Static task
static1
Behavioral task
behavioral1
Sample
6de730b8c2f28c623dfb27579eab869fa2751d2134117e8185beb75ec61c4d41.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6de730b8c2f28c623dfb27579eab869fa2751d2134117e8185beb75ec61c4d41.exe
Resource
win10v2004-20220901-en
General
-
Target
6de730b8c2f28c623dfb27579eab869fa2751d2134117e8185beb75ec61c4d41
-
Size
3.5MB
-
MD5
848a9987a7b7ea3e8b1af8de4b8edf58
-
SHA1
18fa4aedf3da0ad61fcec4b435dbd9eb900ff803
-
SHA256
6de730b8c2f28c623dfb27579eab869fa2751d2134117e8185beb75ec61c4d41
-
SHA512
4c9a4aac1e0bddcec19e459d7f3580e9b1c452dbe6728cba7ddc3023aa9e8eb041e88fc916b2c0462f3bf1b7b3dba5cf65084e053094717746a3b0601464311f
-
SSDEEP
24576:EVzCdqPHyFYPcuWteZg0ChUqubrP7tORi7absUu9nJHRQ+uZC1OV:EXPSyPcqTJpTfUuRH2C1M
Malware Config
Signatures
Files
-
6de730b8c2f28c623dfb27579eab869fa2751d2134117e8185beb75ec61c4d41.exe windows x86
c8cf007681274a4e6b7eaa8262e1c69d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetFileType
LoadLibraryA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapReAlloc
HeapSize
TerminateProcess
GetACP
ExitProcess
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
HeapAlloc
HeapFree
RtlUnwind
SystemTimeToFileTime
LocalFileTimeToFileTime
SizeofResource
GetOEMCP
GetProcessVersion
GlobalFlags
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GetProfileStringA
LocalAlloc
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
lstrcmpA
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
GlobalFree
WaitForSingleObject
lstrcpynA
FileTimeToLocalFileTime
FileTimeToSystemTime
MulDiv
SetLastError
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetModuleFileNameA
GetTickCount
InterlockedDecrement
GetCommandLineA
lstrcpyA
GetCurrentDirectoryA
SetCurrentDirectoryA
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
WriteFile
lstrcmpiA
FindResourceA
LoadResource
LockResource
GetCPInfo
lstrlenW
lstrlenA
GetVersion
GetVersionExA
CreateFileA
GetFileSize
CloseHandle
ReadFile
GetProcAddress
user32
GetDCEx
UnregisterClassA
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatA
ShowOwnedPopups
PostQuitMessage
FindWindowA
SetCursorPos
RedrawWindow
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
CharUpperA
LoadStringA
DestroyMenu
wvsprintfA
EndDialog
CreateDialogIndirectParamA
GetMessageA
TranslateMessage
ValidateRect
EndPaint
BeginPaint
GetWindowDC
GetSystemMenu
IsRectEmpty
SetParent
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CheckRadioButton
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
SetFocus
AdjustWindowRectEx
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
LockWindowUpdate
GetScrollPos
SetScrollPos
GetTopWindow
WinHelpA
GetClassInfoA
RegisterClassA
TrackPopupMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
IsIconic
GetTabbedTextExtentA
DeferWindowPos
DefWindowProcA
GetDlgCtrlID
IsWindow
SetRectEmpty
GetLastActivePopup
IsWindowEnabled
MessageBoxA
KillTimer
GetCursor
GetFocus
DrawFrameControl
SetCapture
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
GetCapture
ReleaseCapture
ClipCursor
CheckMenuItem
GetMenu
SetTimer
EnableMenuItem
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
UpdateWindow
GetKeyState
wsprintfA
GetCursorPos
ScreenToClient
GetMessagePos
InvertRect
PostThreadMessageA
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
SetScrollRange
MessageBeep
SetWindowLongA
LoadIconA
FrameRect
LoadImageA
DrawStateA
InflateRect
DrawFocusRect
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
SetCursor
GetParent
GetNextDlgTabItem
IsMenu
SendMessageA
GetWindowLongA
DestroyCursor
GetWindowRect
IsChild
GetClassNameA
GetSubMenu
GrayStringA
TabbedTextOutA
DeleteMenu
LoadBitmapA
GetSysColorBrush
GetMenuStringA
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
InsertMenuA
AppendMenuA
GetSystemMetrics
GetDesktopWindow
GetDC
DrawTextA
ReleaseDC
DrawIconEx
DestroyIcon
SystemParametersInfoA
GetSysColor
CopyRect
DrawEdge
SetRect
GetMenuItemInfoA
InvalidateRect
GetClientRect
OffsetRect
PtInRect
LoadCursorA
FillRect
EnableWindow
GetWindowPlacement
EqualRect
gdi32
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
GetMapMode
SetRectRgn
CombineRgn
CreateRectRgnIndirect
DPtoLP
GetTextMetricsA
CreateDCA
LPtoDP
CreateRectRgn
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
GetBkColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetROP2
GetTextFaceA
GetWindowOrgEx
CreateFontA
GetTextColor
CreatePalette
SetDIBitsToDevice
GetTextExtentPointA
GetCurrentPositionEx
GetCharWidthA
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
RestoreDC
SaveDC
StartDocA
GetClipBox
GetViewportOrgEx
Ellipse
StretchDIBits
GetDIBits
CreateBitmap
SetBkColor
SetTextColor
RealizePalette
GetStockObject
Escape
ExtTextOutA
TextOutA
PatBlt
RectVisible
PtVisible
GetPixel
SetPixel
CreateDIBSection
DeleteObject
GetTextExtentPoint32W
CreateCompatibleBitmap
BitBlt
GetBkMode
GetDeviceCaps
CreateDIBitmap
CreateFontIndirectA
GetTextExtentPoint32A
CreatePen
GetObjectA
CreateCompatibleDC
SelectObject
StretchBlt
Rectangle
CreateSolidBrush
DeleteDC
comdlg32
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
ChooseColorA
CommDlgExtendedError
PrintDlgA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegCloseKey
RegOpenKeyExA
SetFileSecurityA
GetFileSecurityA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegSetValueA
RegCreateKeyA
RegQueryValueExA
shell32
DragQueryFileA
DragFinish
SHGetFileInfoA
ShellExecuteA
ShellExecuteExA
ExtractIconA
comctl32
ImageList_SetBkColor
_TrackMouseEvent
ImageList_DragEnter
ImageList_AddMasked
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Draw
ImageList_BeginDrag
ImageList_DragShowNolock
ImageList_DragMove
ImageList_EndDrag
ImageList_DragLeave
ord17
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
oledlg
ord8
ole32
OleRun
CoCreateInstance
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromProgID
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
CoRegisterMessageFilter
CoGetClassObject
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
olepro32
ord253
oleaut32
VariantClear
GetErrorInfo
SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
VariantChangeType
SysAllocString
VariantCopy
SysFreeString
SysStringByteLen
SysAllocStringByteLen
winmm
PlaySoundA
wsock32
WSACleanup
WSAStartup
wininet
InternetGetLastResponseInfoA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetSetOptionExA
InternetCloseHandle
InternetCanonicalizeUrlA
InternetOpenA
InternetCrackUrlA
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 236KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ