Static task
static1
Behavioral task
behavioral1
Sample
6f3f5b70c8b55112224c7fd4bb970d6ce3ceb95e79768b33bb6ae6340c0b39af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6f3f5b70c8b55112224c7fd4bb970d6ce3ceb95e79768b33bb6ae6340c0b39af.exe
Resource
win10v2004-20220812-en
General
-
Target
6f3f5b70c8b55112224c7fd4bb970d6ce3ceb95e79768b33bb6ae6340c0b39af
-
Size
781KB
-
MD5
920904e0f34e7c3b5669f437bd11aa90
-
SHA1
090d86b0c79afb8df81fe439c0e5618bfe4f4c32
-
SHA256
6f3f5b70c8b55112224c7fd4bb970d6ce3ceb95e79768b33bb6ae6340c0b39af
-
SHA512
08746a0e30329e1044906c8df4dc5742ac18473c15fbad62cb904ef90076f744bb5600c82d8cc15371b2bd7b20409cd77e4dcc7c9f7849bd0e4c39dc65b041a2
-
SSDEEP
12288:B3k02GQzhNQ32ihbTs3KfsOGVAyftxXxW1Tib3sq1/O3ghQ8SxbEuKw4rrQg9auK:B00g1qxeKaLlxhWt68q1/O38d3d
Malware Config
Signatures
Files
-
6f3f5b70c8b55112224c7fd4bb970d6ce3ceb95e79768b33bb6ae6340c0b39af.exe windows x86
2eb0bb167a99e7c81901bbd735058311
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleA
SetStdHandle
RaiseException
GetConsoleMode
GetConsoleCP
SetFilePointer
CopyFileW
CreateDirectoryW
GetModuleFileNameW
GetConsoleOutputCP
WaitForSingleObject
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapValidate
IsBadReadPtr
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleW
Sleep
InterlockedIncrement
InterlockedDecrement
GetProcAddress
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetModuleFileNameA
WriteFile
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
user32
KillTimer
SetTimer
DefWindowProcW
BeginPaint
PostQuitMessage
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
EndPaint
advapi32
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shell32
SHGetSpecialFolderPathW
ShellExecuteExW
shlwapi
PathFileExistsW
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 592KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE