Static task
static1
Behavioral task
behavioral1
Sample
6b88b5807d3ece081ed8aee0c072ec338919bcb41ae1d88c99079f53af87c5ce.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6b88b5807d3ece081ed8aee0c072ec338919bcb41ae1d88c99079f53af87c5ce.exe
Resource
win10v2004-20221111-en
General
-
Target
6b88b5807d3ece081ed8aee0c072ec338919bcb41ae1d88c99079f53af87c5ce
-
Size
130KB
-
MD5
9490f4d037578f19bf80232a56dcdec0
-
SHA1
67dacbbd9dbc22b25e5e8910ce3b5bb05f89a9c9
-
SHA256
6b88b5807d3ece081ed8aee0c072ec338919bcb41ae1d88c99079f53af87c5ce
-
SHA512
5b1cd25fe344db73c03e31d5d3df45d1cdd97226f19a6ad09ba020214989fa2e8d4554b19db5fdc959bd127acdba7e2c5ad35628e9ef81aa3f05a7c8c5ce50d2
-
SSDEEP
3072:oBUx38/JCXI50+zxgwnMOxTH0/FdalcCN7GELn+kDbti:o7US0k3nMvdalvN7jLBDbw
Malware Config
Signatures
Files
-
6b88b5807d3ece081ed8aee0c072ec338919bcb41ae1d88c99079f53af87c5ce.exe windows x86
33ff1c2d3aa6cb806cfabd7e19c74fb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
SetCursor
GetMessageA
PeekMessageA
InvalidateRect
EndPaint
BeginPaint
RegisterClassA
CheckDlgButton
SystemParametersInfoA
IsWindow
GetWindowRect
TranslateMessage
DispatchMessageA
LoadCursorA
LoadIconA
SetFocus
IsDialogMessageA
DrawTextA
GetWindowDC
ReleaseDC
FillRect
OffsetRect
SendMessageA
wsprintfA
PostMessageA
PostQuitMessage
GetSystemMetrics
CreateWindowExA
SetWindowPos
MoveWindow
DefWindowProcA
MapWindowPoints
GetWindow
IsWindowEnabled
MsgWaitForMultipleObjects
GetDlgCtrlID
SendMessageTimeoutW
PeekMessageW
GetUserObjectSecurity
SetUserObjectSecurity
IsDialogMessageW
DrawIconEx
WindowFromPoint
CreateMenu
DrawMenuBar
LoadMenuW
TranslateAcceleratorW
LoadAcceleratorsW
GetDlgItemTextW
CreateDialogParamW
ExitWindowsEx
DispatchMessageW
GetMessageW
DrawEdge
RegisterWindowMessageW
SetMenuItemInfoW
IsIconic
ShowWindowAsync
SystemParametersInfoW
EnumWindows
SetClassLongW
GetWindowTextW
InvalidateRgn
TrackPopupMenuEx
ModifyMenuW
AppendMenuW
GetMenuItemCount
GetMenuItemID
LoadImageW
RegisterClassW
DefMDIChildProcW
DefDlgProcW
CreateIconIndirect
FrameRect
IsWindowVisible
GetClassNameW
EnumChildWindows
PtInRect
UnionRect
CopyRect
ScreenToClient
IsZoomed
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
PostMessageW
DrawFrameControl
SetDlgItemTextW
DialogBoxParamW
SetWindowTextW
DialogBoxIndirectParamW
GetScrollInfo
SetScrollInfo
GetParent
GetClassLongW
SetWindowLongW
GetWindowLongW
IntersectRect
InflateRect
EnableWindow
SendMessageW
WaitForInputIdle
ShowWindow
InsertMenuW
GetPropW
SetPropW
ScrollWindowEx
ValidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
DrawTextW
ReleaseCapture
SetCapture
GetCapture
DeleteMenu
SetForegroundWindow
MessageBoxW
FindWindowW
FindWindowExW
GetWindowThreadProcessId
LoadCursorW
LoadIconW
EnumDisplaySettingsW
GetKeyState
GetFocus
CreateWindowExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
LoadStringW
DefFrameProcW
CreateDialogIndirectParamA
GetDesktopWindow
LoadImageA
GetDC
DialogBoxIndirectParamA
CharLowerA
GetKeyboardType
LoadStringA
CharNextA
GetWindowLongA
wvsprintfA
FindWindowA
RedrawWindow
CheckRadioButton
UnregisterClassA
GetSysColorBrush
DialogBoxParamA
DestroyAcceleratorTable
EmptyClipboard
SetClipboardData
CharUpperA
OpenClipboard
TranslateAcceleratorA
LoadAcceleratorsA
RemoveMenu
ChildWindowFromPoint
DestroyCursor
CreateDialogParamA
IsMenu
GetSubMenu
SetDlgItemInt
GetWindowPlacement
CharLowerBuffA
EnableMenuItem
CheckMenuRadioItem
GetSysColor
KillTimer
DestroyIcon
DestroyWindow
GetClientRect
GetSystemMenu
SetTimer
SetWindowPlacement
InsertMenuItemA
GetMenu
CheckMenuItem
SetMenuItemInfoA
SetActiveWindow
DefDlgProcA
EndDialog
SetDlgItemTextA
EnumClipboardFormats
GetClipboardData
CloseClipboard
GetClassInfoA
CallWindowProcA
SetWindowLongA
IsDlgButtonChecked
GetActiveWindow
GetDlgItemTextA
GetCursorPos
TrackPopupMenu
ClientToScreen
DestroyMenu
CreatePopupMenu
AppendMenuA
SendDlgItemMessageA
GetDlgItem
SetWindowTextA
GetWindowTextA
comdlg32
ChooseFontW
FindTextW
PrintDlgW
GetOpenFileNameW
GetSaveFileNameW
ChooseColorW
shell32
SHChangeNotify
ShellExecuteExA
SHFileOperationA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHGetFileInfoA
DragAcceptFiles
DragQueryFileA
SHGetDataFromIDListA
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteW
DragFinish
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteExW
Shell_NotifyIconW
SHBrowseForFolderW
ShellExecuteA
ole32
OleInitialize
OleUninitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoCreateInstance
CoUninitialize
CoInitialize
RegisterDragDrop
RevokeDragDrop
DoDragDrop
OleGetClipboard
ReleaseStgMedium
CLSIDFromString
CoFreeAllLibraries
CoGetInterfaceAndReleaseStream
CoSetProxyBlanket
CoMarshalInterThreadInterfaceInStream
advapi32
SetKernelObjectSecurity
RegOpenKeyExW
LookupPrivilegeNameW
IsValidSecurityDescriptor
GetKernelObjectSecurity
CreateProcessAsUserW
RegConnectRegistryW
AddAccessAllowedAce
AddAce
InitializeAcl
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
IsValidSid
SetTokenInformation
QueryServiceConfigW
CopySid
GetLengthSid
RegDeleteKeyA
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegCloseKey
GetUserNameA
RegSetValueA
RegCreateKeyA
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegFlushKey
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyA
ControlService
OpenServiceW
OpenSCManagerW
CloseServiceHandle
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegQueryValueW
RegUnLoadKeyW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyW
RegLoadKeyW
RegEnumValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
ImpersonateLoggedOnUser
LookupPrivilegeValueW
LookupAccountNameW
LookupAccountSidW
GetAce
FreeSid
QueryServiceStatus
StartServiceW
RegDeleteValueW
RegCreateKeyW
MapGenericMask
QueryServiceObjectSecurity
SetServiceObjectSecurity
AllocateAndInitializeSid
EqualSid
GetTokenInformation
RevertToSelf
gdi32
CreateCompatibleBitmap
BitBlt
AddFontResourceA
AbortDoc
SaveDC
CreateDIBitmap
CreateFontA
CreateFontIndirectA
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
EndDoc
EndPage
ExtCreatePen
ExtTextOutA
ExtTextOutW
GetBkColor
GetCharABCWidthsFloatW
GetDIBits
GetObjectA
GetPixel
GetStockObject
GetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextMetricsA
LineTo
MoveToEx
PtInRegion
Rectangle
RemoveFontResourceA
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetPixel
SetPixelV
SetStretchBltMode
SetTextAlign
SetTextColor
StartDocA
StartDocW
StartPage
CreateCompatibleDC
StretchDIBits
TextOutA
TextOutW
CreatePalette
SelectPalette
RealizePalette
CombineRgn
CopyEnhMetaFileA
CreateBitmap
CreateBrushIndirect
CreateHalftonePalette
CreateICA
CreatePenIndirect
CreateRoundRectRgn
DeleteEnhMetaFile
ExcludeClipRect
GdiFlush
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDIBColorTable
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetNearestPaletteIndex
GetObjectType
GetPaletteEntries
GetRgnBox
GetSystemPaletteEntries
GetTextExtentPointA
GetWinMetaFileBits
GetWindowOrgEx
SetWinMetaFileBits
SetWindowExtEx
SetWindowOrgEx
UnrealizeObject
CreateFontIndirectW
GetBkMode
CreateRectRgnIndirect
GetObjectW
RectInRegion
GetTextMetricsW
CreateDCA
StretchBlt
CreateDIBSection
IntersectClipRect
MaskBlt
PatBlt
PlayEnhMetaFile
PolyPolyline
Polygon
Polyline
RectVisible
RestoreDC
RoundRect
SetAbortProc
SetViewportOrgEx
SetBrushOrgEx
SetDIBColorTable
SetEnhMetaFileBits
SetMapMode
SetROP2
SetViewportExtEx
GetDeviceCaps
opengl32
glVertex3sv
glNormal3sv
glTexCoord1f
glRectdv
glFeedbackBuffer
glEvalCoord2d
glNormal3d
dbghelp
MiniDumpReadDumpStream
SymEnumTypes
SymLoadModuleEx
SymSetSearchPath
SymMatchFileName
crypt32
CertGetNameStringW
CertDuplicateCertificateContext
comctl32
ImageList_DrawEx
ImageList_Destroy
InitCommonControlsEx
ImageList_Add
ImageList_ReplaceIcon
CreateToolbarEx
CreatePropertySheetPageW
CreateStatusWindowW
PropertySheetW
ImageList_Create
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerInstallFileA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
mpr
WNetGetConnectionW
shlwapi
UrlUnescapeW
ColorHLSToRGB
ColorRGBToHLS
kernel32
GlobalUnlock
WideCharToMultiByte
GlobalFree
MultiByteToWideChar
GetPrivateProfileIntA
lstrlenW
CreateFileA
SetErrorMode
CompareStringW
LocalFree
CreateDirectoryW
SetConsoleActiveScreenBuffer
SetTapeParameters
GetCommandLineA
GetConsoleCursorInfo
OpenFileMappingW
VirtualProtect
CloseHandle
Sleep
DeleteFileA
GetAtomNameA
RtlUnwind
GetModuleFileNameA
GetUserDefaultLangID
GlobalAlloc
GlobalLock
GetVersionExA
GetPrivateProfileStringA
CompareStringA
lstrlenA
SetLastError
CreateDirectoryA
GetFileAttributesA
GetWindowsDirectoryA
GetShortPathNameA
GetLastError
SetFileAttributesA
WaitForSingleObject
GetTempPathA
GetTempFileNameA
CopyFileA
OpenEventA
SetEvent
FormatMessageA
RemoveDirectoryA
FindResourceExA
FindResourceA
LoadResource
LockResource
HeapFree
HeapAlloc
lstrcpyA
ExitProcess
HeapCreate
GetStartupInfoA
GetModuleHandleA
HeapDestroy
AddAtomA
SetEnvironmentVariableA
SetEndOfFile
ReadConsoleW
GetTimeZoneInformation
WriteConsoleW
SetStdHandle
SetFilePointerEx
LCMapStringW
TlsGetValue
GetProcAddress
GetVersion
OpenProcess
GetCurrentProcess
ExitThread
InitializeCriticalSection
GetFileSize
GetStdHandle
WriteFile
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
MapViewOfFile
UnmapViewOfFile
TlsAlloc
TlsSetValue
CreateFileMappingW
LoadLibraryW
GetModuleFileNameW
CreateProcessW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetWindowsDirectoryW
GetFullPathNameW
CreateFileW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetFileAttributesW
FindFirstFileW
GetPrivateProfileStringW
FreeLibrary
LoadLibraryExW
ReadFile
GetModuleHandleW
FindClose
FindNextFileW
LeaveCriticalSection
CreateThread
GetExitCodeThread
WaitForMultipleObjects
CreateEventW
MulDiv
GetTickCount
GlobalAddAtomW
GetFileSizeEx
FormatMessageW
LocalAlloc
GetCommandLineW
HeapReAlloc
HeapSize
GetProcessHeap
EnterCriticalSection
SizeofResource
FindResourceW
FindResourceExW
GlobalReAlloc
TerminateThread
Module32FirstW
Module32NextW
DeleteCriticalSection
GetSystemTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
IsBadStringPtrW
OpenEventW
ReadProcessMemory
lstrcmpW
lstrcmpiW
GetEnvironmentVariableW
VirtualQueryEx
GetProcessAffinityMask
IsDebuggerPresent
EncodePointer
IsProcessorFeaturePresent
GetCurrentThreadId
GetModuleHandleExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsFree
GetStartupInfoW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryA
ExpandEnvironmentStringsA
GetSystemInfo
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
GetCurrentDirectoryW
GetDriveTypeW
OutputDebugStringW
DuplicateHandle
DeviceIoControl
GetProcessWorkingSetSize
VirtualFree
VirtualAlloc
GetComputerNameW
SetPriorityClass
PulseEvent
GetProcessId
TerminateProcess
SetProcessWorkingSetSize
GlobalMemoryStatus
GetCurrentProcessId
IsBadReadPtr
QueryPerformanceFrequency
QueryPerformanceCounter
ResetEvent
Thread32Next
Thread32First
ResumeThread
SuspendThread
GetThreadContext
OpenThread
SearchPathW
DeleteFileW
GetSystemDirectoryW
SetFilePointer
SetThreadAffinityMask
GetCurrentThread
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
InterlockedIncrement
InterlockedDecrement
LCMapStringA
GetStringTypeA
GetLocaleInfoA
CreateProcessA
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ