Static task
static1
Behavioral task
behavioral1
Sample
6da71a253f4009f4291811cd58f7c600231e04dd610c486b10e23dc386a5b05f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6da71a253f4009f4291811cd58f7c600231e04dd610c486b10e23dc386a5b05f.exe
Resource
win10v2004-20220812-en
General
-
Target
6da71a253f4009f4291811cd58f7c600231e04dd610c486b10e23dc386a5b05f
-
Size
296KB
-
MD5
8a93fd79774b665a87f3d4ad98d9c811
-
SHA1
66a8d7d55d09622eefbcdd7142fde03cc5e68a56
-
SHA256
6da71a253f4009f4291811cd58f7c600231e04dd610c486b10e23dc386a5b05f
-
SHA512
f171cd2a667dccd48b959810b54693e253fdbe0c2301ebbc75a90062f7be0507cd4842584232945dfcfedf58aaa2704e87655f430f4d24097a798828f014d3d5
-
SSDEEP
6144:OThLagSVu9JytOmFKmrwJaeYMBDJorpO7AV3JKMMLzw:OThOgKu9JykmFlrJeD1JoA7ARJ54
Malware Config
Signatures
Files
-
6da71a253f4009f4291811cd58f7c600231e04dd610c486b10e23dc386a5b05f.exe windows x86
c591ce0fc8faefad3f418f316a2bb3f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
_TrackMouseEvent
ImageList_Replace
ImageList_DrawIndirect
ImageList_BeginDrag
ImageList_SetOverlayImage
ImageList_GetIconSize
InitCommonControlsEx
PropertySheetW
ImageList_Remove
ImageList_DragMove
ImageList_DragLeave
DestroyPropertySheetPage
ImageList_SetDragCursorImage
PropertySheetA
ord17
ImageList_Destroy
ImageList_Draw
ImageList_DragShowNolock
CreatePropertySheetPageA
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_SetBkColor
ImageList_LoadImageA
ImageList_GetIcon
ImageList_Create
ImageList_GetBkColor
ImageList_Add
ImageList_ReplaceIcon
CreatePropertySheetPageW
ImageList_EndDrag
ImageList_GetImageCount
ImageList_AddMasked
ole32
ReadFmtUserTypeStg
SetConvertStg
OleInitialize
CoTaskMemRealloc
CoRevokeClassObject
OleCreateFromData
OleSetClipboard
ReleaseStgMedium
GetRunningObjectTable
ProgIDFromCLSID
OleCreateLinkToFile
CoLockObjectExternal
CoTaskMemFree
CoFreeUnusedLibraries
CoMarshalInterThreadInterfaceInStream
WriteFmtUserTypeStg
CoTaskMemAlloc
OleSave
OleDestroyMenuDescriptor
CoGetClassObject
CoRegisterClassObject
CoDisconnectObject
OleUninitialize
OleDuplicateData
ReadClassStg
OleCreateMenuDescriptor
CoCreateGuid
OleLockRunning
OleIsCurrentClipboard
DoDragDrop
OleFlushClipboard
CoTreatAsClass
CLSIDFromProgID
RegisterDragDrop
CreateStreamOnHGlobal
CLSIDFromString
CoRegisterMessageFilter
GetHGlobalFromILockBytes
StringFromGUID2
OleLoad
CoUninitialize
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleTranslateAccelerator
OleGetClipboard
OleSetMenuDescriptor
CoGetInterfaceAndReleaseStream
OleIsRunning
CreateItemMoniker
OleCreateFromFile
IsAccelerator
RevokeDragDrop
OleGetIconOfClass
CreateFileMoniker
CoInitialize
StgOpenStorageOnILockBytes
CoInitializeEx
OleCreateLinkFromData
CoResumeClassObjects
CreateDataAdviseHolder
CoCreateInstance
OleQueryLinkFromData
StringFromCLSID
OleCreate
StgOpenStorage
WriteClassStg
CoSuspendClassObjects
OleRegGetUserType
OleSetContainedObject
CreateBindCtx
StgCreateDocfile
OleQueryCreateFromData
shell32
SHGetPathFromIDListA
ShellExecuteW
SHGetFileInfoW
ShellExecuteExA
DragAcceptFiles
SHGetFileInfoA
ExtractIconA
DragQueryFileW
SHGetMalloc
ord155
SHGetPathFromIDListW
DragFinish
SHAppBarMessage
ShellExecuteExW
Shell_NotifyIconW
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteA
SHChangeNotify
user32
GetMenuItemInfoA
GetParent
MapDialogRect
CloseClipboard
GetDesktopWindow
GetSysColorBrush
CreateDialogParamW
DrawFrameControl
SetLayeredWindowAttributes
OffsetRect
LoadCursorW
DestroyIcon
TrackPopupMenu
GetDlgItemTextA
SetMenuItemInfoW
TabbedTextOutA
WaitMessage
EnableWindow
IsRectEmpty
GetActiveWindow
CheckMenuItem
ModifyMenuW
SetMenuItemInfoA
GetClassInfoA
GetClassInfoExA
GetDC
SetDlgItemInt
TranslateMessage
EndDeferWindowPos
DrawEdge
GetWindowLongW
SendDlgItemMessageA
CreateWindowExW
DrawTextA
CheckDlgButton
GetAsyncKeyState
DestroyWindow
UnregisterHotKey
AppendMenuA
GetClassNameA
FrameRect
CharUpperA
PostMessageW
EqualRect
LoadIconW
RedrawWindow
PostMessageA
SystemParametersInfoW
SetMenu
ScrollWindow
GetMenu
RegisterWindowMessageA
GetSystemMetrics
EndPaint
CallNextHookEx
GetClassNameW
GetMenuStringW
CreateMenu
GetClassLongW
DeferWindowPos
PostThreadMessageA
SetMenuItemBitmaps
PostQuitMessage
GetWindowTextLengthW
SetCapture
SetCaretPos
DestroyCursor
ClientToScreen
SetDlgItemTextA
EnableMenuItem
VkKeyScanA
DrawTextW
GetClassInfoExW
UnhookWindowsHookEx
OpenClipboard
RegisterClassExA
GetWindowTextA
CharNextW
GetCapture
GetMenuItemInfoW
wsprintfA
TabbedTextOutW
CreateDialogIndirectParamA
ValidateRect
GetMenuCheckMarkDimensions
CreatePopupMenu
GetWindow
IsClipboardFormatAvailable
LoadMenuA
GetMessageA
DrawFocusRect
IntersectRect
WinHelpA
DestroyCaret
DialogBoxParamW
GetWindowLongA
DrawStateA
MoveWindow
GetWindowRect
SetFocus
WindowFromPoint
GetNextDlgGroupItem
SystemParametersInfoA
FillRect
SetWindowRgn
LoadBitmapA
LoadCursorA
UnregisterClassW
GetKeyState
BeginPaint
GetScrollInfo
IsChild
GetDlgItemInt
GetLastActivePopup
InvalidateRect
DrawMenuBar
BeginDeferWindowPos
CharUpperW
GetCursorPos
CreateWindowExA
LoadBitmapW
CharNextA
CallWindowProcA
WindowFromDC
GetFocus
SetClipboardData
DrawTextExW
RemovePropW
GetDlgCtrlID
InsertMenuItemA
HideCaret
DefWindowProcW
RemovePropA
GetMessagePos
DdeFreeDataHandle
GetSubMenu
UpdateWindow
SetPropW
MapWindowPoints
DestroyMenu
ShowCaret
RegisterClassW
GetWindowPlacement
CreateDialogParamA
UnionRect
ScreenToClient
GetMonitorInfoW
InflateRect
SetParent
PeekMessageA
MessageBoxA
DefFrameProcA
InvalidateRgn
SetCursor
GetDoubleClickTime
DefWindowProcA
DispatchMessageA
CopyIcon
GetWindowDC
ShowOwnedPopups
GetClipboardFormatNameA
LoadAcceleratorsA
GetKeyboardState
GetNextDlgTabItem
IsZoomed
MessageBoxW
LoadStringA
SetRect
LockWindowUpdate
SetForegroundWindow
SetWindowLongW
GetMessageTime
LoadImageW
IsIconic
CopyRect
AppendMenuW
GetMenuItemCount
SetScrollRange
GetSysColor
SetWindowPlacement
GetWindowRgn
SetWindowLongA
IsWindowEnabled
RegisterClassA
AdjustWindowRectEx
DefMDIChildProcW
GetTopWindow
SetPropA
TranslateAcceleratorW
CreateAcceleratorTableA
TranslateMDISysAccel
GetClientRect
GetIconInfo
DrawTextExA
EndDialog
SetWindowPos
GetMenuItemID
GrayStringA
ModifyMenuA
GetMenuState
DrawIconEx
ReleaseDC
GetCaretPos
CreateIconIndirect
UnregisterClassA
SetCursorPos
EnumChildWindows
DispatchMessageW
GetMessageW
LoadIconA
GrayStringW
IsWindowUnicode
ShowWindow
ChangeClipboardChain
CallWindowProcW
GetClassLongA
SetRectEmpty
SetMenuDefaultItem
SendMessageA
IsWindowVisible
GetPropA
AdjustWindowRect
LoadAcceleratorsW
GetScrollRange
IsWindow
PtInRect
wsprintfW
SetWindowsHookExW
ReleaseCapture
SetTimer
GetWindowThreadProcessId
MessageBeep
CopyAcceleratorTableA
DrawIcon
GetDlgItem
ExcludeUpdateRgn
CopyAcceleratorTableW
KillTimer
SetActiveWindow
IsDialogMessageW
RegisterWindowMessageW
RemoveMenu
SetWindowTextA
wvsprintfA
oleaut32
LoadTypeLi
winspool.drv
EnumPortsW
OpenPrinterA
EnumPrintersW
DeviceCapabilitiesW
FindFirstPrinterChangeNotification
FreePrinterNotifyInfo
EnumJobsW
DocumentPropertiesA
SetJobW
FindNextPrinterChangeNotification
GetPrinterW
OpenPrinterW
ord204
DocumentPropertiesW
ClosePrinter
SetPrinterDataW
SetPrinterW
GetJobW
kernel32
Sleep
LoadResource
CompareStringA
GetTimeFormatW
SizeofResource
OpenProcess
InterlockedCompareExchange
ExpandEnvironmentStringsA
CreateFileMappingW
ReleaseMutex
SetStdHandle
CreateDirectoryW
GetLastError
CreateDirectoryA
InitializeCriticalSection
LocalAlloc
EnumSystemLocalesA
FileTimeToLocalFileTime
MoveFileA
LocalFree
OpenMutexA
WritePrivateProfileStringA
CreateFileA
FormatMessageW
WriteConsoleA
lstrcatA
GetModuleHandleW
GetFullPathNameA
TlsFree
GetShortPathNameA
InterlockedExchange
GlobalHandle
GetLocalTime
FatalAppExitA
LCMapStringA
DeleteCriticalSection
GetTimeFormatA
VirtualAlloc
OutputDebugStringA
UnhandledExceptionFilter
HeapCreate
SetHandleCount
SetFileAttributesA
FileTimeToSystemTime
GetTempFileNameA
GetCPInfo
CompareStringW
GetCurrentProcess
DeleteFileA
GetStartupInfoW
GetTickCount
GetLocaleInfoW
GetExitCodeThread
TerminateThread
ExpandEnvironmentStringsW
DebugBreak
VirtualProtect
WriteFile
GlobalFlags
EnumResourceLanguagesW
IsBadWritePtr
GlobalGetAtomNameW
CloseHandle
LoadLibraryExA
GetModuleHandleA
HeapReAlloc
GetCurrentProcessId
SetLastError
GetSystemDefaultLCID
LoadLibraryA
SystemTimeToFileTime
SetCurrentDirectoryA
TlsSetValue
FreeEnvironmentStringsW
GetUserDefaultLCID
GetProcAddress
GetFileType
GetPrivateProfileStringA
GetWindowsDirectoryA
GetProfileStringA
MultiByteToWideChar
GetThreadLocale
ConvertDefaultLocale
GetVersion
LocalReAlloc
CreateFileMappingA
FindClose
LeaveCriticalSection
GetCommandLineA
GetFileAttributesA
lstrlenW
MulDiv
FormatMessageA
WideCharToMultiByte
GetLocaleInfoA
TlsGetValue
lstrcmpiA
GetFileAttributesW
GlobalLock
GetThreadPriority
MoveFileW
SetConsoleCtrlHandler
HeapFree
EnterCriticalSection
IsDebuggerPresent
GlobalReAlloc
GlobalGetAtomNameA
lstrcmpA
GlobalSize
LockFile
GetFullPathNameW
FlushFileBuffers
GetProcessHeap
GetConsoleCP
GetDiskFreeSpaceA
InterlockedIncrement
FindNextFileW
SetThreadPriority
DeviceIoControl
GlobalUnlock
VirtualFree
HeapAlloc
WritePrivateProfileSectionA
GetStringTypeW
FindFirstFileW
QueryPerformanceCounter
GetEnvironmentVariableW
TlsAlloc
SetEnvironmentVariableA
SetUnhandledExceptionFilter
UnmapViewOfFile
GetStdHandle
GetStringTypeA
WaitForSingleObject
GetEnvironmentStringsW
SetEnvironmentVariableW
RtlUnwind
lstrcpynA
GetShortPathNameW
HeapDestroy
FreeEnvironmentStringsA
GetModuleFileNameW
SetFilePointer
FindResourceA
GetVersionExA
ExitProcess
GetCommandLineW
IsValidLocale
DuplicateHandle
GetCurrentThreadId
GetOEMCP
CreatePipe
FreeLibrary
GetACP
FindNextFileA
GetConsoleMode
lstrlenA
FreeConsole
VirtualQuery
GetVersionExW
ResetEvent
InterlockedDecrement
UnlockFile
CreateThread
GetComputerNameExW
GetDateFormatW
GetSystemTime
SystemTimeToTzSpecificLocalTime
SetErrorMode
GlobalDeleteAtom
GlobalAlloc
ReadFile
GetEnvironmentStrings
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetConsoleOutputCP
GetCurrentThread
GetVolumeInformationA
SetFileTime
RaiseException
LCMapStringW
HeapSize
TerminateProcess
WriteConsoleW
CreateMutexA
IsValidCodePage
GetProcessVersion
GetFileSize
GetTempPathW
GetTempPathA
GetModuleFileNameA
FindFirstFileA
GetCurrentDirectoryA
GetStartupInfoA
SetEndOfFile
LoadLibraryExW
GetStringTypeExA
MapViewOfFile
GetDateFormatA
ResumeThread
GetFileTime
GlobalFree
InitializeCriticalSectionAndSpinCount
wininet
FtpGetFileSize
FtpOpenFileW
HttpSendRequestW
DetectAutoProxyUrl
InternetConnectA
InternetCheckConnectionW
InternetCanonicalizeUrlA
FtpCreateDirectoryA
InternetReadFile
HttpQueryInfoW
InternetCanonicalizeUrlW
InternetOpenW
InternetGetConnectedState
FtpOpenFileA
FtpSetCurrentDirectoryA
InternetSetStatusCallback
InternetOpenA
InternetCrackUrlW
HttpAddRequestHeadersW
InternetCloseHandle
InternetConnectW
FtpFindFirstFileW
InternetTimeToSystemTimeW
InternetOpenUrlW
InternetGetLastResponseInfoW
InternetGetLastResponseInfoA
InternetWriteFile
advapi32
OpenSCManagerA
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
InitializeAcl
ControlService
LookupPrivilegeValueA
CryptDestroyHash
RegEnumKeyW
RegDeleteValueW
GetTokenInformation
RegCreateKeyW
GetAclInformation
InitiateSystemShutdownA
StartServiceA
QueryServiceConfigA
DeleteService
SetFileSecurityA
GetAce
RegOpenKeyA
FreeSid
RegCreateKeyExA
RegQueryValueExW
RegEnumKeyExA
RegOpenKeyW
RegDeleteKeyA
SetNamedSecurityInfoA
CryptDeriveKey
OpenServiceA
OpenThreadToken
CloseServiceHandle
RegQueryValueA
CryptDestroyKey
RegCreateKeyA
RegEnumKeyA
GetSecurityDescriptorDacl
RegOpenKeyExA
SetSecurityDescriptorDacl
RegSetValueExW
RegNotifyChangeKeyValue
RegDeleteValueA
RegDeleteKeyW
AccessCheck
RegQueryInfoKeyA
InitializeSecurityDescriptor
DeleteAce
CopySid
AllocateAndInitializeSid
GetFileSecurityW
GetNamedSecurityInfoA
AdjustTokenPrivileges
QueryServiceStatus
RegQueryValueExA
RegSetValueExA
CryptHashData
CryptCreateHash
SetFileSecurityW
RegQueryValueW
OpenProcessToken
ImpersonateSelf
EqualSid
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ