Static task
static1
Behavioral task
behavioral1
Sample
6d3347e1db081fd666cc1346aa286ce78e324db3cd4674c6a8c6e29ab822a3ce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d3347e1db081fd666cc1346aa286ce78e324db3cd4674c6a8c6e29ab822a3ce.exe
Resource
win10v2004-20220812-en
General
-
Target
6d3347e1db081fd666cc1346aa286ce78e324db3cd4674c6a8c6e29ab822a3ce
-
Size
214KB
-
MD5
a0ad2c452adfc02e447143273f53e020
-
SHA1
22abfcfef47c42fee0d5c77e593de8b589e61ee5
-
SHA256
6d3347e1db081fd666cc1346aa286ce78e324db3cd4674c6a8c6e29ab822a3ce
-
SHA512
c0288762c76997edc80088943b613a41f7437f3f3d187fabfcba3cea38428398c105fd418896e8654d0f517f9bfea85adbfdc9d618e397f654ddaa78e4971481
-
SSDEEP
3072:Eiv7hQFF7mgOwfgpwxWtgoE4Funtswz8DA7P6VVqejiV/8pjccTTnx/FN:pv9QFpmgGiOOn+wOA7gqeiV/44Uxt
Malware Config
Signatures
Files
-
6d3347e1db081fd666cc1346aa286ce78e324db3cd4674c6a8c6e29ab822a3ce.exe windows x86
7b4075d27700e5508750edc6cdc78137
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileExW
RemoveDirectoryW
GetOEMCP
ConnectNamedPipe
CompareStringA
FindAtomW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetProcAddress
GetUserDefaultLangID
LoadLibraryA
EnumCalendarInfoW
GetCurrentDirectoryA
OpenProcess
SleepEx
IsValidLocale
GetEnvironmentVariableA
EnumCalendarInfoA
EnumTimeFormatsW
GetACP
GetExpandedNameA
GetCPInfo
ExpandEnvironmentStringsW
CreateNamedPipeW
GlobalFindAtomA
GetExitCodeThread
GetCurrentProcess
BeginUpdateResourceA
MoveFileW
CreateSemaphoreA
BeginUpdateResourceW
GetFullPathNameA
GetDateFormatW
CreateMailslotA
lstrcpyA
CreateNamedPipeA
GetExpandedNameW
GetTempFileNameW
ReplaceFileW
GetCurrentThread
lstrcpy
SetCurrentDirectoryW
GetSystemDirectoryW
user32
SendDlgItemMessageW
IsChild
CopyRect
EnableMenuItem
CreateDialogIndirectParamW
GetClassInfoA
CreateDesktopW
EnumWindows
GetDesktopWindow
SetWindowLongW
RemoveMenu
ShowCaret
SetMenu
LoadMenuW
DestroyWindow
CheckMenuRadioItem
CreateWindowExW
wsprintfA
ArrangeIconicWindows
EnumClipboardFormats
PostQuitMessage
IsWindowEnabled
LoadMenuIndirectA
BringWindowToTop
DefWindowProcA
GetCursorPos
PostMessageA
SetWindowTextA
CharNextW
GetAsyncKeyState
DefFrameProcW
SetDlgItemInt
GetForegroundWindow
GetDlgItem
SetTimer
LoadBitmapA
SetWindowRgn
GetKeyboardLayout
LoadCursorA
SetWindowPos
MessageBeep
GetCapture
MonitorFromWindow
GetSystemMetrics
EnumChildWindows
CreateDialogParamW
GetTopWindow
GetDlgItemInt
gdi32
GetOutlineTextMetricsW
GetPixel
SetPolyFillMode
CreateMetaFileW
SetTextCharacterExtra
RemoveFontResourceA
GetCharacterPlacementW
GetEnhMetaFileDescriptionA
GetCharWidthI
StrokeAndFillPath
PatBlt
CreateDCA
SetPixel
SetEnhMetaFileBits
GetTextCharacterExtra
PtInRegion
GetRegionData
UnrealizeObject
GetDeviceCaps
GetTextExtentExPointI
FillPath
advapi32
RegOpenKeyA
RegOpenKeyA
RegDeleteKeyW
RegSaveKeyA
RegQueryValueW
RegRestoreKeyW
RegDeleteValueA
RegQueryInfoKeyW
shlwapi
StrPBrkW
PathUndecorateW
StrChrNW
StrStrNW
StrStrA
SHRegSetPathW
AssocQueryStringW
SHCopyKeyA
StrStrNIW
PathSearchAndQualifyA
SHRegGetBoolUSValueW
GetMenuPosFromID
StrRChrA
comctl32
ImageList_Destroy
GetEffectiveClientRect
LBItemFromPt
CreateToolbar
opengl32
glTexCoord4f
glLightModeli
glClearIndex
glRasterPos4s
glArrayElement
glVertex3d
glCopyTexImage2D
setupapi
CM_Create_DevNodeW
SetupDecompressOrCopyFileA
CM_Get_First_Log_Conf_Ex
SetupQueryInfOriginalFileInformationA
CM_Get_Global_State
pSetupStringTableDestroy
CM_Request_Device_Eject_ExA
SetupDiRemoveDevice
pSetupSetGlobalFlags
CM_Add_ID_ExA
Sections
.jOpoQ Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.IUUT Size: 5KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JhGQ Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.VyIb Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.aGbxcx Size: 2KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.QieU Size: 4KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.f Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ADzKs Size: 3KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ