Static task
static1
Behavioral task
behavioral1
Sample
1606ae1bc481e8ac715a36380a1bf3d6460993e06a58f4ac3afe448913973642.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1606ae1bc481e8ac715a36380a1bf3d6460993e06a58f4ac3afe448913973642.exe
Resource
win10v2004-20221111-en
General
-
Target
1606ae1bc481e8ac715a36380a1bf3d6460993e06a58f4ac3afe448913973642
-
Size
251KB
-
MD5
ea5c77680984c03215be06cee2c78648
-
SHA1
3087a1dec6549669e9e8655f8d59e2b755ea0b35
-
SHA256
1606ae1bc481e8ac715a36380a1bf3d6460993e06a58f4ac3afe448913973642
-
SHA512
85d09e174de620b4cd04763583b4f8196be459144f623af655d3d0775f180c82bc7fe2dd074d0f95719d0d52d802bc1b935fa362fa8300eb234c68f427a7315f
-
SSDEEP
6144:5iynAGK/2v35RCUIVZWKsiUQJJOFiEia:kyKOv5gRsi34iEi
Malware Config
Signatures
Files
-
1606ae1bc481e8ac715a36380a1bf3d6460993e06a58f4ac3afe448913973642.exe windows x86
62cc55b35d7c14d460cf1955d7df9afa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
IIDFromString
CoTaskMemFree
CoCreateGuid
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
rpcrt4
UuidCreate
RpcStringFreeW
UuidToStringW
oleaut32
VariantClear
VariantInit
VarUI4FromStr
SysFreeString
SysAllocString
SysAllocStringLen
SysStringLen
iphlpapi
IpRenewAddress
IpReleaseAddress
FlushIpNetTable
GetInterfaceInfo
user32
MessageBoxW
GetWindowLongW
ReleaseDC
GetDC
OpenClipboard
GetSystemMetrics
SetForegroundWindow
IsIconic
EmptyClipboard
SystemParametersInfoW
SetWindowPos
DefWindowProcW
CharNextW
FindWindowExW
SetClipboardData
ShowWindow
CloseClipboard
PeekMessageW
DestroyWindow
LoadIconW
psapi
GetProcessImageFileNameW
gdi32
GetDeviceCaps
comctl32
InitCommonControlsEx
kernel32
CopyFileW
FindResourceW
WTSGetActiveConsoleSessionId
DeleteFileW
ExpandEnvironmentStringsW
CreateFileW
LeaveCriticalSection
GlobalFree
LocalFree
OpenThread
UnhandledExceptionFilter
GetSystemInfo
LockResource
HeapSize
SizeofResource
SetUnhandledExceptionFilter
HeapReAlloc
GetSystemTime
CreateFileA
lstrcmpiW
WaitForSingleObject
FindCloseChangeNotification
ReadFile
GetSystemDefaultLCID
RemoveDirectoryW
FreeLibrary
GlobalMemoryStatusEx
HeapDestroy
LocalFileTimeToFileTime
GetFileSize
ProcessIdToSessionId
CloseHandle
GlobalUnlock
SetFileTime
FindFirstChangeNotificationW
FormatMessageW
GetUserDefaultLCID
SetLastError
GetTempPathW
DosDateTimeToFileTime
CreateDirectoryW
MulDiv
GetFileSizeEx
GetProcessHeap
ResumeThread
FindNextFileW
IsDebuggerPresent
WideCharToMultiByte
GlobalAlloc
RaiseException
FindNextChangeNotification
SetFileAttributesA
CreateProcessW
HeapAlloc
EnterCriticalSection
GetFileAttributesExW
GetCommandLineW
GetCurrentThreadId
SetFileAttributesW
FindResourceExW
FindClose
SystemTimeToFileTime
LocalAlloc
FindFirstFileW
LoadResource
lstrlenA
LoadLibraryExW
MoveFileW
GlobalLock
GetPrivateProfileStringW
GetSystemTimeAsFileTime
GetTimeFormatW
GetPrivateProfileIntW
DeleteCriticalSection
GetDateFormatW
lstrlenW
GetModuleHandleW
HeapFree
OpenProcess
SuspendThread
GetDiskFreeSpaceExW
GetThreadContext
GetPrivateProfileSectionNamesW
FileTimeToSystemTime
VirtualAllocEx
atl
AtlModuleInit
AtlAxGetControl
AtlModuleGetClassObject
AtlIPersistPropertyBag_Load
DllCanUnloadNow
AtlFreeMarshalStream
AtlDevModeW2A
AtlModuleUnRegisterTypeLib
AtlModuleRegisterWndClassInfoA
msvidc32
DriverProc
Sections
.BlHsf Size: 1024B - Virtual size: 18KB
IMAGE_SCN_MEM_READ
.vkxbxzd Size: 1024B - Virtual size: 38KB
IMAGE_SCN_MEM_READ
.Mjtsqg Size: 1024B - Virtual size: 39KB
IMAGE_SCN_MEM_READ
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gLHoZB Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.QuEC Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nBuW Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.QDJe Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MyqLzW Size: 1024B - Virtual size: 637B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.GvKHC Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 209KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aLGXKkx Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.AyAfes Size: 1024B - Virtual size: 857B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ