Static task
static1
Behavioral task
behavioral1
Sample
6e921c7408ae3966a6a6ad7afb6fa17f8500f1f0035fc69d15908ccfe7908bb1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6e921c7408ae3966a6a6ad7afb6fa17f8500f1f0035fc69d15908ccfe7908bb1.exe
Resource
win10v2004-20220812-en
General
-
Target
6e921c7408ae3966a6a6ad7afb6fa17f8500f1f0035fc69d15908ccfe7908bb1
-
Size
741KB
-
MD5
ba495f917d4c35321a4a07310e29da1f
-
SHA1
1dbb22f7259474b3494b7bd248af44edf9990521
-
SHA256
6e921c7408ae3966a6a6ad7afb6fa17f8500f1f0035fc69d15908ccfe7908bb1
-
SHA512
faaf93bf79ddc40936bdd2968002d87837a92b3c0022a18134ded84c6820caa4e23c2ad12d7be42fa3f8fa6180df765dd11737eae58b9e1c2f81ab1af8edd782
-
SSDEEP
6144:00GSGiFEqJ5ond5kbmOyR/mYLebaDnwWm/vnn43nnVwvN0rfTloKZTMble9J4i8r:PFGiFEqrwd5k5UmW0NZF2x3Mu4f
Malware Config
Signatures
Files
-
6e921c7408ae3966a6a6ad7afb6fa17f8500f1f0035fc69d15908ccfe7908bb1.exe windows x64
0535f333f36b6757cf898c9a33e6f595
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
FindClose
CreateDirectoryA
lstrlenW
WideCharToMultiByte
Sleep
CreateEventA
GetLastError
LoadLibraryA
GetProcAddress
GetModuleFileNameA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateFileA
OpenEventA
FileTimeToLocalFileTime
SetFilePointer
CloseHandle
SetEnvironmentVariableA
CompareStringW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetDriveTypeA
HeapFree
HeapQueryInformation
HeapReAlloc
HeapAlloc
HeapCreate
HeapSetInformation
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
QueryPerformanceCounter
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
FlsFree
FlsAlloc
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
LoadLibraryW
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
ExitProcess
GetSystemInfo
VirtualAlloc
RtlPcToFileHeader
RaiseException
RtlUnwindEx
IsBadReadPtr
HeapValidate
HeapSize
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentThread
GetLocaleInfoA
GetOEMCP
GetCPInfo
GlobalFlags
GetFullPathNameA
FlushFileBuffers
GetCurrentProcess
SetEvent
lstrcmpW
GetCurrentThreadId
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
lstrcmpA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
FindFirstFileA
TlsAlloc
InitializeCriticalSection
LocalAlloc
FreeLibrary
GetCurrentProcessId
CompareStringA
GetModuleFileNameW
GetModuleHandleW
GetAtomNameA
GlobalGetAtomNameA
GetModuleHandleA
FindNextFileA
SetLastError
MultiByteToWideChar
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenA
GetTickCount
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FileTimeToSystemTime
SetFileTime
WriteFile
GetFileAttributesA
LocalFileTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
user32
GetActiveWindow
ShowOwnedPopups
IsWindowVisible
InvalidateRect
BringWindowToTop
GetWindowDC
ClientToScreen
ValidateRect
RegisterWindowMessageA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetClientRect
MapWindowPoints
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetTopWindow
GetWindow
GetCapture
WinHelpA
TrackPopupMenu
GetDlgItem
GetKeyState
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassLongPtrA
GetClassNameA
GetWindowLongPtrA
SetPropA
GetPropA
CallWindowProcA
SetWindowLongPtrA
RemovePropA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongA
SetWindowPos
OffsetRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
UnhookWindowsHookEx
MessageBoxA
GetWindowLongA
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindowThreadProcessId
PostMessageA
SendMessageA
IsWindow
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
LoadMenuA
SetMenuItemBitmaps
ModifyMenuA
InsertMenuItemA
GetMenuItemInfoA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
LoadBitmapA
GetSysColorBrush
PeekMessageA
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuItemID
GetDesktopWindow
LoadStringA
LoadAcceleratorsA
wsprintfA
EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
IntersectRect
InflateRect
PtInRect
GetMessageA
TranslateAcceleratorA
TranslateMessage
SetForegroundWindow
GetForegroundWindow
DestroyMenu
SetWindowTextA
GetMenuCheckMarkDimensions
SetRectEmpty
SetCursor
GetClipboardFormatNameA
UnpackDDElParam
ReuseDDElParam
GetWindowTextA
ReleaseCapture
gdi32
GetDeviceCaps
GetObjectA
GetStockObject
GetObjectType
CreateSolidBrush
CreatePatternBrush
CreateFontIndirectA
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
PtVisible
RectVisible
BitBlt
GetPixel
ExtTextOutA
GetTextExtentPoint32A
Escape
GetClipBox
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
TextOutA
DeleteObject
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
OpenThreadToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetThreadToken
RevertToSelf
shell32
DragFinish
DragQueryFileA
ole32
StringFromCLSID
CoTaskMemFree
oleaut32
VariantChangeType
VariantClear
VariantInit
Sections
.text Size: 513KB - Virtual size: 513KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ