Static task
static1
Behavioral task
behavioral1
Sample
6f9c7cefb748d6f9b21293aeac3df3c85693940995e23fb6d7fec351abf3e29c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6f9c7cefb748d6f9b21293aeac3df3c85693940995e23fb6d7fec351abf3e29c.exe
Resource
win10v2004-20221111-en
General
-
Target
6f9c7cefb748d6f9b21293aeac3df3c85693940995e23fb6d7fec351abf3e29c
-
Size
31KB
-
MD5
5224d5362290bb013c8280617e45591b
-
SHA1
8eb9e7cdda8e081db580e4370987317e238e3ad5
-
SHA256
6f9c7cefb748d6f9b21293aeac3df3c85693940995e23fb6d7fec351abf3e29c
-
SHA512
e0cd4595d13b833f96d00c8db3919296bf7012bb3bc254313a97075f4c50eea7f9ab2ac6697cdc92db575fdbd5c6f51c5ccbab22519c26cf6401cde4d1f767d4
-
SSDEEP
768:vgvmyXIP0oq3kQUIxVFtZSbvGbll7f1vHcEm:vgvmyXg0iMlZS0ll7f1UE
Malware Config
Signatures
Files
-
6f9c7cefb748d6f9b21293aeac3df3c85693940995e23fb6d7fec351abf3e29c.exe windows x86
145cbe980dae0253e3c59c0adbd171c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CloseHandle
ReleaseMutex
OpenMutexA
lstrlenA
lstrcpynA
WaitForSingleObject
GetLastError
CreateMutexA
GetModuleHandleA
ExitProcess
CopyFileA
GlobalMemoryStatusEx
GetSystemInfo
lstrcpyA
GetSystemDefaultUILanguage
TerminateProcess
ExitThread
GetStartupInfoA
CreateProcessA
GetShortPathNameA
GetEnvironmentVariableA
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CreateThread
lstrcmpA
Sleep
GetLocalTime
WinExec
GetModuleFileNameA
LoadLibraryA
GetCurrentThreadId
GetProcAddress
user32
GetMessageA
GetDesktopWindow
GetInputState
PostThreadMessageA
wsprintfA
advapi32
RegQueryValueExA
StartServiceA
RegOpenKeyA
RegSetValueExA
RegCloseKey
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeleteService
RegOpenKeyExA
CreateServiceA
shell32
ShellExecuteExA
SHChangeNotify
ShellExecuteA
ws2_32
select
__WSAFDIsSet
recv
setsockopt
send
socket
connect
gethostname
gethostbyname
WSACleanup
WSAStartup
closesocket
inet_ntoa
htonl
WSAIoctl
sendto
inet_addr
htons
shlwapi
SHDeleteKeyA
iphlpapi
GetIfTable
GetAdaptersInfo
msvcrt
atoi
strcpy
strstr
strcspn
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
free
strcmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_except_handler3
strncmp
realloc
malloc
strlen
sprintf
memset
memcpy
strncpy
strcat
Sections
.data Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ