Static task
static1
Behavioral task
behavioral1
Sample
b6f28bb67b051d731ae18f4d2155092deeb00c32507f28bc1f3e363b8a88fc14.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6f28bb67b051d731ae18f4d2155092deeb00c32507f28bc1f3e363b8a88fc14.exe
Resource
win10v2004-20220901-en
General
-
Target
b6f28bb67b051d731ae18f4d2155092deeb00c32507f28bc1f3e363b8a88fc14
-
Size
272KB
-
MD5
5259876ace8a767b554816f4ad2ee0bf
-
SHA1
83407225cb6930cdd2e1a83171b02fe3d14fca50
-
SHA256
b6f28bb67b051d731ae18f4d2155092deeb00c32507f28bc1f3e363b8a88fc14
-
SHA512
3af5c27e2265dff119b52d104b00c919709da94636b7e1b4c3b96c34f96de360bf9b89020b70a717821d72cff1f69b262534c444ac24a1524a12f3902491b9dc
-
SSDEEP
6144:PZ9eebIVyLtxT92Y4dO7ndTzwPIjERl33e:PZ3bnLtwKnd/yIjERl33e
Malware Config
Signatures
Files
-
b6f28bb67b051d731ae18f4d2155092deeb00c32507f28bc1f3e363b8a88fc14.exe windows x86
17048924bb9f0267b79d10eb470a75ef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
PostMessageW
RegisterClassW
SetWindowPos
DestroyWindow
GetWindowTextW
LoadStringW
DispatchMessageW
EndPaint
SetWindowLongW
UnregisterClassW
PostQuitMessage
ShowWindow
GetMessageW
LoadCursorW
SetRectEmpty
AdjustWindowRect
SendMessageW
GetClientRect
GetWindowLongW
TranslateMessage
GetSystemMetrics
IsZoomed
IsIconic
SetWindowTextW
WindowFromDC
SetForegroundWindow
InSendMessage
GetWindowRect
IsWindowVisible
BeginPaint
DefWindowProcW
IsWindow
ScreenToClient
kernel32
WaitForSingleObject
GetCurrentProcess
lstrlenA
OutputDebugStringA
GetCurrentProcessId
LocalFree
SetUnhandledExceptionFilter
WaitForMultipleObjects
LoadLibraryW
GetTickCount
GetUserDefaultLCID
lstrcpyW
lstrcpynW
CreateThread
MultiByteToWideChar
ResetEvent
lstrlenW
SetEvent
LocalAlloc
GlobalAlloc
CloseHandle
QueryPerformanceCounter
GetSystemTimeAsFileTime
CreateEventW
MulDiv
gdi32
StretchDIBits
GetStockObject
SetStretchBltMode
SelectPalette
GetObjectType
RealizePalette
DeleteObject
CreatePalette
ole32
CoInitialize
CoTaskMemFree
CoUninitialize
CoCreateInstance
quartz
DBToAmpFactor
AmpFactorToDB
winmm
GetDriverModuleHandle
mciSetDriverData
mciGetDriverData
DefDriverProc
mciDriverYield
mciFreeCommandResource
mciLoadCommandResource
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ