Static task
static1
Behavioral task
behavioral1
Sample
6800a896cf8979ad9c9c6aa92dd19a541ce58ea5f4b0232d02413839f34cc946.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6800a896cf8979ad9c9c6aa92dd19a541ce58ea5f4b0232d02413839f34cc946.exe
Resource
win10v2004-20221111-en
General
-
Target
6800a896cf8979ad9c9c6aa92dd19a541ce58ea5f4b0232d02413839f34cc946
-
Size
1.9MB
-
MD5
6aae98ba961001c3a53362335112949f
-
SHA1
bb7a79cc62721a5dfd0d60e79af2b6d755a54d05
-
SHA256
6800a896cf8979ad9c9c6aa92dd19a541ce58ea5f4b0232d02413839f34cc946
-
SHA512
33eb423d2e90a6cbe4c0f4cfa4550822b9770527c6dd0bbb1bba6ce3d36d03a0239e7ddf1ed083ebeba49be1cfd552c395241cc99d7d7b35cd913f45e8135e7a
-
SSDEEP
49152:Z11111v/cG25X3Wpcl1ucu16mdbnLwzrG:Z11111XcG293Wpcl1ucu0mdbnLwzrG
Malware Config
Signatures
Files
-
6800a896cf8979ad9c9c6aa92dd19a541ce58ea5f4b0232d02413839f34cc946.exe windows x86
ba68351a40a68cb7e7a8b06a1e314237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowLongA
SetClassLongA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
SetFocus
PeekMessageA
PostQuitMessage
EndPaint
GetSystemMetrics
MessageBoxA
InvalidateRect
GetDC
SetWindowTextA
GetKeyState
CreateWindowExA
GetDlgItem
IsIconic
ScreenToClient
EnableWindow
CallWindowProcA
SetForegroundWindow
SetCursor
advapi32
RegCreateKeyA
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegLoadKeyA
kernel32
LeaveCriticalSection
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
MultiByteToWideChar
GetVersionExA
InterlockedIncrement
GetTickCount
WritePrivateProfileStringA
Sleep
TlsGetValue
VirtualFree
CreateFileW
HeapCreate
GetEnvironmentVariableA
TerminateProcess
FormatMessageW
LocalFree
SetEvent
SetEnvironmentVariableA
HeapDestroy
GetModuleHandleW
GetSystemTimeAsFileTime
ReadFile
WriteFile
CreateFileA
InterlockedExchange
FindFirstFileA
DeleteCriticalSection
GetModuleHandleA
ExitProcess
GetCurrentThread
InterlockedCompareExchange
WaitForMultipleObjects
FreeEnvironmentStringsW
HeapSize
InterlockedDecrement
UnhandledExceptionFilter
GetCurrentProcess
DeleteFileA
GetLocaleInfoA
GetConsoleMode
GetStartupInfoA
LoadLibraryA
GetModuleFileNameA
GetCurrentProcessId
TlsAlloc
HeapAlloc
IsDebuggerPresent
QueryPerformanceCounter
FreeLibrary
WaitForSingleObject
GetSystemInfo
UnmapViewOfFile
EnterCriticalSection
HeapFree
GetLastError
VirtualProtect
VirtualAlloc
GetProcAddress
GetShortPathNameA
GetExitCodeProcess
GetExitCodeThread
GetEnvironmentStrings
GetCommandLineA
SetUnhandledExceptionFilter
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetStdHandle
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
LCMapStringW
opengl32
glEvalCoord1f
glRasterPos4iv
glColor4sv
glColor3i
glNormal3dv
glRasterPos4dv
glNormal3s
glRasterPos3i
glRasterPos4d
glIndexdv
glColor4d
glRasterPos4f
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE