Static task
static1
Behavioral task
behavioral1
Sample
6dfd4e5ef8bbc646c769299928206ad77ba757e78a7dc97280015e40f61639ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6dfd4e5ef8bbc646c769299928206ad77ba757e78a7dc97280015e40f61639ca.exe
Resource
win10v2004-20220812-en
General
-
Target
6dfd4e5ef8bbc646c769299928206ad77ba757e78a7dc97280015e40f61639ca
-
Size
311KB
-
MD5
06c158fad6548e6a6a29d810431ec297
-
SHA1
64dad77c37bd19fa1c99f4adc2261d09b7bd2f1b
-
SHA256
6dfd4e5ef8bbc646c769299928206ad77ba757e78a7dc97280015e40f61639ca
-
SHA512
020f952d86c978e8a9a3a27a1ab24d497d45fb2fecb8616658e607285ef18aaa6c5bd30cc2b2cd81923261a63ee9b3092b3527ed5e7325c4fe99a82a52d81e89
-
SSDEEP
3072:zT4K19ex1R4YTctE4HG8KaLoBnTVqA7uGJUkr54usP+xKp2w+4usO:HlOjR4OctEt8K2oBTVD17Q+0wb79
Malware Config
Signatures
Files
-
6dfd4e5ef8bbc646c769299928206ad77ba757e78a7dc97280015e40f61639ca.exe windows x86
1be3865d29582e2e095772f57e01ab94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TabbedTextOutA
AnyPopup
WinHelpW
MsgWaitForMultipleObjects
GetClassInfoExA
DialogBoxParamW
CharToOemA
CharToOemBuffA
CharUpperA
CopyRect
CreateWindowExA
DefWindowProcA
DestroyIcon
DestroyWindow
DialogBoxParamA
DispatchMessageA
EnableWindow
EndDialog
FindWindowExA
GetClassNameA
GetClientRect
GetDlgItem
GetDlgItemTextA
GetMessageA
GetParent
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongA
GetWindowRect
GetWindowTextA
IsWindowVisible
LoadBitmapA
LoadCursorA
LoadIconA
LoadStringA
MapWindowPoints
MessageBoxA
OemToCharA
OemToCharBuffA
PeekMessageA
PostMessageA
RegisterClassExA
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetMenu
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow
WaitForInputIdle
wsprintfA
wvsprintfA
CallMsgFilterA
EnumDesktopsA
GetInputState
GetWindowRgn
CreateCursor
SubtractRect
IsDialogMessageA
IsWindow
ole32
CreateStreamOnHGlobal
CoCreateInstance
CLSIDFromString
OleInitialize
OleUninitialize
opengl32
glTexGenf
glTexCoord3s
glMatrixMode
glLineWidth
glCallLists
glTexCoord3fv
wglUseFontOutlinesA
kernel32
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
ResumeThread
GlobalAddAtomW
GetCurrentProcessId
WritePrivateProfileStringW
RaiseException
FreeResource
GetVersionExA
LoadLibraryA
CompareStringW
GlobalFindAtomW
GetModuleHandleA
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
MoveFileW
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetFullPathNameW
FileTimeToSystemTime
lstrlenA
FileTimeToLocalFileTime
GetFileTime
HeapFree
HeapAlloc
ConvertDefaultLocale
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetFileAttributesA
GetTempPathA
LockFileEx
GetFullPathNameA
OutputDebugStringA
PulseEvent
CreateEventA
QueryPerformanceFrequency
GetLogicalDrives
GetStringTypeExA
CreateMutexA
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
lstrcmpW
GlobalDeleteAtom
GetModuleHandleW
GlobalFree
GlobalAlloc
MulDiv
SetFilePointer
SetFilePointerEx
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemDirectoryW
CreateProcessW
GetExitCodeProcess
FindResourceW
GlobalLock
GlobalUnlock
LocalAlloc
DeleteFileA
SetEnvironmentVariableA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetDateFormatA
GetTimeFormatA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
LCMapStringW
LCMapStringA
Sleep
GetOEMCP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
HeapSize
VirtualQuery
VirtualAlloc
VirtualProtect
CreateThread
ExitThread
ExitProcess
GetSystemTimeAsFileTime
GetFileType
SetStdHandle
HeapReAlloc
SetTapeParameters
SetInformationJobObject
GetVolumeNameForVolumeMountPointA
GetAtomNameW
ReadProcessMemory
GetDiskFreeSpaceA
AllocConsole
GetProcessHeap
GetCurrentDirectoryA
SetEnvironmentVariableW
ReleaseSemaphore
CreateSemaphoreA
GetShortPathNameW
CloseHandle
GetFileSizeEx
CreateFileW
CopyFileW
FlushFileBuffers
WriteFile
GetSystemTime
GetLastError
CreateMutexW
WideCharToMultiByte
GetACP
MultiByteToWideChar
lstrlenW
GetDiskFreeSpaceExW
GetDriveTypeW
GetFileAttributesW
DeleteFileW
SetFileAttributesW
SetCurrentDirectoryW
GetVolumeInformationW
SetErrorMode
lstrcpyW
GetCurrentDirectoryW
GetTempPathW
ReadFile
GetFileSize
GetDriveTypeA
GetLogicalDriveStringsA
FindClose
FindNextFileW
FindFirstFileW
FreeLibrary
GetUserDefaultLCID
LockResource
LoadResource
FindResourceExW
LoadLibraryW
GetModuleFileNameW
ReleaseMutex
SetLastError
GetUserDefaultLangID
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
Thread32Next
Thread32First
Process32NextW
OpenProcess
Process32FirstW
GetTempFileNameW
SizeofResource
GetThreadLocale
LocalFree
GetCurrentProcess
GetCurrentThread
GetVersionExW
FormatMessageW
lstrcatW
GetFileAttributesExW
FreeConsole
GetConsoleWindow
GetProcAddress
GetCommandLineW
GetStdHandle
GlobalMemoryStatusEx
IsProcessorFeaturePresent
GetSystemInfo
GetSystemWindowsDirectoryW
GetLogicalDriveStringsW
CreateDirectoryW
GetTickCount
RemoveDirectoryW
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ