Static task
static1
Behavioral task
behavioral1
Sample
06210724a84c6eee0a883e04498be8a540529c9ea6d3d83f54d2bc9002ccb0ea.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
06210724a84c6eee0a883e04498be8a540529c9ea6d3d83f54d2bc9002ccb0ea.exe
Resource
win10v2004-20220812-en
General
-
Target
06210724a84c6eee0a883e04498be8a540529c9ea6d3d83f54d2bc9002ccb0ea
-
Size
439KB
-
MD5
eeefa7277ced48b8b09c110b4b0b6398
-
SHA1
85cc53dec2df2b538051d0824ab9273569998821
-
SHA256
06210724a84c6eee0a883e04498be8a540529c9ea6d3d83f54d2bc9002ccb0ea
-
SHA512
deffc965b35b97a090c7fbc4c49be10348995303577ca6f078e8e0c563fd3e595fdb6e60c64c3691ef881b1f52a2304e5bf562ebfa48b924216e942f12b75263
-
SSDEEP
12288:QdXAMjlSkoxY66JPaAgADdLPOUe1k8x+7aC:QdXAqoi66tgADFOpDY7aC
Malware Config
Signatures
Files
-
06210724a84c6eee0a883e04498be8a540529c9ea6d3d83f54d2bc9002ccb0ea.exe windows x86
13f2004aa48bdcc600f49517395ef857
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
SetLastError
GetLastError
CopyFileW
CreateFileW
GetProcAddress
ReadFile
WriteFile
SetEndOfFile
SetFilePointer
FlushFileBuffers
ResetEvent
GetVersionExW
GetSystemInfo
LoadResource
FreeResource
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryW
FreeLibrary
FormatMessageW
LockResource
FindResourceW
ExitProcess
QueryPerformanceCounter
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSection
CreateEventW
CreateMutexW
WaitForSingleObject
HeapSize
HeapAlloc
GetStdHandle
HeapCreate
HeapFree
GetCurrentProcessId
LeaveCriticalSection
VirtualQuery
GetCurrentThread
LocalAlloc
LocalFree
TlsAlloc
TlsFree
TlsSetValue
SleepEx
RaiseException
SetEvent
SetThreadPriority
QueueUserAPC
SetPriorityClass
GetConsoleWindow
SetCommTimeouts
SizeofResource
GetProcessHeap
CreateFileA
SetEnvironmentVariableA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTickCount
GetModuleFileNameA
WriteConsoleW
GetStartupInfoW
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
LCMapStringW
CompareStringW
GetCPInfo
HeapSetInformation
GetCommandLineA
GetConsoleMode
GetConsoleCP
CreateThread
ExitThread
GetFileType
InitializeCriticalSectionAndSpinCount
SetStdHandle
SetConsoleCtrlHandler
GetDateFormatA
GetTimeFormatA
HeapReAlloc
RtlUnwind
GetLocaleInfoW
DecodePointer
EncodePointer
EnterCriticalSection
TlsGetValue
GetCurrentThreadId
CloseHandle
GetCommandLineW
GetModuleHandleW
GetTimeZoneInformation
QueryPerformanceFrequency
FileTimeToLocalFileTime
SystemTimeToFileTime
InterlockedCompareExchange
GetSystemTimeAsFileTime
Sleep
InterlockedExchange
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
user32
ShowWindow
wsprintfW
CharToOemA
ws2_32
getservbyname
ntohl
ntohs
wininet
InternetReadFile
HttpEndRequestW
InternetCrackUrlW
InternetConnectW
InternetOpenW
HttpSendRequestExW
InternetWriteFile
HttpOpenRequestW
HttpQueryInfoW
InternetSetOptionW
InternetCloseHandle
shell32
SHGetFolderPathW
advapi32
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Sections
.text Size: 338KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ