Static task
static1
Behavioral task
behavioral1
Sample
6427e1597941cfcb029bb1a41386d795f2c872f4a07ad4c3cac9b0584d5fdcb9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6427e1597941cfcb029bb1a41386d795f2c872f4a07ad4c3cac9b0584d5fdcb9.exe
Resource
win10v2004-20220812-en
General
-
Target
6427e1597941cfcb029bb1a41386d795f2c872f4a07ad4c3cac9b0584d5fdcb9
-
Size
255KB
-
MD5
040f014cc5a202f559165bfa30bfa64d
-
SHA1
707588cf54d34967ef11f7e823dd9b2e92c279c6
-
SHA256
6427e1597941cfcb029bb1a41386d795f2c872f4a07ad4c3cac9b0584d5fdcb9
-
SHA512
0afb7ebd8f24496f6b372ff11a9cd934f6f04625eeef7623d4f7770051f6b92650c9c0a944954716140622accac6727a12fb5e584e8c5517262c019517479547
-
SSDEEP
3072:EL609US++rh9lVLG91qCVglXBpCE5f6JgWOpRZVdGMwUyI/J:9ex+wlVFUg1BESflhpr4UzJ
Malware Config
Signatures
Files
-
6427e1597941cfcb029bb1a41386d795f2c872f4a07ad4c3cac9b0584d5fdcb9.exe windows x86
7f3b5057a8e98becfda3ca5b34c28bc3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterHotKey
GetSystemMetrics
UnregisterClassA
ShowWindow
GetWindowLongA
LoadBitmapA
SetMenu
SetWindowLongA
GetClientRect
IsWindowVisible
GetWindowRect
GetMenu
MessageBoxExA
EnableMenuItem
GetSubMenu
LoadMenuA
ScreenToClient
WindowFromPoint
ClientToScreen
RegisterWindowMessageA
CopyRect
DrawTextExA
PtInRect
CheckMenuItem
OffsetRect
SetTimer
DefWindowProcA
PostMessageA
UpdateWindow
SetForegroundWindow
SetWindowRgn
IsWindow
IsRectEmpty
wsprintfA
CreateWindowExA
RegisterClassA
SetRect
DrawIcon
GetIconInfo
SetWindowTextA
TranslateMessage
PeekMessageA
DispatchMessageA
TrackPopupMenu
GetCursorPos
ReleaseCapture
SetCapture
SetCursor
InvalidateRect
LoadCursorA
GetWindowDC
LoadCursorFromFileA
GetCursor
LoadIconA
GetDesktopWindow
GetDC
ReleaseDC
EnableWindow
MessageBoxA
SendMessageA
DestroyWindow
UnregisterHotKey
shell32
ShellExecuteA
SHGetPathFromIDListA
Shell_NotifyIconA
SHBrowseForFolderA
SHGetMalloc
ole32
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
advapi32
RegOpenKeyExA
RegQueryValueA
RegCloseKey
gdi32
RoundRect
CreatePen
CreateRectRgn
Ellipse
CreateSolidBrush
CreateDIBitmap
PatBlt
CreateBrushIndirect
FillPath
EndPath
BeginPath
SetTextColor
SetBkMode
StretchDIBits
CreateHatchBrush
ExtTextOutA
CreateRoundRectRgn
GetStockObject
GetTextExtentPointA
TextOutA
GetTextExtentPoint32A
SelectObject
CombineRgn
OffsetRgn
GetPixel
GetDIBits
Rectangle
StretchBlt
BitBlt
CreateCompatibleBitmap
DeleteDC
GetObjectA
GetDeviceCaps
SetDIBits
DeleteObject
CreateEllipticRgn
CreateFontIndirectA
SetBkColor
CreateCompatibleDC
opengl32
glPushMatrix
glRasterPos4i
glViewport
glFogfv
glTexCoord3iv
glTexGenfv
glLighti
comctl32
ImageList_Add
kernel32
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapFree
GetLastError
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetACP
RaiseException
GetCommandLineA
RtlUnwind
GetLocalTime
ExitProcess
GetModuleHandleW
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
HeapAlloc
WriteFile
GetStdHandle
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
GetLocaleInfoW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CompareStringA
CompareStringW
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
InterlockedIncrement
GetSystemTimeAsFileTime
GlobalUnlock
lstrcpyA
GlobalLock
GlobalHandle
WinExec
OpenFile
SetStdHandle
GetCPInfo
VirtualAlloc
GetVersionExA
SetFilePointerEx
FindVolumeClose
GetCommMask
BeginUpdateResourceA
SetVolumeMountPointA
GlobalFree
GetStartupInfoA
GetModuleHandleA
GetCurrentThreadId
FindFirstFileA
FindClose
lstrlenA
GetModuleFileNameA
Sleep
CopyFileA
CreateFileA
CloseHandle
SetThreadPriority
DeleteFileA
FreeLibrary
MulDiv
GetProcAddress
GetWindowsDirectoryA
LoadLibraryA
GlobalAlloc
InterlockedDecrement
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 26.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ