Static task
static1
Behavioral task
behavioral1
Sample
6621457478b4753e51231f346a867d701f5b3b7687cbd52c95756616855e2294.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6621457478b4753e51231f346a867d701f5b3b7687cbd52c95756616855e2294.exe
Resource
win10v2004-20220812-en
General
-
Target
6621457478b4753e51231f346a867d701f5b3b7687cbd52c95756616855e2294
-
Size
903KB
-
MD5
c7b392ec2cc071dd681f4557237635c1
-
SHA1
6349c3b9520fbdfd819c5f8ab92872a48af30326
-
SHA256
6621457478b4753e51231f346a867d701f5b3b7687cbd52c95756616855e2294
-
SHA512
2aa847d39755d6288591c7732a17bf35302317aa26d63242073a098f9fdb10d275206d72d8cfa8ce071c9beb527b6ddd4c2ff86751d74468b4d412ffd693dae7
-
SSDEEP
12288:yyDjlA0FyP9s9GSN5MhRIi1Gll4Y+dnuvlhnDbV:yOVFyFhSH0Jduv7nPV
Malware Config
Signatures
Files
-
6621457478b4753e51231f346a867d701f5b3b7687cbd52c95756616855e2294.exe windows x86
912f2db5c746bb06effb0acef5468825
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
GetTickCount
GetCurrentProcessId
TerminateProcess
UnhandledExceptionFilter
GetModuleHandleW
Sleep
VirtualAllocEx
GetCurrentThreadId
GetCurrentProcess
user32
SetDlgItemTextA
SetForegroundWindow
SendMessageA
SetWindowPos
SetWindowTextA
ShowWindow
wsprintfA
LoadIconW
DestroyIcon
GetSysColor
EnableMenuItem
GetMenu
LoadIconA
GetSystemMetrics
SendDlgItemMessageA
ReleaseDC
PeekMessageA
MsgWaitForMultipleObjects
MessageBoxA
MessageBeep
LoadStringA
GetWindowRect
GetWindowLongA
GetDlgItemTextA
GetDlgItem
GetDesktopWindow
GetDC
ExitWindowsEx
EndDialog
EnableWindow
DispatchMessageA
DialogBoxIndirectParamA
CharUpperA
CharPrevA
CharNextA
CallWindowProcA
SetWindowLongA
gdi32
GetDeviceCaps
GetLayout
SelectObject
AddFontResourceA
DeleteDC
CreatePatternBrush
advapi32
AdjustTokenPrivileges
AllocateAndInitializeSid
EqualSid
FreeSid
GetTokenInformation
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 731KB - Virtual size: 731KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rwu0 Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ