Static task
static1
Behavioral task
behavioral1
Sample
506662c58acf9d8d6a0f770410a622e468ff952a6c2eabd6da347c837349362f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
506662c58acf9d8d6a0f770410a622e468ff952a6c2eabd6da347c837349362f.exe
Resource
win10v2004-20220901-en
General
-
Target
506662c58acf9d8d6a0f770410a622e468ff952a6c2eabd6da347c837349362f
-
Size
298KB
-
MD5
367a5559d0969fa13c579733fb52bcd1
-
SHA1
6fee5048c2e16faa822316aea8fadbf7a8d49b59
-
SHA256
506662c58acf9d8d6a0f770410a622e468ff952a6c2eabd6da347c837349362f
-
SHA512
f98fc3f3d17a029ebd6fe30b49e821c8e4ec0fbd0538143a1d0c4b199122645b059538ac37e34839efbbb7b97bb5423cf0a74ee013c0eb9cea972ee0b5fae9b6
-
SSDEEP
6144:0rGgkI8RvKTrNLjt+G1t2SMFpwrjUJQ/4g+yYcNWGbx5Tc8:vI8RYNXgG1iPwrIJsAsT
Malware Config
Signatures
Files
-
506662c58acf9d8d6a0f770410a622e468ff952a6c2eabd6da347c837349362f.exe windows x86
2a6dd7a5126edcdeae991cb9535d11b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileExW
LoadResource
IsBadStringPtrW
TryEnterCriticalSection
GetFileTime
GetVersionExA
GetSystemDirectoryA
WritePrivateProfileStructW
PostQueuedCompletionStatus
CallNamedPipeW
SetTimeZoneInformation
GetModuleHandleA
WriteConsoleOutputW
ReadConsoleInputW
CreateThread
ReleaseMutex
CopyFileA
IsSystemResumeAutomatic
WinExec
UnhandledExceptionFilter
HeapAlloc
OpenFileMappingW
GetThreadTimes
SleepEx
InterlockedExchangeAdd
SetLocaleInfoA
GetCalendarInfoA
GetComputerNameW
lstrlenA
IsBadWritePtr
GetProcessWorkingSetSize
BeginUpdateResourceA
GetSystemPowerStatus
LeaveCriticalSection
WriteFileGather
IsBadStringPtrA
GetFileAttributesW
GetBinaryTypeA
SetHandleInformation
GetStartupInfoA
FindFirstChangeNotificationA
DeleteFiber
IsValidLocale
SwitchToThread
GetCurrencyFormatW
lstrcpynA
GetStringTypeW
GetTempFileNameA
GlobalReAlloc
FindCloseChangeNotification
LocalFileTimeToFileTime
OpenSemaphoreW
GetTimeFormatA
ReadFileScatter
GetFileType
ClearCommBreak
ScrollConsoleScreenBufferW
MapViewOfFileEx
CreateDirectoryA
QueryPerformanceCounter
CreateSemaphoreW
EnumTimeFormatsW
WriteConsoleOutputAttribute
GetVersion
Heap32First
GetStringTypeExW
GetNumberFormatA
DeleteFileW
OpenWaitableTimerA
ReadConsoleInputA
GetTapeParameters
user32
SendMessageTimeoutW
DefDlgProcW
GetWindowDC
DialogBoxIndirectParamA
VkKeyScanExA
GetUserObjectSecurity
GetClipboardViewer
EndDialog
MessageBoxW
CloseDesktop
CopyImage
CallWindowProcA
CallNextHookEx
SetKeyboardState
GetQueueStatus
CreateIconIndirect
DrawFrameControl
wvsprintfW
DrawStateW
SetPropW
GetKeyboardState
CharNextW
GetMessageTime
SendDlgItemMessageA
OpenDesktopA
SetClassWord
GetCursor
GetKeyNameTextA
GetPropW
ChangeMenuA
RedrawWindow
SendDlgItemMessageW
ScrollWindowEx
MessageBeep
SetUserObjectInformationA
GetCursorPos
GetDlgCtrlID
DlgDirListW
CharLowerBuffA
SetWindowRgn
GetPropA
gdi32
GetStockObject
BitBlt
StretchBlt
CreateScalableFontResourceW
PolyBezier
GetCharWidthW
AnimatePalette
RemoveFontResourceW
GetColorSpace
StrokePath
CreateEnhMetaFileW
GetBoundsRect
SetMetaRgn
StretchDIBits
CreateScalableFontResourceA
Polyline
CreatePolyPolygonRgn
GetBkMode
AddFontResourceA
SetTextColor
SetWinMetaFileBits
EnumFontFamiliesW
StrokeAndFillPath
TranslateCharsetInfo
FloodFill
PolyTextOutW
GetNearestColor
StartPage
ColorMatchToTarget
GetEnhMetaFileA
GetPixel
GetMetaFileBitsEx
advapi32
RegLoadKeyA
AdjustTokenPrivileges
RegSetValueA
AccessCheck
RegLoadKeyW
GetEffectiveRightsFromAclW
CryptSetKeyParam
CryptSetProviderExA
GetServiceKeyNameW
CryptDecrypt
CreateProcessAsUserW
RegEnumKeyExA
ChangeServiceConfigA
SetSecurityInfo
BuildSecurityDescriptorA
GetServiceDisplayNameW
GetPrivateObjectSecurity
CryptAcquireContextA
GetCurrentHwProfileA
AddAccessAllowedAce
RegSetValueExW
ObjectCloseAuditAlarmA
ReportEventW
GetSidLengthRequired
shell32
DragQueryFileA
SHInvokePrinterCommandW
SHEmptyRecycleBinA
FindExecutableA
SHGetPathFromIDListA
SHGetFileInfoA
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strlen
Sections
.text Size: 271KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE