Static task
static1
Behavioral task
behavioral1
Sample
6ab781afb907d785bfe157dba38f1c5602e028b4e95c2535c4479fb0ea4e9d62.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6ab781afb907d785bfe157dba38f1c5602e028b4e95c2535c4479fb0ea4e9d62.exe
Resource
win10v2004-20220812-en
General
-
Target
6ab781afb907d785bfe157dba38f1c5602e028b4e95c2535c4479fb0ea4e9d62
-
Size
3.6MB
-
MD5
03121ae67e5da6a6774b74d9e01161ec
-
SHA1
29a948658cb8c30b66159308e9e8997644b6a89d
-
SHA256
6ab781afb907d785bfe157dba38f1c5602e028b4e95c2535c4479fb0ea4e9d62
-
SHA512
e886f13f5c35d4c4f25801ba5186314bb77dffc0671f52064fb40ea2095b1f4f19bd4e7c02e6d1f3834e0f2ee5ca5f797bb2b795ce810ea27748e4bfe429e691
-
SSDEEP
98304:PSVSQfDR4pVOr91IG0/PQOx7tArr+4hb/KH0hfRER1aXGWVR4wGNU0DTgHAqBpS7:PsSKDGarPIGNFI
Malware Config
Signatures
Files
-
6ab781afb907d785bfe157dba38f1c5602e028b4e95c2535c4479fb0ea4e9d62.exe windows x86
d1f9cd3dcacf2d400394faa92fdb03ab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount64
GetProcessHeap
ExitThread
AddVectoredExceptionHandler
HeapAlloc
HeapFree
DeleteCriticalSection
GetLastError
CreateMutexA
Wow64DisableWow64FsRedirection
Sleep
GetModuleHandleExW
ExitProcess
InterlockedCompareExchange
SetLastError
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
SystemTimeToFileTime
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
IsBadReadPtr
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
GetFileAttributesA
DisableThreadLibraryCalls
GetTempPathA
GetProcAddress
LoadLibraryA
RemoveDirectoryA
ResumeThread
CloseHandle
IsWow64Process
GetTickCount
GetCurrentThreadId
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
SetEndOfFile
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
advapi32
RegEnumKeyW
RegOpenKeyA
RegQueryInfoKeyW
RegCreateKeyW
RegQueryValueExW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyW
user32
DispatchMessageW
AppendMenuW
PostMessageW
FindWindowA
DestroyWindow
GetClientRect
PeekMessageA
DispatchMessageA
CreatePopupMenu
MessageBoxW
GetWindowRect
SetForegroundWindow
LoadIconW
LoadIconA
RegisterClassExA
CheckMenuItem
UpdateWindow
MsgWaitForMultipleObjects
GetWindowTextA
RedrawWindow
TrackPopupMenu
SendMessageA
RegisterClassExW
GetWindowTextW
RegisterWindowMessageA
BringWindowToTop
AppendMenuA
SendMessageW
PostQuitMessage
GetSystemMetrics
FindWindowW
SetWindowPos
PostMessageA
RegisterWindowMessageW
Sections
.text Size: 571KB - Virtual size: 571KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ