Static task
static1
Behavioral task
behavioral1
Sample
06ec7e1110af77d435130f4ac239434c5d5a3f5ece56acbf25ed07015fb40831.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
06ec7e1110af77d435130f4ac239434c5d5a3f5ece56acbf25ed07015fb40831.exe
Resource
win10v2004-20220812-en
General
-
Target
06ec7e1110af77d435130f4ac239434c5d5a3f5ece56acbf25ed07015fb40831
-
Size
52KB
-
MD5
4008ad6e95e0c271d4c8896992815960
-
SHA1
74c9d0bfdf7f1c5563efa21365e1af2844ab5ef1
-
SHA256
06ec7e1110af77d435130f4ac239434c5d5a3f5ece56acbf25ed07015fb40831
-
SHA512
17814fd7490f66beb0ac570a80bd8810fa2e500d4e73a9ec22ded7dbc06260fa8639c4509dab531086197a46ad96a0bb2ec8976c36f01035af270a0e450d4cb6
-
SSDEEP
768:xDp1G51gXUJqh9TFhpFnidCAJO2D1VJ9cYr+4b9HEGqw0XTRHMGAr+mvTogg+R52:dpO1eFJidrv1jCYr5Cjw0tPmvTogNS
Malware Config
Signatures
Files
-
06ec7e1110af77d435130f4ac239434c5d5a3f5ece56acbf25ed07015fb40831.exe windows x86
83ef4e25f0079d00784f6caffb5f1242
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
wcsstr
wcscpy
_c_exit
_exit
_XcptFilter
_cexit
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_ftol
malloc
free
advapi32
OpenSCManagerW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
SetServiceStatus
RegisterEventSourceW
ReportEventW
DeregisterEventSource
ChangeServiceConfigW
RegOpenKeyExW
OpenServiceW
CloseServiceHandle
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
kernel32
MultiByteToWideChar
DisconnectNamedPipe
WriteFile
ConnectNamedPipe
CreateNamedPipeW
lstrlenW
OpenEventW
lstrcatW
SetConsoleCtrlHandler
ExitProcess
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoW
CallNamedPipeW
Sleep
lstrcmpA
lstrlenA
lstrcatA
SuspendThread
ResumeThread
SetCommState
CloseHandle
WaitForSingleObject
SetEvent
SetCommTimeouts
GetCommProperties
GetCommState
SetupComm
lstrcpyW
ResetEvent
GetOverlappedResult
WaitForMultipleObjects
ClearCommError
GetLastError
ReadFile
ExitThread
GetTickCount
GetCurrentThreadId
CreateEventW
CreateThread
WideCharToMultiByte
user32
GetAsyncKeyState
wsprintfW
GetMessageExtraInfo
SendInput
MapVirtualKeyW
keybd_event
OpenInputDesktop
OpenDesktopW
FindWindowW
SendMessageW
MessageBeep
GetCursorPos
SystemParametersInfoW
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationW
SetProcessWindowStation
SetThreadDesktop
CloseDesktop
CloseWindowStation
GetSystemMetrics
CharLowerA
skdll
ord2
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nzsocky Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE