Static task
static1
Behavioral task
behavioral1
Sample
a6c63750f08716a87fbd12cbcf8bd89ff31fc34132228c69873d7649db988a0f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6c63750f08716a87fbd12cbcf8bd89ff31fc34132228c69873d7649db988a0f.exe
Resource
win10v2004-20220812-en
General
-
Target
a6c63750f08716a87fbd12cbcf8bd89ff31fc34132228c69873d7649db988a0f
-
Size
391KB
-
MD5
96621cd71f13dc34dbdd1209802f67a0
-
SHA1
882e41bb81a54ea84b86c5c3ecc9cb7808035939
-
SHA256
a6c63750f08716a87fbd12cbcf8bd89ff31fc34132228c69873d7649db988a0f
-
SHA512
81ba461fcb0dbc6fc1ccbc9310d684b2c69833f1eb684d333839b517279fe4902a3d2bba19990db783f1d63e671336ddbe5555a89dc8e862acf7882f69914e99
-
SSDEEP
6144:OXryAQ5SSgXy28nUhoWJo7xGnryAQ5SSgXy28nUhoWJo7xG:OXeAQ5r3QoIeAQ5r3Qo
Malware Config
Signatures
Files
-
a6c63750f08716a87fbd12cbcf8bd89ff31fc34132228c69873d7649db988a0f.exe windows x86
5791516838f9ab1d2f68a96e97931db1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoSetProxyBlanket
shell32
SHGetSpecialFolderPathA
shlwapi
wvnsprintfA
StrChrA
StrStrA
wvnsprintfW
kernel32
GetStringTypeW
ResumeThread
SetWaitableTimer
GetWriteWatch
GlobalReAlloc
SetFileShortNameA
GetTimeFormatA
GetSystemWindowsDirectoryA
VirtualFree
LoadResource
GetExitCodeThread
LocalFlags
GetShortPathNameW
GetFullPathNameA
GetStdHandle
WriteProfileSectionA
SetComputerNameA
GetFileAttributesExW
GetNamedPipeInfo
TlsAlloc
CreateIoCompletionPort
OpenProcess
GetCommProperties
GetTimeFormatW
LockFile
FindNextFileW
WaitForMultipleObjectsEx
SetStdHandle
HeapFree
HeapCompact
LocalReAlloc
GetSystemTime
HeapSize
GetLogicalDrives
FileTimeToDosDateTime
CreatePipe
GetProfileStringA
HeapUnlock
GetProfileSectionA
GetFileSizeEx
ResetWriteWatch
GetPrivateProfileSectionW
GetSystemRegistryQuota
SystemTimeToFileTime
CreateWaitableTimerW
GetProcessTimes
VirtualAllocEx
RequestDeviceWakeup
GetWindowsDirectoryA
RequestWakeupLatency
GetModuleFileNameA
TerminateProcess
GetCurrencyFormatA
CreateFiber
GlobalWire
GetQueuedCompletionStatus
LocalLock
CommConfigDialogA
GetModuleFileNameW
ReplaceFileA
GetSystemInfo
RemoveDirectoryA
WaitForMultipleObjects
GlobalSize
GetSystemDirectoryW
CancelIo
GetFileType
CreateFiberEx
Module32First
SetVolumeLabelA
OutputDebugStringW
OpenEventW
CopyFileW
DeleteVolumeMountPointW
GetSystemWindowsDirectoryW
Process32First
TerminateThread
CreateTimerQueue
VirtualLock
SetCommConfig
GetDiskFreeSpaceW
SetLocalTime
SetCurrentDirectoryW
DeleteTimerQueue
TlsGetValue
GlobalFree
EnumResourceNamesW
FindClose
GetFileAttributesExA
WritePrivateProfileSectionW
GetExitCodeProcess
SetCommBreak
InitializeCriticalSection
Module32FirstW
GetLocaleInfoW
GetCommTimeouts
VirtualProtectEx
CreateRemoteThread
WriteProfileStringA
CreateNamedPipeA
GetWindowsDirectoryW
Module32NextW
GetProfileIntW
MoveFileExA
LocalUnlock
GetOverlappedResult
ReleaseSemaphore
WideCharToMultiByte
GetModuleHandleExA
GetPrivateProfileIntW
WritePrivateProfileStructW
FindResourceExA
GetStartupInfoA
WritePrivateProfileStructA
CreateDirectoryExW
IsDebuggerPresent
SetLocaleInfoW
Process32Next
SetVolumeMountPointA
GetCommState
Thread32First
Process32FirstW
TerminateJobObject
Heap32ListNext
UpdateResourceW
GetProcessHeaps
GetTempPathA
GetCurrentActCtx
GetPrivateProfileStringW
SizeofResource
QueryPerformanceCounter
LocalAlloc
GetCurrentProcessId
GetCurrentDirectoryW
WriteProfileStringW
VirtualProtect
GetProcessId
ReadFile
DeleteTimerQueueTimer
WritePrivateProfileSectionA
GetFileSize
SwitchToFiber
OpenWaitableTimerW
GetDefaultCommConfigA
CancelWaitableTimer
GetModuleHandleA
GetVersionExA
FlushInstructionCache
GetCurrentProcess
UnhandledExceptionFilter
VirtualAlloc
GetVolumeInformationA
GetCurrentThreadId
CloseHandle
DeviceIoControl
CreateFileW
Sleep
PostQueuedCompletionStatus
GetProfileSectionW
GetCommandLineW
WaitForDebugEvent
GetTickCount
CreateFileMappingW
ExitProcess
MultiByteToWideChar
lstrlenW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrcmpiA
IsDBCSLeadByte
FreeLibrary
FindResourceA
LoadLibraryExA
LoadLibraryA
lstrcmpA
LockResource
SetLastError
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
WriteFile
HeapReAlloc
HeapCreate
SetUnhandledExceptionFilter
TlsFree
TlsSetValue
GetStartupInfoW
HeapSetInformation
GetCommandLineA
VirtualQuery
GetModuleHandleW
EncodePointer
DecodePointer
RtlUnwind
InterlockedPopEntrySList
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedCompareExchange
ClearCommError
Process32NextW
CreateNamedPipeW
QueueUserAPC
SetFileAttributesW
UnlockFile
LoadModule
SetSystemTimeAdjustment
ReadProcessMemory
WaitForSingleObjectEx
GetUserGeoID
lstrcmpiW
lstrcpynA
lstrcpyA
lstrcatA
GetProcessHeap
HeapAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryW
WriteConsoleW
FlushFileBuffers
FlushViewOfFile
MoveFileW
LCMapStringW
user32
LoadBitmapA
CreatePopupMenu
AppendMenuA
RemoveMenu
SetMenuDefaultItem
SetWindowPos
CheckMenuRadioItem
GetDC
MonitorFromWindow
GetWindow
EndDialog
DialogBoxParamA
CallNextHookEx
GetKeyState
CharLowerA
UnhookWindowsHookEx
InflateRect
SystemParametersInfoA
SetRectEmpty
GetSystemMetrics
RegisterWindowMessageA
GetSysColorBrush
GetSysColor
ReleaseDC
GetWindowDC
TrackPopupMenuEx
GetMessagePos
WindowFromPoint
MessageBeep
DrawEdge
FrameRect
ModifyMenuA
MonitorFromPoint
GetMonitorInfoA
DrawFrameControl
DrawTextA
GetFocus
SetMenuItemInfoA
SetTimer
GetMenuItemID
SetMenu
LoadStringW
GetSubMenu
PtInRect
IsMenu
SetWindowsHookExA
GetMenuItemCount
FillRect
GetActiveWindow
GetWindowThreadProcessId
GetParent
SetFocus
IsWindowEnabled
IsWindowVisible
InvalidateRect
UpdateWindow
MapWindowPoints
ScreenToClient
GetClientRect
PostMessageA
SendMessageA
LoadStringA
LoadMenuA
LoadAcceleratorsA
DestroyMenu
CreateWindowExA
EndPaint
BeginPaint
CallWindowProcA
DestroyWindow
GetClassInfoExA
LoadCursorA
LoadImageA
RegisterClassExA
CharNextA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
IsWindow
ShowWindow
GetWindowLongA
SetWindowLongA
UnregisterClassA
PostQuitMessage
GetWindowRect
TranslateAcceleratorA
GetMenu
KillTimer
GetClassNameA
GetMenuItemInfoA
OffsetRect
gdi32
GetStockObject
GetCurrentObject
CreateDIBSection
CreatePatternBrush
CreateBitmap
PatBlt
SetBkColor
SetBrushOrgEx
SetTextColor
SetBkMode
CreateFontIndirectA
GetObjectA
CreateCompatibleBitmap
BitBlt
SelectObject
CreateCompatibleDC
DeleteObject
DeleteDC
advapi32
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryInfoKeyW
RegEnumKeyExA
RegOpenKeyExA
oleaut32
VarUI4FromStr
SysAllocString
VariantClear
VariantInit
SysFreeString
comctl32
ImageList_GetImageCount
InitCommonControlsEx
ImageList_Draw
ImageList_DrawIndirect
ord6
ord8
ImageList_Create
ImageList_LoadImageA
ImageList_AddMasked
ImageList_Destroy
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ