Static task
static1
Behavioral task
behavioral1
Sample
a6284054d4f80cf8bffa0342740bbf54dc514eab268fdd6b07436fc8e96d7ba5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a6284054d4f80cf8bffa0342740bbf54dc514eab268fdd6b07436fc8e96d7ba5.exe
Resource
win10v2004-20220812-en
General
-
Target
a6284054d4f80cf8bffa0342740bbf54dc514eab268fdd6b07436fc8e96d7ba5
-
Size
840KB
-
MD5
7ab059c4fe3c42dd4db7892ade115def
-
SHA1
55d9974f355dae8e80d1357d5136b87590c6d6a3
-
SHA256
a6284054d4f80cf8bffa0342740bbf54dc514eab268fdd6b07436fc8e96d7ba5
-
SHA512
d28e40c313c37893eadc45f9403421eec069020ad14ddf8898e2e35ca61037f85f7e4e71388e9c1c09eae1c23feccfd331bcc5476ac627abf94359c1f9c60286
-
SSDEEP
24576:oWQzbsp+vZ2Ob+tVxTPJYY6U1roXn4uU7il1nO:IHP0qYZ1sE
Malware Config
Signatures
Files
-
a6284054d4f80cf8bffa0342740bbf54dc514eab268fdd6b07436fc8e96d7ba5.exe windows x86
6243d279e1ea86986d245609ba939561
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscms
GetStandardColorSpaceProfileW
EnumColorProfilesA
GetColorProfileFromHandle
CreateProfileFromLogColorSpaceA
GetCountColorProfileElements
TranslateColors
DisassociateColorProfileFromDeviceW
CreateDeviceLinkProfile
DisassociateColorProfileFromDeviceA
SetColorProfileElementSize
GetColorDirectoryA
RegisterCMMW
RegisterCMMA
ConvertIndexToColorName
SetColorProfileElementReference
CreateProfileFromLogColorSpaceW
GetNamedProfileInfo
InternalGetPS2PreviewCRD
InstallColorProfileA
CreateMultiProfileTransform
GetStandardColorSpaceProfileA
CloseColorProfile
winmm
DrvGetModuleHandle
waveInPrepareHeader
midiOutOpen
midiOutShortMsg
waveInStart
mmioOpenW
mciFreeCommandResource
mmioOpenA
mmioSetBuffer
midiStreamRestart
waveInGetErrorTextA
mmioRenameW
waveOutGetDevCapsW
midiOutReset
midiOutGetDevCapsA
mmioWrite
midiOutMessage
midiInAddBuffer
msasn1
ASN1CEREncZeroMultibyteString
ASN1BEREncUTF8String
ASN1_GetEncoderOption
ASN1open_free
ASN1BERDecZeroCharString
ASN1char16string_cmp
ASN1BERDecMultibyteString
ASN1_CloseDecoder
ASN1BEREncExplicitTag
ASN1_CloseEncoder2
ASN1BERDecEoid
ASN1BERDecZeroChar32String
ASN1CEREncNewBlkElement
ASN1open_cmp
ASN1EncSetError
ASN1BERDecUTF8String
ASN1intx2uint32
ASN1BERDecU32Val
ASN1BERDecS32Val
ASN1char16string_free
ASN1BEREncBitString
ASN1BERDecSXVal
ASN1CEREncCharString
kernel32
EnumDateFormatsExW
GlobalLock
BackupRead
InvalidateConsoleDIBits
GetNumberOfConsoleInputEvents
WriteConsoleOutputCharacterA
GlobalUnfix
lstrlenW
SetConsoleTextAttribute
VirtualAlloc
GetTimeZoneInformation
FatalAppExitW
GetModuleHandleA
SetFileAttributesA
LoadLibraryA
GetFullPathNameA
QueryDepthSList
EnumTimeFormatsW
RemoveLocalAlternateComputerNameA
GetDefaultCommConfigW
GetFileAttributesExW
winscard
SCardReleaseNewReaderEvent
SCardListInterfacesA
SCardAddReaderToGroupA
SCardAddReaderToGroupW
SCardForgetReaderA
SCardIntroduceReaderW
SCardGetProviderIdW
ClassInstall32
SCardListInterfacesW
SCardControl
SCardFreeMemory
SCardGetAttrib
SCardListCardsW
SCardGetStatusChangeW
SCardIsValidContext
SCardStatusA
SCardListCardsA
SCardListReadersA
SCardForgetCardTypeW
SCardRemoveReaderFromGroupA
SCardIntroduceReaderGroupW
Sections
.text Size: 471KB - Virtual size: 470KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 363KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ