Static task
static1
Behavioral task
behavioral1
Sample
06e155b8a2db964ba469678804039ddcd3c3f5ad71e849485008a51b282648bd.exe
Resource
win7-20220812-en
General
-
Target
06e155b8a2db964ba469678804039ddcd3c3f5ad71e849485008a51b282648bd
-
Size
285KB
-
MD5
5c6982716ae5e2eff6ae4a5b46a3333f
-
SHA1
ac51e4112e319cc49011b1d491ceca6d44013b2e
-
SHA256
06e155b8a2db964ba469678804039ddcd3c3f5ad71e849485008a51b282648bd
-
SHA512
06d166d10837938df800e097c4bc7dfedfe33d6cce6b8ffa1aa361eb0f8cdc7a72c2e4811e1d43f23d25d55367f4f6c78c9d226427f7bf4095a1ebb285f40389
-
SSDEEP
6144:m1OjaMWO2JhuoUYmVVFsKoWaK+Dlk6LcS108+zMC7s:aO+MWHhCQfd8
Malware Config
Signatures
Files
-
06e155b8a2db964ba469678804039ddcd3c3f5ad71e849485008a51b282648bd.exe windows x86
7e821895e9eca8fc8aa092b80a5ba9cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
ImageList_ReplaceIcon
ImageList_Create
kernel32
WideCharToMultiByte
CloseHandle
WaitForSingleObject
UnmapViewOfFile
MoveFileW
DeleteFileW
GetFileSize
CreateFileW
CreateFileMappingW
MapViewOfFile
GetFileAttributesW
FormatMessageW
CreateEventW
ResetEvent
SetEvent
lstrcatW
GetPrivateProfileStringW
ExpandEnvironmentStringsW
lstrcpynW
lstrlenW
FindNextFileW
GetVersion
lstrcmpW
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLastError
SetFilePointer
WriteFile
ReadFile
GetModuleFileNameW
FindFirstFileA
LoadLibraryA
GetProcAddress
FreeLibrary
FindNextFileA
GetLocaleInfoA
lstrcpyW
lstrcmpA
lstrlenA
MultiByteToWideChar
lstrcmpiW
GetModuleHandleW
FindFirstFileW
FindClose
user32
GetClassNameW
EnumChildWindows
GetClassNameA
SendMessageW
SetWindowLongW
SetWindowPos
LoadIconW
DestroyWindow
CreateDialogParamW
ShowWindow
MessageBoxW
wsprintfW
CheckDlgButton
IsDlgButtonChecked
GetParent
InvalidateRect
GetDC
ReleaseDC
GetClientRect
SystemParametersInfoW
GetWindowTextLengthW
GetDlgItemTextW
GetSystemMetrics
IsWindowEnabled
GetDlgCtrlID
SetWindowTextW
GetWindowTextW
CharNextExA
KillTimer
EndDialog
GetDlgItemTextA
GetWindowLongW
GetSysColorBrush
GetSysColor
SetTimer
SetDlgItemTextW
EnableWindow
GetDlgItem
SetDlgItemTextA
GetKeyboardLayout
DialogBoxParamW
SendDlgItemMessageW
gdi32
GetDeviceCaps
ExtTextOutW
GetTextExtentPoint32W
SelectObject
DeleteEnhMetaFile
DeleteObject
GetStockObject
SetBkColor
CreateFontIndirectW
GetObjectW
SetBkMode
SetTextColor
comdlg32
GetOpenFileNameW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shell32
ShellExecuteW
msvcr100
wcscpy
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_swprintf
_wcsdup
memcpy
memset
wcsrchr
_wchdir
strcpy
strcat
malloc
_snprintf
mbstowcs
free
strlen
memmove
wcslen
_wfopen
fgets
fclose
feof
ftell
strchr
strtol
atoi
fseek
realloc
_strdup
wcscat
qsort
bsearch
_except_handler3
strcmp
wcscmp
_time64
memcmp
_waccess
_vsnwprintf
_beginthread
_wfullpath
_wcsicmp
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PACK Size: 144KB - Virtual size: 380KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE