Static task
static1
Behavioral task
behavioral1
Sample
6126bd923b8b7b7cd23678df974331b36abd3a1642ac0b3a169739b7e06283bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6126bd923b8b7b7cd23678df974331b36abd3a1642ac0b3a169739b7e06283bb.exe
Resource
win10v2004-20220812-en
General
-
Target
6126bd923b8b7b7cd23678df974331b36abd3a1642ac0b3a169739b7e06283bb
-
Size
182KB
-
MD5
47eff2fb3071c19d0d1cd753b7ca1720
-
SHA1
448aaaab16afb1c2190a0350a4bfe42af62232e0
-
SHA256
6126bd923b8b7b7cd23678df974331b36abd3a1642ac0b3a169739b7e06283bb
-
SHA512
f26d8e02096c494f2f76862c656256dbf9393fb3c8d1197723307c00cae1fd29488841892137e6ebf45b522ea82a5deb171c6d62c6be6ede6037454ad82f95a7
-
SSDEEP
3072:CClk7Thxuj5iuTLWsFQPENfOg5sQfDSyKB9v5GDyTCkuZAQ4bXIS:5SOj5iRREpbQ9AyTCku+Q4TIS
Malware Config
Signatures
Files
-
6126bd923b8b7b7cd23678df974331b36abd3a1642ac0b3a169739b7e06283bb.exe windows x86
f3f540b50cb791ade4d20e67247342a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
tapi32
lineGetCountryW
lineGetTranslateCapsW
shlwapi
StrCatW
StrCmpIW
StrTrimW
StrPBrkW
StrRChrW
PathMakeSystemFolderW
kernel32
GetCurrentProcess
GetProcAddress
GetModuleHandleW
GetLocaleInfoW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetPrivateProfileSectionW
GetGeoInfoW
GetEnvironmentVariableW
GetFileAttributesW
GetModuleFileNameW
TzSpecificLocalTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
FileTimeToSystemTime
FindClose
FindFirstFileW
GetPrivateProfileStringW
CloseHandle
WaitForSingleObject
CopyFileW
WritePrivateProfileStringW
MultiByteToWideChar
lstrlenW
LocalAlloc
GetLastError
GetUserGeoID
GlobalMemoryStatus
EnumUILanguagesW
GetVersionExW
GetUserDefaultLangID
WriteFile
ReadFile
CreateFileW
CreateProcessW
CreatePipe
lstrlenA
GetCurrentDirectoryW
CreateDirectoryW
GetPrivateProfileIntW
GlobalFree
GlobalAlloc
FindNextFileW
GetTimeFormatW
GetDateFormatW
GetLocalTime
SetCurrentDirectoryW
GetLongPathNameW
GetTickCount
FormatMessageW
LocalFree
GetStringTypeW
GetLocaleInfoA
HeapSize
SetStdHandle
GetUserDefaultUILanguage
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
FlushFileBuffers
GetConsoleCP
SetFilePointer
CreateFileA
LoadLibraryA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
RtlUnwind
HeapFree
HeapAlloc
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
user32
GetSystemMetrics
advapi32
RegUnLoadKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegEnumValueW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegLoadKeyW
shell32
SHSetLocalizedName
ShellExecuteW
SHFileOperationW
SHGetFolderPathW
ShellExecuteExW
SHChangeNotify
ole32
CoCreateGuid
StringFromCLSID
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromProgID
oleaut32
SysAllocString
VariantInit
VariantClear
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE