Static task
static1
Behavioral task
behavioral1
Sample
6475cf2d260e9e4d684cb6e67cbf2b868c0ed2b9cbf317a23e58603ec3e9410c.exe
Resource
win7-20220901-en
General
-
Target
6475cf2d260e9e4d684cb6e67cbf2b868c0ed2b9cbf317a23e58603ec3e9410c
-
Size
189KB
-
MD5
07df5da256df18594e557eb2f624e770
-
SHA1
fd78f014a00272fed7d92fde4c4b37f5f0c5e3b0
-
SHA256
6475cf2d260e9e4d684cb6e67cbf2b868c0ed2b9cbf317a23e58603ec3e9410c
-
SHA512
b3510b7aebab6a587deacf35b7ba38a5db134e04b7bf3a09603fa46008c086047208e0f79170b1d765b8b49ea5e39039e47a9319e7c01d9f21d3a61896c6c003
-
SSDEEP
3072:RT1zx3248k2vNgSvCwIWgURy78sbsWme8JstkX2ABoVQcJPKX6kHMrz:p324OK/IsoW1oykX2ABoTPKTHMrz
Malware Config
Signatures
Files
-
6475cf2d260e9e4d684cb6e67cbf2b868c0ed2b9cbf317a23e58603ec3e9410c.exe windows x86
fae3cbd7b766eb6a896750dd2d131f8d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassNameW
PaintDesktop
IsChild
GetSubMenu
SetWindowsHookW
GetClassNameA
SetParent
TrackPopupMenu
GetGuiResources
SetLastErrorEx
CloseWindow
BeginPaint
GetClassWord
GetDCEx
TrackPopupMenuEx
SetWindowPlacement
GetListBoxInfo
NotifyWinEvent
GetCursorInfo
GetClipboardData
GetThreadDesktop
DefFrameProcW
GetInputState
GetMenuItemRect
RegisterRawInputDevices
SendDlgItemMessageA
EnumPropsExA
IsCharUpperA
GetUserObjectInformationA
GetUserObjectInformationW
shell32
ord11
ord10
ord66
gdi32
GetViewportExtEx
SetBitmapDimensionEx
ExtFloodFill
CopyMetaFileW
GetEnhMetaFileBits
RealizePalette
ScaleWindowExtEx
PathToRegion
EnumICMProfilesW
PolylineTo
GetTextExtentExPointA
GetNearestColor
MaskBlt
RoundRect
BeginPath
SetBrushOrgEx
GetCharABCWidthsI
SetDCPenColor
GetPath
Polygon
SetViewportExtEx
GetTextCharacterExtra
AngleArc
GetDCBrushColor
GetWinMetaFileBits
AbortDoc
CloseFigure
GetTextFaceA
StrokePath
GetOutlineTextMetricsW
InvertRgn
ExtCreateRegion
CopyEnhMetaFileW
GetLayout
GetArcDirection
OffsetWindowOrgEx
shlwapi
SHGetInverseCMAP
kernel32
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExA
InitializeCriticalSection
HeapAlloc
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetCommandLineA
GetOEMCP
GetACP
AssignProcessToJobObject
GlobalUnfix
TransmitCommChar
CancelIo
ReadFileScatter
SetCommState
GetCurrentThread
SetPriorityClass
FreeResource
PulseEvent
GetMailslotInfo
CreateNamedPipeW
GetProcessHeap
EraseTape
IsWow64Process
GetProcessVersion
RequestWakeupLatency
GetFileType
ConvertFiberToThread
GetProcessPriorityBoost
RtlCaptureStackBackTrace
PurgeComm
GlobalGetAtomNameW
ConvertThreadToFiber
GetVersionExA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE