Static task
static1
Behavioral task
behavioral1
Sample
6b87548cde741999a9f0345112c20314b1286a6f6001616a89254da87027de67.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b87548cde741999a9f0345112c20314b1286a6f6001616a89254da87027de67.exe
Resource
win10v2004-20220901-en
General
-
Target
6b87548cde741999a9f0345112c20314b1286a6f6001616a89254da87027de67
-
Size
97KB
-
MD5
7a01c599e0c057173cf328dad0b93c97
-
SHA1
1a92f0f41294adeb6792e81e66b7bd8fbb6d9ac9
-
SHA256
6b87548cde741999a9f0345112c20314b1286a6f6001616a89254da87027de67
-
SHA512
6aacb2002ac55bca76eaa37fa730029ded20265027e26d652d8f097badedfeb12cf88fa8a22acba09ceb2389f45727eb676e89374e855397ecf001fe25d68fa6
-
SSDEEP
1536:o8YG+Yl6rhROR1d7EOAVHKK1LFp4J/n+KOLzCEPZEDIStEuOPCuTJolo4naeb:dfPGOkHtLFp4p+6EPuiKuTJoa4naeb
Malware Config
Signatures
Files
-
6b87548cde741999a9f0345112c20314b1286a6f6001616a89254da87027de67.exe windows x86
79abf76ebccaba135a066f5e0cde12eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsContentTypeA
SHQueryInfoKeyA
SHQueryValueExA
SHStrDupA
PathIsDirectoryA
SHSetValueA
PathGetCharTypeA
SHEnumValueA
kernel32
CreateFileA
LoadLibraryA
GetProcessHeap
GetACP
LocalAlloc
MoveFileExA
WaitForSingleObject
GetCurrentProcessId
Sleep
DeleteCriticalSection
VirtualFree
GetCurrentThread
lstrcpyA
GetOEMCP
VirtualAlloc
GetFileAttributesA
ExitProcess
WideCharToMultiByte
GetStringTypeW
ExitThread
lstrlenA
FindResourceA
GetModuleHandleA
gdi32
SelectPalette
GetDCOrgEx
SetTextColor
GetRgnBox
user32
EqualRect
GetMenuItemCount
SetWindowTextA
GetFocus
EndPaint
IsWindowVisible
EnableWindow
FindWindowA
ClientToScreen
IsChild
IsWindowEnabled
DrawIcon
FillRect
GetForegroundWindow
GetClassLongA
GetLastActivePopup
GetDlgItem
GetCapture
CallNextHookEx
DrawFrameControl
GetCursor
GetSysColor
DrawIconEx
GetMessagePos
GetKeyState
BeginDeferWindowPos
GetKeyNameTextA
GetMenu
DrawMenuBar
GetActiveWindow
MessageBoxA
CreateWindowExA
GetParent
EnableScrollBar
GetScrollInfo
CreatePopupMenu
DispatchMessageW
ShowWindow
SetCursor
BeginPaint
DeferWindowPos
GetClientRect
IsMenu
CheckMenuItem
CharNextA
GetMenuItemID
HideCaret
CharToOemA
FrameRect
GetSysColorBrush
DefWindowProcA
EndDeferWindowPos
GetDCEx
GetIconInfo
ShowScrollBar
IsDialogMessageA
GetSubMenu
DefMDIChildProcA
SetWindowPos
EnableMenuItem
RegisterClassA
SetTimer
GetWindowTextA
CharLowerA
GetClassInfoA
EnumThreadWindows
TrackPopupMenu
GetWindow
GetCursorPos
CreateIcon
GetPropA
GetDC
CallWindowProcA
GetMenuItemInfoA
GetMenuState
SetWindowLongA
CharLowerBuffA
GetClipboardData
GetScrollRange
CreateMenu
GetScrollPos
EnumChildWindows
DrawEdge
DispatchMessageA
DefFrameProcA
GetDesktopWindow
ntdll
wcscat
atol
msvcrt
rand
atol
tolower
calloc
memmove
sqrt
wcstol
memcpy
_acmdln
wcschr
swprintf
srand
mbstowcs
sprintf
advapi32
GetUserNameA
RegEnumValueA
RegCreateKeyA
oleaut32
RegisterTypeLib
SysAllocStringLen
SafeArrayGetElement
SysReAllocStringLen
VariantCopyInd
SysStringLen
GetErrorInfo
SafeArrayGetUBound
VariantChangeType
version
GetFileVersionInfoSizeA
VerInstallFileA
VerQueryValueA
Sections
text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ