Static task
static1
Behavioral task
behavioral1
Sample
06a8b9549c38fe2b44e9c0d43f2dc2fbe7ac8690c92714d8bd1b6d8ff86aa9d9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06a8b9549c38fe2b44e9c0d43f2dc2fbe7ac8690c92714d8bd1b6d8ff86aa9d9.exe
Resource
win10v2004-20220812-en
General
-
Target
06a8b9549c38fe2b44e9c0d43f2dc2fbe7ac8690c92714d8bd1b6d8ff86aa9d9
-
Size
436KB
-
MD5
93845eac594d0f1aaa2e64445acb8be0
-
SHA1
9c1c4e75adc52d145c17fd7d62d9f6e78e494714
-
SHA256
06a8b9549c38fe2b44e9c0d43f2dc2fbe7ac8690c92714d8bd1b6d8ff86aa9d9
-
SHA512
5ba5c9fff4641fe7f971c883d181cf38b89e1bbe6bd8c42ae7fc7e9f16237bf2d1e6040574babcba168d356d212da024c8438368618c305d263a2c83c500aaae
-
SSDEEP
12288:eazkNh3N0EYKSmokJ5a1sb2ijyDjphpKvL9:HYNh3N0LWla1sbQPFKvL9
Malware Config
Signatures
Files
-
06a8b9549c38fe2b44e9c0d43f2dc2fbe7ac8690c92714d8bd1b6d8ff86aa9d9.exe windows x86
af9329aacdac05fd9fef0384e6457c88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyW
kernel32
InterlockedDecrement
DeleteFileW
CreateDirectoryA
FileTimeToSystemTime
FindNextFileA
FindClose
ResetEvent
GetLocalTime
GetStartupInfoA
LeaveCriticalSection
GetProcAddress
GetConsoleMode
TlsFree
GetSystemTime
DeleteFileA
SetLastError
InitializeCriticalSection
lstrcatA
GlobalAlloc
GetStartupInfoW
GetStringTypeA
FreeEnvironmentStringsA
RaiseException
GetSystemTimeAsFileTime
SetEvent
EnterCriticalSection
CloseHandle
DeleteCriticalSection
ReleaseMutex
UnmapViewOfFile
CreateProcessW
VirtualAlloc
GetCommandLineA
TerminateProcess
GetEnvironmentStrings
GetModuleHandleA
VirtualProtect
TlsGetValue
InterlockedExchange
UnhandledExceptionFilter
LoadLibraryExW
GetSystemInfo
InterlockedCompareExchange
InterlockedIncrement
FlushFileBuffers
GetStringTypeW
FindResourceW
LoadLibraryA
ReadFile
SetFileAttributesA
GetCommandLineW
SetEndOfFile
GetCPInfo
SetUnhandledExceptionFilter
SetStdHandle
CreateFileW
CreateThread
GetCurrentProcess
WriteConsoleA
HeapReAlloc
GlobalLock
GetProcessHeap
HeapCreate
SetFilePointer
HeapFree
LockResource
GetFileSize
CreateEventA
LocalFree
LocalAlloc
GetLocaleInfoA
WaitForMultipleObjects
GetTempPathA
IsDebuggerPresent
GetTimeZoneInformation
lstrcpyA
lstrcpynA
GetModuleFileNameW
TlsAlloc
LoadLibraryExA
GetOEMCP
GetConsoleCP
CompareStringW
SetEnvironmentVariableA
Sleep
GetCurrentThreadId
WideCharToMultiByte
lstrcmpiW
lstrlenW
GetCurrentProcessId
GetDriveTypeA
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteConsoleW
HeapAlloc
FormatMessageA
FindFirstFileA
GetVersion
CreateFileA
CreateFileMappingA
GetTickCount
GetCurrentDirectoryA
SizeofResource
WaitForSingleObject
LoadLibraryW
SetErrorMode
SetHandleCount
GetACP
VirtualQuery
HeapSize
FindFirstFileW
MulDiv
MultiByteToWideChar
CompareStringA
LCMapStringW
GetModuleFileNameA
GetSystemDirectoryA
lstrlenA
lstrcmpiA
RemoveDirectoryA
FreeLibrary
GetModuleHandleW
WriteFile
GetLastError
CreateEventW
VirtualFree
HeapDestroy
QueryPerformanceCounter
GetVersionExA
LCMapStringA
GetConsoleOutputCP
GetEnvironmentVariableA
GetFileAttributesW
GetThreadLocale
FileTimeToLocalFileTime
GlobalUnlock
GlobalFree
LoadResource
GetExitCodeProcess
GetStdHandle
GetFileAttributesA
CreateMutexA
TlsSetValue
MapViewOfFile
GetFileType
ExitProcess
oleaut32
VariantInit
SysAllocString
VariantClear
SysFreeString
user32
EndDialog
GetWindowRect
CallWindowProcA
IsWindowVisible
ShowWindow
SendMessageA
PostMessageA
InvalidateRect
GetClientRect
DefWindowProcA
SetWindowPos
SetCursor
TranslateMessage
DispatchMessageA
LoadCursorA
ScreenToClient
SetForegroundWindow
RegisterClassA
GetMessageA
EndPaint
SetWindowLongA
PeekMessageA
DestroyWindow
SetWindowTextA
GetCursorPos
IsWindowEnabled
EnableWindow
EnableMenuItem
GetSubMenu
ClientToScreen
KillTimer
GetWindowLongA
PostQuitMessage
ReleaseDC
GetDC
CreateWindowExA
GetSysColor
LoadIconA
MessageBoxA
GetDesktopWindow
GetSystemMetrics
LoadStringA
IsWindow
GetParent
SetFocus
FillRect
BeginPaint
GetDlgItem
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 370KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ