Static task
static1
Behavioral task
behavioral1
Sample
6a9c351d52181876929e37bac8ca896afa80d53dea782b15a277a10101b4b062.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a9c351d52181876929e37bac8ca896afa80d53dea782b15a277a10101b4b062.exe
Resource
win10v2004-20220812-en
General
-
Target
6a9c351d52181876929e37bac8ca896afa80d53dea782b15a277a10101b4b062
-
Size
216KB
-
MD5
52ce6ff3168006d05079f17ee8597070
-
SHA1
ce92e28b08bd806f606d55247bf042943fa0bfe3
-
SHA256
6a9c351d52181876929e37bac8ca896afa80d53dea782b15a277a10101b4b062
-
SHA512
cb6ad53badc4b557730fa2e6eb9490444893c2d09f401df66d6ac853c3dd622e65ac06b184e7803c340f48af269f1dae09ea6a91902e09de10ea467b61ab4d66
-
SSDEEP
3072:ugp3fgpGbf/v4F+ltq0f+BhffuJXEA9tZrESl//YZOrgH7QUx1Lpota/vKFq5gLg:uRGbf/v4iq0feM3tZrdJXePxVF/yUSA
Malware Config
Signatures
Files
-
6a9c351d52181876929e37bac8ca896afa80d53dea782b15a277a10101b4b062.exe windows x86
1d40d9070ebe087c5956f239964438ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterDeviceNotificationA
SetTimer
GetActiveWindow
SetScrollInfo
GetSystemMetrics
GetWindowRect
SetWindowPos
EndDialog
MessageBoxA
LoadMenuA
CreateMenu
SetMenu
SetWindowTextA
DialogBoxParamA
PostMessageA
RegisterWindowMessageA
FindWindowA
LoadIconA
LoadCursorA
RegisterClassA
ShowWindow
UnregisterDeviceNotification
GetWindowTextA
GetDC
ReleaseDC
GetClientRect
GetWindowLongA
ScrollWindow
SetScrollPos
SendMessageA
PeekMessageA
UpdateWindow
GetClassNameA
DispatchMessageA
EnumWindows
SetWindowsHookExA
UnhookWindowsHookEx
CreateWindowExA
IsWindow
GetMessageA
TranslateMessage
PostQuitMessage
DefWindowProcA
KillTimer
gdi32
DeleteObject
CreateCompatibleDC
CreatePalette
SelectPalette
SelectObject
CreateBitmap
SetDIBits
RealizePalette
BitBlt
DeleteDC
CreateDIBitmap
GetTextMetricsA
comdlg32
GetSaveFileNameA
advapi32
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
setupapi
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA
SetupDiChangeState
SetupDiOpenDevRegKey
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
winmm
sndPlaySoundA
kernel32
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
GetEnvironmentStrings
TerminateProcess
WriteFile
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStdHandle
GetEnvironmentStringsW
IsBadReadPtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
SetHandleCount
FlushFileBuffers
GetFileType
ReadFile
SetUnhandledExceptionFilter
SetStdHandle
SetFilePointer
WideCharToMultiByte
IsBadCodePtr
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetModuleHandleA
GetCPInfo
GetACP
GetOEMCP
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetStringTypeA
GetStringTypeW
GetPrivateProfileStringA
LoadLibraryA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetWindowsDirectoryA
CreateProcessA
CreateFileA
GetLastError
SetConsoleCtrlHandler
RtlUnwind
HeapFree
GetLocalTime
CreateThread
TerminateThread
ExitThread
FreeLibrary
GetProcAddress
ResetEvent
GetSystemDirectoryA
lstrcatA
lstrcpyA
GetVersionExA
Sleep
GetPrivateProfileIntA
CloseHandle
CreateEventA
SetEvent
WaitForSingleObject
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
emmqbzo Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE