Static task
static1
Behavioral task
behavioral1
Sample
6c0f27427c0eafa124556716f1b97c8cd2ea51ace7f0206758fa632c726b38b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6c0f27427c0eafa124556716f1b97c8cd2ea51ace7f0206758fa632c726b38b8.exe
Resource
win10v2004-20221111-en
General
-
Target
6c0f27427c0eafa124556716f1b97c8cd2ea51ace7f0206758fa632c726b38b8
-
Size
52KB
-
MD5
c3da392da41335f75b550c5f4c1964cd
-
SHA1
f90ca114a9969f230d9c444c4dd0ba31b490dc84
-
SHA256
6c0f27427c0eafa124556716f1b97c8cd2ea51ace7f0206758fa632c726b38b8
-
SHA512
052a9da0d19e01e79e9af1f7a892850e8ae16f2549e9ad55b7d07356ea4a99c7ced7f002f76c915649715a7214f571f9065a6b26a21e3215006490dbb3e61902
-
SSDEEP
1536:u4wKhqi33IAAsDuebjZTnyZXozjVcMrZx:u47hqODuAZTyZ4zhcMr
Malware Config
Signatures
Files
-
6c0f27427c0eafa124556716f1b97c8cd2ea51ace7f0206758fa632c726b38b8.exe windows x86
55791cd74a10ec211ff7d1cd813645d9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MulDiv
FindFirstVolumeW
CompareStringW
ExpandEnvironmentStringsA
GlobalLock
GetProfileStringA
FindNextVolumeMountPointW
_lcreat
IsBadCodePtr
CopyFileExW
SetDefaultCommConfigW
lstrcatW
FindNextChangeNotification
UnregisterWait
LoadModule
ReadDirectoryChangesW
FlushInstructionCache
GetProcessIoCounters
SetCommConfig
GetCalendarInfoW
Process32Next
ReplaceFileW
QueryInformationJobObject
GetCurrentProcessId
WriteProfileStringW
FindFirstVolumeA
ReadConsoleInputW
SignalObjectAndWait
GetNumberFormatA
SetVolumeLabelA
HeapValidate
TransactNamedPipe
_hread
ReplaceFile
SetLastError
CreatePipe
GetCompressedFileSizeW
FindFirstVolumeMountPointW
GetTimeZoneInformation
AllocConsole
SetFileApisToOEM
SetConsoleTextAttribute
GetVersionExW
DosDateTimeToFileTime
SetComputerNameA
FindNextVolumeA
GetPrivateProfileIntW
GetSystemTimeAsFileTime
GetStartupInfoW
FoldStringA
GetThreadContext
GetExitCodeThread
DeleteTimerQueueEx
CreateFileMappingA
DeleteFileA
GetNamedPipeHandleStateA
EnumResourceNamesW
BeginUpdateResourceW
VirtualAllocEx
GetSystemInfo
FindNextVolumeW
GetConsoleAliasesLengthA
EnumUILanguagesW
GetCommState
LoadLibraryExW
GetEnvironmentVariableA
GetDiskFreeSpaceExW
SetCalendarInfoW
TerminateJobObject
GetOEMCP
SearchPathW
EnumResourceNamesA
CreateTimerQueueTimer
DeleteTimerQueue
EnumLanguageGroupLocalesW
SetThreadPriority
QueueUserWorkItem
SetThreadAffinityMask
GetNumberOfConsoleInputEvents
MoveFileWithProgressA
InitializeCriticalSectionAndSpinCount
EnumCalendarInfoExW
ReadConsoleOutputW
GetConsoleAliasExesLengthA
WriteProfileSectionW
GetSystemWindowsDirectoryW
GetNumberOfConsoleMouseButtons
InterlockedExchangeAdd
UnregisterWaitEx
MultiByteToWideChar
TerminateProcess
FindFirstChangeNotificationW
GetSystemTime
GetConsoleTitleW
ReadConsoleW
FreeResource
VirtualFree
GlobalFindAtomW
ReadFileScatter
Module32Next
GetTickCount
GetLocalTime
LocalAlloc
user32
DrawMenuBar
GetMenuContextHelpId
GetUserObjectInformationA
EnumPropsA
DestroyWindow
CallWindowProcA
SetTimer
GetMenuBarInfo
AdjustWindowRect
ToUnicode
CloseClipboard
CharToOemBuffW
GetScrollBarInfo
SetWindowContextHelpId
IsDialogMessageA
GetDoubleClickTime
SendNotifyMessageW
GetMenuState
SetRect
DdeFreeStringHandle
SetMessageQueue
GetCursorPos
DeferWindowPos
MsgWaitForMultipleObjectsEx
DlgDirListComboBoxW
IsCharAlphaW
SubtractRect
GetTabbedTextExtentA
IMPGetIMEW
MenuItemFromPoint
SetLastErrorEx
DdeEnableCallback
DdeDisconnectList
ToUnicodeEx
GrayStringW
ShowWindowAsync
WINNLSGetEnableStatus
DdeGetData
SwitchToThisWindow
VkKeyScanW
CloseDesktop
SetMenuDefaultItem
GetMenuItemInfoW
GrayStringA
DialogBoxParamA
DefMDIChildProcW
GetForegroundWindow
DdeInitializeA
IsDialogMessageW
GetMonitorInfoW
IsChild
EnumDisplaySettingsW
OemToCharBuffW
DdeCreateStringHandleW
LoadMenuA
DefWindowProcA
CreatePopupMenu
EnumDesktopsA
EnumChildWindows
DefMDIChildProcA
WINNLSEnableIME
CharToOemBuffA
DdeQueryConvInfo
IsCharAlphaA
TabbedTextOutA
ModifyMenuA
LookupIconIdFromDirectory
RegisterClassExA
GetDlgCtrlID
InsertMenuItemW
MonitorFromRect
LoadMenuIndirectA
SetCaretBlinkTime
SetScrollRange
AnimateWindow
GetClassNameW
DefFrameProcW
CheckRadioButton
DrawIcon
SetDlgItemTextW
DdeQueryNextServer
IsDlgButtonChecked
DragDetect
HiliteMenuItem
WinHelpA
GetWindowPlacement
GetMenuInfo
CreateCaret
EnumDisplayDevicesA
GetTitleBarInfo
GetCursorInfo
DeleteMenu
OpenIcon
CreateIconFromResourceEx
CountClipboardFormats
SetWindowsHookW
GetNextDlgTabItem
BeginDeferWindowPos
LoadAcceleratorsA
CallMsgFilterW
gdi32
GetDIBColorTable
UnloadNetworkFonts
GetLayout
TextOutW
FONTOBJ_cGetGlyphs
EngCreateDeviceSurface
SetBitmapDimensionEx
CopyEnhMetaFileA
GetTextExtentPointW
FONTOBJ_pfdg
GetRelAbs
GetCharWidthFloatW
GetOutlineTextMetricsA
EngStrokeAndFillPath
PATHOBJ_vEnumStartClipLines
GetColorSpace
DeviceCapabilitiesExA
OffsetViewportOrgEx
GdiEntry12
SetEnhMetaFileBits
CreatePatternBrush
EngCheckAbort
QueryFontAssocStatus
EngPaint
GdiEntry16
EngDeleteClip
SelectClipPath
STROBJ_bEnumPositionsOnly
SetTextJustification
GdiTransparentBlt
GetDeviceCaps
RectVisible
CreateFontIndirectW
CLIPOBJ_cEnumStart
EngCreateBitmap
DeleteMetaFile
GetBkColor
EnumObjects
GdiConvertToDevmodeW
RectInRegion
BeginPath
SetArcDirection
GetGlyphIndicesA
SetGraphicsMode
SetDCBrushColor
FONTOBJ_pxoGetXform
MaskBlt
EngStrokePath
FONTOBJ_pifi
OffsetClipRgn
GdiConvertEnhMetaFile
EngFillPath
GdiGetDevmodeForPage
SetFontEnumeration
GetCharABCWidthsFloatW
XLATEOBJ_piVector
SetWinMetaFileBits
EngDeletePalette
UpdateICMRegKeyW
SetWindowExtEx
GetPixel
EnumFontFamiliesExW
ExtFloodFill
EngPlgBlt
PlayEnhMetaFileRecord
GetGraphicsMode
StretchBlt
EngAcquireSemaphore
GetCharABCWidthsI
GetEnhMetaFileBits
SetPaletteEntries
GetBrushOrgEx
SetTextCharacterExtra
GetMetaFileW
GdiEndDocEMF
GetTransform
GetTextExtentPointI
CloseFigure
PolylineTo
SetMagicColors
EngQueryLocalTime
AddFontResourceW
GdiSwapBuffers
GetSystemPaletteEntries
GetCharABCWidthsFloatA
bMakePathNameW
GdiReleaseLocalDC
StartDocW
DPtoLP
CreatePalette
RemoveFontResourceExA
GetEnhMetaFileHeader
SelectPalette
CreateEnhMetaFileA
XLATEOBJ_hGetColorTransform
STROBJ_bGetAdvanceWidths
GetTextFaceAliasW
SetViewportOrgEx
CreateColorSpaceW
GetRasterizerCaps
advapi32
SystemFunction004
CryptSetKeyParam
StartServiceW
LsaSetSystemAccessAccount
RegGetKeySecurity
QueryServiceLockStatusW
GetExplicitEntriesFromAclA
ElfClearEventLogFileA
SystemFunction028
SetThreadToken
IsValidAcl
LsaQuerySecurityObject
SetEntriesInAccessListA
LsaStorePrivateData
RegOpenKeyExA
GetSecurityInfoExA
ControlTraceA
ConvertSDToStringSDRootDomainA
CryptDestroyKey
LsaCreateTrustedDomainEx
RegLoadKeyA
ClearEventLogA
ObjectOpenAuditAlarmA
LsaSetTrustedDomainInformation
AccessCheckByType
BuildTrusteeWithNameW
BuildTrusteeWithObjectsAndNameA
RegEnumKeyExA
LsaOpenTrustedDomain
ChangeServiceConfig2W
GetSecurityDescriptorControl
UninstallApplication
SystemFunction017
LsaQueryInfoTrustedDomain
RegSetValueW
ImpersonateSelf
LsaLookupPrivilegeValue
RegSetValueExW
CreateServiceA
QueryServiceConfigA
RegisterServiceCtrlHandlerExW
LsaICLookupNames
OpenServiceW
CloseTrace
UnregisterTraceGuids
InitiateSystemShutdownA
LookupAccountNameA
GetAuditedPermissionsFromAclA
GetLengthSid
BuildTrusteeWithObjectsAndNameW
ElfRegisterEventSourceA
ChangeServiceConfig2A
GetSecurityDescriptorOwner
AccessCheckByTypeResultListAndAuditAlarmW
ControlTraceW
ProcessTrace
MakeSelfRelativeSD
GetTraceEnableLevel
CryptCreateHash
TrusteeAccessToObjectA
LsaLookupPrivilegeDisplayName
LockServiceDatabase
LsaAddAccountRights
AreAllAccessesGranted
TraceEvent
CopySid
ObjectCloseAuditAlarmW
SetFileSecurityW
ConvertStringSidToSidA
SystemFunction023
QueryServiceStatus
OpenServiceA
GetMultipleTrusteeOperationW
NotifyBootConfigStatus
LsaQueryInformationPolicy
LsaQueryDomainInformationPolicy
BuildTrusteeWithNameA
ElfCloseEventLog
RegSaveKeyW
TraceEventInstance
LsaClose
AbortSystemShutdownA
SetEntriesInAclA
SystemFunction034
ElfReadEventLogW
GetTrusteeFormW
ObjectOpenAuditAlarmW
LookupPrivilegeDisplayNameA
LsaEnumerateAccountsWithUserRight
MapGenericMask
FileEncryptionStatusW
AccessCheckByTypeResultList
RegConnectRegistryA
CryptDuplicateHash
DeleteService
RegSetValueExA
ConvertSecurityDescriptorToAccessNamedA
OpenSCManagerA
LsaEnumerateAccountRights
OpenEncryptedFileRawA
ole32
CoCreateInstanceEx
STGMEDIUM_UserUnmarshal
OleNoteObjectVisible
HBITMAP_UserUnmarshal
CLIPFORMAT_UserUnmarshal
HWND_UserFree
CreateBindCtx
HBRUSH_UserSize
OleCreateFromData
CoRegisterChannelHook
OleTranslateAccelerator
OleSetClipboard
WriteFmtUserTypeStg
HPALETTE_UserFree
CoQueryClientBlanket
OleInitialize
ReadFmtUserTypeStg
CreateFileMoniker
CoDisableCallCancellation
BindMoniker
CoAddRefServerProcess
CreateDataAdviseHolder
CoDisconnectObject
GetDocumentBitStg
HMENU_UserFree
WriteStringStream
OleBuildVersion
OleCreateLinkFromData
HMENU_UserSize
OleMetafilePictFromIconAndLabel
OleConvertOLESTREAMToIStorageEx
CoGetObject
CoTestCancel
CoCreateGuid
ReadStringStream
HMETAFILEPICT_UserMarshal
MonikerCommonPrefixWith
OleCreateMenuDescriptor
OleLockRunning
StgCreatePropSetStg
CoWaitForMultipleHandles
CoImpersonateClient
SNB_UserFree
CoInstall
OpenOrCreateStream
CoGetApartmentID
CoInitialize
StringFromIID
CoRegisterClassObject
CreateClassMoniker
OleSave
OleGetIconOfFile
HMETAFILEPICT_UserFree
HMETAFILE_UserUnmarshal
OleCreateFromFileEx
StgCreateStorageEx
CoMarshalInterThreadInterfaceInStream
HBRUSH_UserFree
HACCEL_UserSize
StgOpenStorageOnILockBytes
CreateStreamOnHGlobal
DllGetClassObjectWOW
CoFreeUnusedLibraries
STGMEDIUM_UserMarshal
OleSetAutoConvert
CoQueryReleaseObject
MonikerRelativePathTo
OleRegEnumFormatEtc
HGLOBAL_UserMarshal
CoTreatAsClass
OleRegEnumVerbs
CoRevertToSelf
WdtpInterfacePointer_UserSize
OleSaveToStream
OleCreateLinkEx
CoBuildVersion
StringFromGUID2
OleQueryLinkFromData
CoGetMalloc
HPALETTE_UserMarshal
CoTaskMemRealloc
StgSetTimes
CoUnloadingWOW
HBITMAP_UserSize
OleConvertIStorageToOLESTREAMEx
CoMarshalInterface
CoCreateInstance
CoUnmarshalInterface
StgGetIFillLockBytesOnILockBytes
WdtpInterfacePointer_UserUnmarshal
HWND_UserSize
OleCreateEx
CoGetCurrentLogicalThreadId
CoGetStandardMarshal
CoGetInterfaceAndReleaseStream
CoSetCancelObject
CoGetTreatAsClass
CoInitializeWOW
CreateGenericComposite
StgGetIFillLockBytesOnFile
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ