Static task
static1
Behavioral task
behavioral1
Sample
6ae1455717d0bb1ba7218ef2998e5bf0a3f57d8323afbbeb78ea65a0f4ee7acb.exe
Resource
win7-20220812-en
General
-
Target
6ae1455717d0bb1ba7218ef2998e5bf0a3f57d8323afbbeb78ea65a0f4ee7acb
-
Size
184KB
-
MD5
1122be9a5dca896f31eea44547dd2e50
-
SHA1
7527a9c93f4073a7c6847929e0671008f8102c9d
-
SHA256
6ae1455717d0bb1ba7218ef2998e5bf0a3f57d8323afbbeb78ea65a0f4ee7acb
-
SHA512
45b90c71d4b0b3f92ec69a0b636aefe3e885d16bd662aac0262b1c4c974d23966b141f8227c59efd138ec77726690cfd7251681ac1cfd3c281b1a203f0c04880
-
SSDEEP
3072:co1Bc4tLPYP4CGhbwLVPkqGYs716Ai40VFITrJICJwo3R8hJZ7stZ2fWRWbtreoj:cuBcRDlLVPpAi40VFIvJIW8B7sOfWcp9
Malware Config
Signatures
Files
-
6ae1455717d0bb1ba7218ef2998e5bf0a3f57d8323afbbeb78ea65a0f4ee7acb.exe windows x86
7929e220f5d0f2ed94d4fbb311bf6bb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetExitCodeProcess
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetProcAddress
SetStdHandle
SetEnvironmentVariableA
GetOEMCP
GetACP
GetVersion
CompareStringA
Sleep
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
LocalAlloc
GetCurrentThread
GetCurrentProcess
CompareStringW
LoadLibraryA
GetPrivateProfileIntA
GetPrivateProfileStringA
FormatMessageA
LocalFree
SetFilePointer
ReadFile
WriteFile
FindFirstFileA
FindNextFileA
FindClose
GetFileAttributesA
RemoveDirectoryA
SetCurrentDirectoryA
DeleteFileA
CopyFileA
CreateFileA
GetFileTime
CompareFileTime
CloseHandle
CreateDirectoryA
GetLastError
GetWindowsDirectoryA
GetSystemDirectoryA
GetCurrentDirectoryA
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetTempPathA
GetCPInfo
GetEnvironmentVariableA
GetModuleFileNameA
RtlUnwind
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapSize
WideCharToMultiByte
SetUnhandledExceptionFilter
GetFileType
GetCurrentProcessId
CreateProcessA
user32
UpdateWindow
EnumWindows
RegisterWindowMessageA
EndDialog
GetDC
ReleaseDC
GetWindowRect
SetWindowPos
DialogBoxParamA
SetDlgItemTextA
EnableWindow
SetFocus
SetTimer
DestroyWindow
SendMessageA
GetDlgItem
CreateDialogParamA
ShowWindow
SetWindowTextA
GetDlgItemTextA
KillTimer
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
LoadStringA
MessageBoxA
GetClassNameA
gdi32
GetTextExtentPoint32A
SelectObject
GetTextMetricsA
advapi32
AccessCheck
RegCloseKey
OpenThreadToken
OpenProcessToken
DuplicateToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
FreeSid
RegEnumKeyA
RegEnumValueA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
comctl32
InitCommonControlsEx
shell32
SHChangeNotify
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE