Static task
static1
Behavioral task
behavioral1
Sample
6d221c71428c24e12ffc7a65e8ba51995d33b0597fecf1efa98c33e303efa0b1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6d221c71428c24e12ffc7a65e8ba51995d33b0597fecf1efa98c33e303efa0b1.exe
Resource
win10v2004-20220812-en
General
-
Target
6d221c71428c24e12ffc7a65e8ba51995d33b0597fecf1efa98c33e303efa0b1
-
Size
568KB
-
MD5
edfc594e980266881e0b20ae52dab235
-
SHA1
a3ad30d7e329da5b71aa5827d95f80fed70d500f
-
SHA256
6d221c71428c24e12ffc7a65e8ba51995d33b0597fecf1efa98c33e303efa0b1
-
SHA512
a83fba3fc8b1fb4e05fc6f6a19cfbd75ac1f78f2692d5a13381487782a991d66d858227e34a9237a63a00b8245080a5ed3e91d225796d0b18846a9b1fc6418d5
-
SSDEEP
12288:LU4nC251Jeg4M7Mml2DkQUCFF0P7HA2N41zx1pc0QU:4GzJeXM7tl2dFQDvObA
Malware Config
Signatures
Files
-
6d221c71428c24e12ffc7a65e8ba51995d33b0597fecf1efa98c33e303efa0b1.exe windows x86
4eee694442ad2a136522ca4430078718
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CountClipboardFormats
GetMenuItemID
DdeUninitialize
DrawFocusRect
RedrawWindow
PostQuitMessage
LoadStringW
RegisterClassExA
ReuseDDElParam
EndMenu
DdeClientTransaction
DialogBoxParamA
MessageBoxA
ChangeMenuW
DefDlgProcW
TileWindows
EnumPropsA
SetThreadDesktop
GetClipboardOwner
CreateWindowExW
ShowWindow
MapVirtualKeyA
GetMessageTime
SetWindowTextW
RegisterClassA
GetWindowPlacement
GetWindowInfo
EnumDisplayDevicesA
OemToCharA
GetListBoxInfo
OemToCharBuffW
PaintDesktop
ValidateRgn
DestroyWindow
CallNextHookEx
GetUserObjectInformationA
LoadBitmapW
RegisterClassW
GetSystemMenu
EnumDisplaySettingsExA
CheckMenuItem
DefWindowProcW
LoadImageW
kernel32
FreeLibrary
IsValidCodePage
GetVersionExW
GetSystemInfo
SetEnvironmentVariableA
GetPrivateProfileSectionW
CreateEventW
FreeLibraryAndExitThread
GetConsoleOutputCP
LCMapStringW
UnhandledExceptionFilter
GetStartupInfoA
GetCurrentThread
InterlockedExchange
WriteConsoleOutputW
GetNumberFormatA
GetEnvironmentStringsW
TlsAlloc
GetProcAddress
EnterCriticalSection
GetTickCount
ReadFile
TlsFree
GetLocaleInfoA
HeapDestroy
DuplicateHandle
CopyFileA
GetFileType
ExpandEnvironmentStringsA
WriteConsoleA
EnumDateFormatsA
SetUnhandledExceptionFilter
GetCurrentProcessId
GetModuleHandleA
IsValidLocale
InterlockedDecrement
GetConsoleMode
RtlUnwind
OpenMutexA
FreeEnvironmentStringsW
GetTimeFormatA
EnumCalendarInfoExA
FlushFileBuffers
TerminateProcess
GetFileAttributesExW
GetCurrentProcess
InterlockedIncrement
WriteConsoleOutputCharacterW
VirtualProtect
GetCPInfo
VirtualFreeEx
CreateFileA
GetTempFileNameW
ReadConsoleOutputA
Sleep
CompareStringA
IsDebuggerPresent
GetComputerNameA
TlsSetValue
GlobalReAlloc
HeapCreate
ReadConsoleInputA
ExitProcess
GetConsoleCP
WideCharToMultiByte
GetACP
RtlFillMemory
HeapAlloc
GetUserDefaultLCID
SetConsoleCtrlHandler
GetCurrentThreadId
LocalFlags
SetFilePointer
GetCommandLineA
WaitForSingleObjectEx
WriteFile
VirtualFree
GetStdHandle
GetAtomNameA
SetHandleCount
FreeEnvironmentStringsA
FindResourceExW
GetStringTypeW
GetSystemTimeAsFileTime
EnumSystemLocalesA
HeapSize
GetLastError
SetLastError
VirtualQuery
GetDriveTypeA
LCMapStringA
CloseHandle
QueryPerformanceCounter
DeleteCriticalSection
EnumCalendarInfoExW
HeapReAlloc
FindFirstFileExA
WriteConsoleW
EnumTimeFormatsA
InitializeCriticalSection
CompareStringW
CreateDirectoryW
CreateMutexA
MultiByteToWideChar
GetLocaleInfoW
GetModuleFileNameA
SetStdHandle
TlsGetValue
LoadLibraryExA
GetOEMCP
ContinueDebugEvent
GetDateFormatA
GetTimeZoneInformation
ReadConsoleInputW
LoadLibraryA
FlushViewOfFile
LocalSize
EnumSystemCodePagesA
GetStringTypeA
SetThreadContext
VirtualAlloc
GetProcessHeap
LocalCompact
HeapFree
EnumResourceLanguagesW
GetNumberFormatW
GetEnvironmentStrings
LeaveCriticalSection
GetVersionExA
comctl32
InitCommonControlsEx
CreateStatusWindow
ImageList_LoadImage
CreateStatusWindowA
ImageList_Add
ImageList_SetImageCount
ImageList_GetDragImage
ImageList_LoadImageW
ImageList_Duplicate
ImageList_ReplaceIcon
CreateToolbar
ImageList_Draw
CreateStatusWindowW
CreateToolbarEx
shell32
CommandLineToArgvW
SHQueryRecycleBinA
SHGetSpecialFolderPathA
Sections
.text Size: 176KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ