Static task
static1
Behavioral task
behavioral1
Sample
06fb6cd8b6f8291713621429605c9407f828ebe6e3abbbf48c16a0ed3faef754.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06fb6cd8b6f8291713621429605c9407f828ebe6e3abbbf48c16a0ed3faef754.exe
Resource
win10v2004-20220812-en
General
-
Target
06fb6cd8b6f8291713621429605c9407f828ebe6e3abbbf48c16a0ed3faef754
-
Size
780KB
-
MD5
aeab6f6ecb697dc7bf27c8f0c1e880d0
-
SHA1
f79db9dad2593e6e71766b2ac7912c0ec0e7c54c
-
SHA256
06fb6cd8b6f8291713621429605c9407f828ebe6e3abbbf48c16a0ed3faef754
-
SHA512
b77e5c1807e253019df7216254c38e4eaee9d624257f351494dfc31b0673c83db78e85fc756f8aea69482af666a5f818ce7f5ed27201d7aacaf5c255bc153ab2
-
SSDEEP
24576:0oG93G8UDTorei725+PWZ4Le9CV6E2+N4OPY5:0ZtSi72IP64gEp
Malware Config
Signatures
Files
-
06fb6cd8b6f8291713621429605c9407f828ebe6e3abbbf48c16a0ed3faef754.exe windows x86
692ff345d4af942658d9cbb93b4ee5a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleOutputCP
CreateRemoteThread
WriteConsoleA
GetCurrentThread
LoadLibraryA
GetVersion
GetWindowsDirectoryA
CreateFileMappingA
OutputDebugStringA
EnumSystemLocalesW
VirtualQuery
GetCPInfo
IsBadReadPtr
TlsSetValue
GetModuleFileNameA
ConnectNamedPipe
TlsFree
HeapReAlloc
SetConsoleCursorPosition
MapViewOfFile
EnterCriticalSection
HeapAlloc
VirtualUnlock
InitializeCriticalSection
LocalCompact
InterlockedIncrement
GetStdHandle
MultiByteToWideChar
UnhandledExceptionFilter
FreeEnvironmentStringsW
ExitThread
LeaveCriticalSection
HeapValidate
GetEnvironmentStringsW
PulseEvent
DeleteCriticalSection
LCMapStringA
GetVersionExA
IsValidCodePage
WriteConsoleW
EnumTimeFormatsA
GetACP
InterlockedCompareExchange
DeleteFiber
SetPriorityClass
IsDebuggerPresent
GetTickCount
CreateDirectoryExA
RemoveDirectoryW
FreeEnvironmentStringsA
lstrcmpiA
IsValidLocale
GetTimeFormatA
EnumCalendarInfoA
GetCalendarInfoA
GetProcessHeap
SetHandleCount
ExitProcess
ReadConsoleInputW
GetExitCodeThread
GetProcAddress
DebugBreak
DeleteAtom
GetConsoleMode
ReadFile
HeapDestroy
LoadLibraryW
GetCurrentProcess
OpenMutexA
WaitForMultipleObjectsEx
GetConsoleCP
SetTimeZoneInformation
DosDateTimeToFileTime
GlobalFindAtomW
OutputDebugStringW
GetFileType
ReadConsoleInputA
GetLocaleInfoW
InterlockedDecrement
CompareStringW
GetModuleFileNameW
VirtualFree
GetStartupInfoA
SetConsoleMode
SetVolumeLabelA
lstrlenA
EnumCalendarInfoExA
CreateMutexA
SetLocaleInfoA
FreeLibrary
LCMapStringW
FlushFileBuffers
SetFileAttributesW
GetDateFormatA
GetLocaleInfoA
GetStartupInfoW
WaitForSingleObject
GetProfileIntW
GetSystemTimeAsFileTime
RaiseException
WideCharToMultiByte
GetDiskFreeSpaceExW
GetCommandLineA
CompareStringA
CloseHandle
EnumSystemLocalesA
GetStringTypeW
HeapFree
SetLastError
RtlUnwind
SystemTimeToFileTime
GetOEMCP
CopyFileA
VirtualAlloc
HeapCreate
SetUnhandledExceptionFilter
GetSystemDefaultLCID
GetStringTypeA
GetCommandLineW
GetUserDefaultLCID
WriteProfileStringA
WritePrivateProfileStringA
SetConsoleCtrlHandler
CreateFileA
GetEnvironmentStrings
GetCurrentProcessId
ReadConsoleOutputW
GetCurrentThreadId
WriteFile
CreateMailslotA
QueryPerformanceCounter
GlobalGetAtomNameW
TlsAlloc
GetCurrentDirectoryA
SetEnvironmentVariableA
SetFilePointer
InterlockedExchange
EnumDateFormatsExA
FormatMessageW
lstrcmp
SetStdHandle
GetLastError
DebugActiveProcess
lstrcpy
GetTimeZoneInformation
GetLogicalDriveStringsW
GetModuleHandleA
TlsGetValue
TerminateProcess
InterlockedExchangeAdd
user32
TrackPopupMenuEx
DefWindowProcA
SetWindowWord
FlashWindow
DdeInitializeA
ImpersonateDdeClientWindow
GetCapture
ShowWindow
DestroyWindow
SendIMEMessageExW
CreateCaret
RegisterClassA
IsWindowVisible
EnumThreadWindows
RegisterClassExA
SetCaretBlinkTime
MessageBoxW
CharNextA
MapVirtualKeyW
SendDlgItemMessageA
SendInput
ModifyMenuA
DlgDirListA
SendIMEMessageExA
GetTitleBarInfo
CreateDialogParamW
GetWindowTextLengthW
GetThreadDesktop
GetTopWindow
GetWindowModuleFileNameA
VkKeyScanExW
GetMessageA
GetMenuBarInfo
CreateWindowExA
AttachThreadInput
GetClassInfoA
comctl32
ImageList_SetIconSize
ImageList_GetIcon
ImageList_DragEnter
ImageList_GetIconSize
DrawStatusTextA
ImageList_SetOverlayImage
ImageList_Draw
CreateStatusWindowW
ImageList_DragLeave
ImageList_Remove
InitCommonControlsEx
ImageList_GetDragImage
ImageList_AddMasked
DrawInsert
ImageList_Copy
CreatePropertySheetPageW
ImageList_DragShowNolock
ImageList_GetBkColor
CreatePropertySheetPage
ImageList_DragMove
ImageList_GetFlags
ImageList_SetDragCursorImage
ImageList_AddIcon
Sections
.text Size: 300KB - Virtual size: 297KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 288KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ