
GetLocaleInfoW
GetSystemInfo
HeapDestroy
MoveFileA
RaiseException
GetTempPathA
InitializeCriticalSection
GetUserDefaultLCID
GetCurrentProcess
LCMapStringW
WritePrivateProfileStringW
FindFirstFileW
lstrcpynA
GetEnvironmentStringsW
WriteFile
LockFile
LoadLibraryExA
GlobalFlags
GetDiskFreeSpaceExA
GetFileAttributesA
GetModuleFileNameA
RtlUnwind
VirtualQuery
OpenEventA
GlobalDeleteAtom
TerminateProcess
GetACP
GetStartupInfoA
GetLocaleInfoA
GetEnvironmentStrings
LocalFree
LoadLibraryA
CopyFileA
CreateEventA
VirtualProtect
GetConsoleMode
ExitThread
GetCurrentDirectoryW
GlobalGetAtomNameA
LockResource
GetWindowsDirectoryW
CompareStringA
GetLogicalDriveStringsA
EnterCriticalSection
ExitProcess
lstrcpyA
SetEndOfFile
GetPrivateProfileStringA
IsProcessorFeaturePresent
CreateFileA
lstrlenW
EnumResourceLanguagesA
WinExec
SleepEx
TlsFree
GetDriveTypeA
IsValidLocale
GetTickCount
OpenProcess
GetTempFileNameA
OpenMutexA
CreateMutexA
CreateFileMappingA
GetDateFormatA
IsValidCodePage
UnlockFile
GlobalUnlock
FindFirstFileA
GetModuleHandleW
LCMapStringA
LocalAlloc
GetModuleFileNameW
GetLocalTime
FreeLibrary
ReadFile
HeapSize
GetStringTypeExW
TlsSetValue
SetThreadPriority
QueryPerformanceCounter
GlobalAlloc
MapViewOfFile
GetProcAddress
GetFileSize
GlobalFindAtomA
SetFileTime
GetCPInfo
SetEnvironmentVariableA
IsBadCodePtr
SetHandleCount
lstrlenA
IsBadReadPtr
MultiByteToWideChar
HeapReAlloc
CloseHandle
GetCommandLineA
GetSystemDirectoryW
wininet
InternetCheckConnectionA
InternetCrackUrlW
HttpQueryInfoA
HttpOpenRequestA
InternetQueryDataAvailable
HttpSendRequestW
InternetWriteFile
InternetGetConnectedState
InternetOpenW
InternetTimeFromSystemTime
InternetCanonicalizeUrlA
InternetErrorDlg
HttpQueryInfoW
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenUrlW
InternetAttemptConnect
InternetTimeToSystemTime
InternetOpenA
InternetReadFile
HttpSendRequestA
InternetConnectA
HttpAddRequestHeadersW
InternetGetLastResponseInfoW
HttpAddRequestHeadersA
InternetCloseHandle
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ