Static task
static1
Behavioral task
behavioral1
Sample
6bdd3ae202f22f3545c0261211a7c44248d6eefd8dfe788e62ecf2a28941dbbf.exe
Resource
win7-20220812-en
General
-
Target
6bdd3ae202f22f3545c0261211a7c44248d6eefd8dfe788e62ecf2a28941dbbf
-
Size
377KB
-
MD5
03c2ffdec340540c74bb4359cc04e5a0
-
SHA1
237de6f927d83880b958db052fceac7595480114
-
SHA256
6bdd3ae202f22f3545c0261211a7c44248d6eefd8dfe788e62ecf2a28941dbbf
-
SHA512
a4b7fc9866dc7ff25c36d4ff51b1697ded5808b5a4a90fc98bc2f6118344549261ab089f7ed592a5c09efe612dbd864233849fe79c5f0dbf5eccc7012e1a1292
-
SSDEEP
6144:YehVoEeSN0NfRT/LzuqtqHPUxciqgm98TpRpgb8iBg6zNkGuBc:Y7NfNuq8v+Q2+7fzNkRBc
Malware Config
Signatures
Files
-
6bdd3ae202f22f3545c0261211a7c44248d6eefd8dfe788e62ecf2a28941dbbf.exe windows x86
ecfccb9cfd189376523a54ff9dcba6fb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
SetLastError
MoveFileA
LoadLibraryA
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
GetVolumeInformationA
GetFullPathNameA
GetProcAddress
CompareStringA
GetModuleHandleW
GetModuleHandleA
InterlockedDecrement
FreeLibrary
GetCurrentProcessId
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalGetAtomNameA
lstrcmpA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GlobalAddAtomA
GlobalFlags
GetCurrentThreadId
GetVersionExA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GetLocaleInfoA
GetCPInfo
GetOEMCP
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
VirtualAlloc
HeapReAlloc
HeapSize
Sleep
ExitProcess
GetACP
IsValidCodePage
SetHandleCount
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
VirtualFree
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
lstrcpyA
GetComputerNameA
InitializeCriticalSection
CreateMutexA
CreateDirectoryA
CreateEventA
WaitForSingleObject
GetTempPathA
SetEvent
CopyFileA
GetLocalTime
LeaveCriticalSection
EnterCriticalSection
CreateThread
DeleteFileA
GetPrivateProfileStringA
FindNextFileA
FindFirstFileA
SetFileAttributesA
GetFileAttributesA
OutputDebugStringA
WritePrivateProfileStringA
lstrlenA
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
SizeofResource
ReadFile
GetFileSize
CreateFileA
LocalAlloc
LocalFree
CloseHandle
GetLastError
MultiByteToWideChar
InterlockedIncrement
WideCharToMultiByte
user32
GetTopWindow
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetCapture
WinHelpA
RegisterWindowMessageA
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
DestroyMenu
AdjustWindowRectEx
CopyRect
CallWindowProcA
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetWindowPos
SetWindowLongA
IsWindow
GetMessageTime
GetDlgItem
SetWindowsHookExA
CallNextHookEx
GetKeyState
PeekMessageA
ValidateRect
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
GetWindowTextA
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
UnhookWindowsHookEx
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
CharUpperA
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetTimer
InvalidateRect
KillTimer
DestroyWindow
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
UpdateWindow
ShowWindow
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
GetMessagePos
MapWindowPoints
TranslateMessage
DispatchMessageA
wsprintfA
SetMenu
SetForegroundWindow
GetClientRect
PostMessageA
GetClassInfoExA
GetClassInfoA
RegisterClassA
advapi32
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
shell32
ShellExecuteA
SHGetSpecialFolderPathA
SHChangeNotify
ole32
CoInitialize
CoUninitialize
CoCreateGuid
CoCreateInstance
shlwapi
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathIsDirectoryA
wininet
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
HttpSendRequestA
InternetSetOptionA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetCloseHandle
InternetAttemptConnect
InternetConnectA
iphlpapi
GetAdaptersInfo
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
CreateBitmap
GetStockObject
SetViewportExtEx
DeleteObject
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
DeleteDC
ScaleWindowExtEx
PtVisible
RectVisible
TextOutA
SetWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
GetDeviceCaps
SetViewportOrgEx
SelectObject
ExtTextOutA
Escape
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
comdlg32
GetFileTitleA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE