Static task
static1
Behavioral task
behavioral1
Sample
c6903ae9336398a360172785ae41fee54975316f9df465b11e6c32373efd24d4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c6903ae9336398a360172785ae41fee54975316f9df465b11e6c32373efd24d4.exe
Resource
win10v2004-20221111-en
General
-
Target
c6903ae9336398a360172785ae41fee54975316f9df465b11e6c32373efd24d4
-
Size
171KB
-
MD5
58351d9c56d55e603b753e80d734e6bd
-
SHA1
c111f5bb998a0361fb7ff19f5190d720b21e5d61
-
SHA256
c6903ae9336398a360172785ae41fee54975316f9df465b11e6c32373efd24d4
-
SHA512
88302f3b298c10be024da4f0a5a6884602b7e73e4e581e9c7baff61ceb8f15a87d8ee52737169d80e7f666b0c9792185ca1ad66911cbea56929ed9f5b1b8c7e8
-
SSDEEP
3072:3XKi3joE4JSeas3Xw+VusNotwhGS7dJRAsw5LQ6lTtbMAxi1NR/JsH+DU:Hd38VdNZoNS7f3w5E61tbN2P/J+D
Malware Config
Signatures
Files
-
c6903ae9336398a360172785ae41fee54975316f9df465b11e6c32373efd24d4.exe windows x86
53baa4328b375317f2300fd399dd1ff8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetFileType
GetEnvironmentStrings
GlobalReAlloc
TlsAlloc
FreeEnvironmentStringsW
GetVersion
TlsSetValue
VirtualQueryEx
GetConsoleCP
SetUnhandledExceptionFilter
GlobalAlloc
CreateProcessA
WideCharToMultiByte
GetEnvironmentVariableA
SetEnvironmentVariableA
DeleteCriticalSection
HeapCreate
CreateToolhelp32Snapshot
TlsGetValue
GetSystemInfo
CreateFileA
GetModuleHandleA
WriteFile
GetDateFormatA
FindResourceA
WaitForSingleObject
LCMapStringA
GetCurrentDirectoryA
GetSystemTimeAsFileTime
SetPriorityClass
HeapReAlloc
FileTimeToSystemTime
SearchPathA
GetExitCodeThread
WriteConsoleA
GetStringTypeA
ExpandEnvironmentStringsA
InitializeCriticalSection
ExitThread
UnmapViewOfFile
GetFileTime
MultiByteToWideChar
VirtualAlloc
GetCurrentProcess
GetModuleHandleW
DeviceIoControl
SetErrorMode
LoadLibraryW
SetEvent
SetEndOfFile
GetCurrentThreadId
SetProcessWorkingSetSize
IsBadReadPtr
ResumeThread
lstrcmpA
LoadLibraryA
GetStartupInfoA
QueryPerformanceCounter
CloseHandle
GetLocaleInfoA
GetDriveTypeA
GetCurrentThread
InterlockedIncrement
InterlockedExchange
MulDiv
lstrlenA
CreateThread
LocalAlloc
user32
SetWindowTextA
TrackPopupMenu
TranslateMessage
GetParent
GetCapture
BeginDeferWindowPos
DeleteMenu
GetClientRect
CheckDlgButton
RegisterClassExA
DialogBoxParamA
SendMessageA
UpdateWindow
DrawEdge
SetMenuItemInfoA
DialogBoxIndirectParamA
DestroyWindow
CreateDialogParamA
PeekMessageA
ExitWindowsEx
IsZoomed
DefFrameProcA
ClientToScreen
IsDialogMessageA
GetSysColorBrush
wsprintfA
GetClassNameA
EndDeferWindowPos
ScrollWindowEx
EnumWindows
SystemParametersInfoA
CreatePopupMenu
SetWindowLongA
CreateMenu
EndDialog
DrawMenuBar
DrawFrameControl
MoveWindow
SetTimer
BeginPaint
InvalidateRect
GetFocus
IntersectRect
DispatchMessageA
SendMessageTimeoutA
SetWindowPos
LoadImageA
InflateRect
EnableMenuItem
CheckMenuRadioItem
GetDlgItemTextA
FillRect
ShowWindow
GetDC
SetScrollInfo
GetDlgItem
GetWindowThreadProcessId
GetDoubleClickTime
CopyRect
GetMenuItemID
KillTimer
GetUserObjectSecurity
gdi32
CreateSolidBrush
CreatePen
CreateDIBSection
BitBlt
RectInRegion
GetStockObject
CreateRectRgnIndirect
DeleteObject
Rectangle
CreateFontIndirectA
EndDoc
ExtTextOutA
CreateCompatibleBitmap
RestoreDC
GetBkColor
GetBkMode
SaveDC
SelectClipRgn
SetTextAlign
GetTextExtentPoint32A
SetROP2
StartPage
GetDeviceCaps
SetBkColor
SetTextColor
CreateRectRgn
EndPage
GetTextMetricsA
StartDocA
SelectObject
CreateCompatibleDC
DeleteDC
GetObjectA
MoveToEx
LineTo
Polyline
SetBkMode
msvcrt
__getmainargs
exit
__set_app_type
__setusermatherr
__p__fmode
_XcptFilter
memcpy
_exit
_controlfp
__p__commode
_except_handler3
_adjust_fdiv
_initterm
_acmdln
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ