Static task
static1
Behavioral task
behavioral1
Sample
6bc9a5ba861a1b03f2edcba3a19e2b13c023b35090c7f921fe5b60485932277b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6bc9a5ba861a1b03f2edcba3a19e2b13c023b35090c7f921fe5b60485932277b.exe
Resource
win10v2004-20220812-en
General
-
Target
6bc9a5ba861a1b03f2edcba3a19e2b13c023b35090c7f921fe5b60485932277b
-
Size
140KB
-
MD5
561f9f5b5796ff0c3064f35f9e171330
-
SHA1
323ad72c45546ce0f14029a71401a485c6f47197
-
SHA256
6bc9a5ba861a1b03f2edcba3a19e2b13c023b35090c7f921fe5b60485932277b
-
SHA512
a18b59fd8a95b6ed811bd8389f13ce78cbec4513e713a0d0eb8699c074e2197510a184c97336ecd5bb6325207d4dfe6343e6783b642e6679cfa5106c0e6ef6ca
-
SSDEEP
3072:3Qx7ehVicKtZAcprCbFkSqnLOLHn+JtHnWxwQ34KC:+7eKcKtZAcpO2S5+zcvI
Malware Config
Signatures
Files
-
6bc9a5ba861a1b03f2edcba3a19e2b13c023b35090c7f921fe5b60485932277b.exe windows x86
a8273abb27d430e032a5a24ffbbb79de
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetKeyState
UpdateWindow
GetDC
GetSysColorBrush
LoadIconA
GetDesktopWindow
FindWindowA
LoadCursorA
DestroyMenu
ClientToScreen
MapWindowPoints
GetSysColor
GetSystemMetrics
GetCursorPos
IsDialogMessageA
kernel32
InterlockedIncrement
QueryPerformanceCounter
UnhandledExceptionFilter
GetCurrentThreadId
GetTempPathA
GetTickCount
GetFullPathNameA
VirtualProtectEx
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
msvcrt
fread
cos
wcscspn
ctime
_exit
abort
__setusermatherr
_snprintf
__CxxFrameHandler
isspace
__initenv
oleaut32
SysReAllocStringLen
CreateErrorInfo
VariantCopyInd
SysStringLen
SysAllocStringLen
SysFreeString
ole32
OleGetClipboard
CoRegisterClassObject
CreateBindCtx
IsAccelerator
GetRunningObjectTable
advapi32
RegOpenKeyExA
RegEnumKeyExA
AddAccessAllowedAce
RegEnumKeyA
RegOpenKeyExW
CryptAcquireContextA
RegQueryInfoKeyA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE