Static task
static1
Behavioral task
behavioral1
Sample
06c9d5d66bb6c1549eda41ff70829068c832e085db299dabaa6580f540b0730e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06c9d5d66bb6c1549eda41ff70829068c832e085db299dabaa6580f540b0730e.exe
Resource
win10v2004-20220812-en
General
-
Target
06c9d5d66bb6c1549eda41ff70829068c832e085db299dabaa6580f540b0730e
-
Size
346KB
-
MD5
a01d0b4265a88728136c1100af869b90
-
SHA1
2616041c9f71e8383dfa41405db6b09a6db9f195
-
SHA256
06c9d5d66bb6c1549eda41ff70829068c832e085db299dabaa6580f540b0730e
-
SHA512
bb14b105dc95ebb7f06e6e07aa0c2934c2231e89a79b52cff98efdea5a64f03e703067f73fc9366bc393446dec2e1f6bc67fb1f2f065f2f71ea1d69fdb9e9c07
-
SSDEEP
6144:aHCmQbAF2mZMWpYfZNBnCp/lXkczUpCc/a9y9Qf8L010hgPCKVia:AbQxCp/NkwUpCD9y9QAmia
Malware Config
Signatures
Files
-
06c9d5d66bb6c1549eda41ff70829068c832e085db299dabaa6580f540b0730e.exe windows x86
7fd91ce804144e2dbf63aa6a6d99b1e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
WriteConsoleW
SetStdHandle
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LoadLibraryW
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
Sleep
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
CreateFileW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
InterlockedDecrement
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DecodePointer
IsProcessorFeaturePresent
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapFree
RtlUnwind
RaiseException
CloseHandle
GetCurrentDirectoryA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsA
CreateActCtxA
GetConsoleWindow
HeapCreate
GetNumberFormatW
lstrcatW
FormatMessageA
LocalFree
HeapAlloc
GetCurrentThreadId
lstrcpyW
GetCurrentDirectoryW
lstrlenW
SetConsoleTitleA
GetLastError
SetHandleCount
FlushFileBuffers
user32
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
GetClassLongW
LoadCursorW
CreateWindowExA
AllowSetForegroundWindow
SendMessageA
LoadIconA
LoadCursorA
RegisterClassExA
CreateDialogParamA
ShowWindow
UpdateWindow
GetWindowRect
MonitorFromRect
SetDlgItemTextA
GetDlgItemTextA
wsprintfA
GetDlgItem
SetWindowLongA
EndDialog
IsIconic
GetClientRect
InvalidateRect
ScreenToClient
GetDC
MoveWindow
GetSystemMetrics
GetSystemMenu
GetWindowLongW
DialogBoxParamW
SetWindowPos
CheckMenuItem
SetTimer
LoadIconW
SetClassLongW
SetCursor
ChildWindowFromPointEx
GetDlgCtrlID
SendMessageW
wsprintfW
SetDlgItemTextW
IsDlgButtonChecked
SendDlgItemMessageA
CheckDlgButton
RegisterClassA
BeginPaint
EndPaint
DefWindowProcA
CreateMenu
LoadImageW
SetMenuItemBitmaps
SetMenu
CheckRadioButton
PostQuitMessage
PostMessageA
GetWindowThreadProcessId
GetWindowLongA
GetWindow
IsWindowVisible
GetKeyState
SetFocus
CallWindowProcA
GetDlgItemTextW
EnableWindow
GetDialogBaseUnits
AppendMenuW
gdi32
CreatePen
GetStockObject
GetObjectA
CreateFontIndirectA
SelectObject
MoveToEx
LineTo
SetBkColor
ExtTextOutA
CreateBitmapIndirect
DeleteObject
Rectangle
SaveDC
CreateFontA
GetObjectW
CreateFontIndirectW
RestoreDC
comdlg32
ChooseFontA
GetOpenFileNameW
shell32
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
ole32
OleUninitialize
OleGetClipboard
OleInitialize
CoTaskMemFree
msimg32
GradientFill
shlwapi
PathQuoteSpacesW
PathRemoveFileSpecW
SHAutoComplete
ord14
opengl32
glClear
glColor3f
glRectf
imm32
ImmGetDefaultIMEWnd
rasdlg
RasDialDlgA
snmpapi
SnmpUtilMemAlloc
Sections
.text Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ