Static task
static1
Behavioral task
behavioral1
Sample
6e6eee5850c452b37efd219efd449367f61270380641489175c40743f662f48a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e6eee5850c452b37efd219efd449367f61270380641489175c40743f662f48a.exe
Resource
win10v2004-20220812-en
General
-
Target
6e6eee5850c452b37efd219efd449367f61270380641489175c40743f662f48a
-
Size
3.5MB
-
MD5
e3037c166d671f7b6f866bb7d6ef7be9
-
SHA1
2bdb1392ace2974caabbb02acb570a502fff88c1
-
SHA256
6e6eee5850c452b37efd219efd449367f61270380641489175c40743f662f48a
-
SHA512
c4650f6717ee56aecd17ff24affabeddcd9dc7a7c8784a60cc0247ec2ca9ffdbd2be4b16524584b6c1dd4347ed885fb0e19cf109b5174b379055116c1d2ec345
-
SSDEEP
49152:Fx4YYoS36SCDQ9qbCbADCFrgo8V1jceQSACbz8k6mvEHFoLBFPBH314jcoL2m:2omfC1mADK/8XjceQ4dvElo9Fz4gy
Malware Config
Signatures
Files
-
6e6eee5850c452b37efd219efd449367f61270380641489175c40743f662f48a.exe windows x86
cb8485193683c701cf7b880c662ced5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapAlloc
IsBadReadPtr
HeapReAlloc
FileTimeToSystemTime
EnterCriticalSection
CreateFileA
HeapFree
CreateMutexA
GetModuleHandleExW
ExitProcess
GetLastError
GetTickCount
InterlockedCompareExchange
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
GetProcessHeap
IsBadWritePtr
GetCurrentThread
GetFileAttributesA
CloseHandle
GetTempPathA
LeaveCriticalSection
GetProcAddress
LoadLibraryA
RemoveDirectoryA
CreateFileW
DeleteCriticalSection
SetLastError
Sleep
FileTimeToLocalFileTime
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
LoadLibraryExW
GetModuleHandleW
SetEndOfFile
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
advapi32
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegEnumValueA
RegQueryInfoKeyW
RegQueryValueA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegEnumKeyW
RegQueryInfoKeyA
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueW
RegCreateKeyW
RegOpenKeyW
user32
BringWindowToTop
ShowWindow
GetCursorPos
PostQuitMessage
UpdateWindow
DispatchMessageA
RegisterClassExW
CreateWindowExA
GetSystemMetrics
TrackPopupMenu
SendMessageW
RegisterWindowMessageA
GetMessageW
PostMessageA
FindWindowW
SendMessageA
AppendMenuA
GetDlgItem
LoadIconW
PeekMessageW
SetForegroundWindow
MsgWaitForMultipleObjects
CreateWindowExW
CloseDesktop
SetWindowPos
GetClientRect
RedrawWindow
DispatchMessageW
GetWindowTextW
RegisterWindowMessageW
GetParent
EnumWindows
PostMessageW
Sections
.text Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ