Static task
static1
Behavioral task
behavioral1
Sample
6a5356288263e076336e6e96c5a4920e98ec325df168dc55d33b5a2bf972a35a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a5356288263e076336e6e96c5a4920e98ec325df168dc55d33b5a2bf972a35a.exe
Resource
win10v2004-20220812-en
General
-
Target
6a5356288263e076336e6e96c5a4920e98ec325df168dc55d33b5a2bf972a35a
-
Size
372KB
-
MD5
54f54e9bdcb18f5135aa9798d04121d3
-
SHA1
870e3b11ac1bae8a2218a7725bb79953d91e8bae
-
SHA256
6a5356288263e076336e6e96c5a4920e98ec325df168dc55d33b5a2bf972a35a
-
SHA512
85eb14c29d4dbe221403085f574eca2d704bb49cc87e9fa86c1a4d379372c5324d2f09871f7b49e504cd41d9e17654e300a9bf43f5f273e86aa7c3bbc43be9af
-
SSDEEP
6144:sWO0MTTkD4hZVOCr+Tb/1NmtkZYu9KgEO2oU7PV6ENyUyXyyMj9zTwnHtuqWlYmU:sWO0MXkaZVOCr+TbK7P4EUNCyMj9nqHJ
Malware Config
Signatures
Files
-
6a5356288263e076336e6e96c5a4920e98ec325df168dc55d33b5a2bf972a35a.exe windows x86
f6ff2f907360c93e34df1fab444b8eaa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupGetFieldCount
SetupGetIntField
SetupDiDestroyDeviceInfoList
SetupDiGetINFClassA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupFindFirstLineA
SetupGetLineCountA
SetupGetLineByIndexA
SetupGetStringFieldA
SetupGetLineTextA
SetupOpenInfFileA
SetupCloseInfFile
SetupGetSourceInfoA
SetupOpenFileQueue
SetupQueueCopyA
SetupInitDefaultQueueCallback
SetupDefaultQueueCallbackA
SetupCommitFileQueueA
SetupTermDefaultQueueCallback
SetupCloseFileQueue
SetupGetFileCompressionInfoA
cfgmgr32
CM_Get_DevNode_Status
kernel32
RemoveDirectoryA
DeleteFileA
MoveFileExA
lstrlenA
IsDBCSLeadByte
lstrcpynA
lstrcpyA
OutputDebugStringA
CreateFileA
MoveFileA
FindClose
FindFirstFileA
GetModuleFileNameA
GetWindowsDirectoryA
GetCommandLineA
CloseHandle
WriteFile
FormatMessageA
GetCurrentThreadId
GetFileAttributesA
FindNextFileA
SetFileAttributesA
LoadLibraryA
GetExitCodeProcess
CreateProcessA
GetVersionExA
GetDiskFreeSpaceExA
GetSystemDirectoryA
GetModuleHandleA
FreeLibrary
GetSystemInfo
lstrcmpiA
CreateEventA
TerminateThread
WaitForSingleObject
SetEvent
InterlockedExchange
SetThreadPriority
ExitProcess
CreateMutexA
ReleaseMutex
OpenMutexA
GetUserDefaultLangID
GetSystemDefaultLangID
SetStdHandle
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
GetLocaleInfoA
IsBadCodePtr
IsBadReadPtr
SetFilePointer
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
ReadFile
FlushFileBuffers
CompareStringA
CompareStringW
GetLastError
Sleep
CreateThread
LocalFree
UnhandledExceptionFilter
GetStdHandle
HeapSize
RtlUnwind
MultiByteToWideChar
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
HeapReAlloc
GetTimeZoneInformation
GetSystemTimeAsFileTime
RaiseException
VirtualProtect
VirtualAlloc
VirtualQuery
LCMapStringA
WideCharToMultiByte
GetProcAddress
SetEnvironmentVariableA
GetEnvironmentStrings
LCMapStringW
user32
GetWindowTextA
CharPrevA
DispatchMessageA
TranslateMessage
PeekMessageA
LoadStringA
PostMessageA
FindWindowA
SendMessageA
DestroyWindow
DialogBoxParamA
CharNextA
winspool.drv
GetPrinterDriverDirectoryA
EnumPortsA
EnumPrinterDriversA
advapi32
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 4KB - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE