Static task
static1
Behavioral task
behavioral1
Sample
6f5b5d68cfacd397c59a8c776d661b7f7cf245462bc89188afad51b6735c0f50.exe
Resource
win7-20220812-en
General
-
Target
6f5b5d68cfacd397c59a8c776d661b7f7cf245462bc89188afad51b6735c0f50
-
Size
908KB
-
MD5
64dd46daaee075e47006720a73ec71f0
-
SHA1
bfef8170c5d1239f1910045621e3f9b40fff77d4
-
SHA256
6f5b5d68cfacd397c59a8c776d661b7f7cf245462bc89188afad51b6735c0f50
-
SHA512
cb905db17911da83b7d503fd041bb3d4bff82c0bcb7feae8038ffc775cd92aa5e63c31fcf5b85961e053d565e26bf3705e256617d5d5fca9f18fd056831b6d58
-
SSDEEP
3072:BcMLPBGl0DbSiIupnbMvRuoaAaczd4B3nhBzS7MlH:R2+bSiIupYsop3I33v
Malware Config
Signatures
Files
-
6f5b5d68cfacd397c59a8c776d661b7f7cf245462bc89188afad51b6735c0f50.exe windows x86
8b551291ea4df8a45aed12248a463da8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
Sleep
CreateWaitableTimerW
Beep
FormatMessageA
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
LocalFree
MoveFileA
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
FindFirstFileExA
GetTempPathW
RemoveDirectoryW
ResetEvent
ScrollConsoleScreenBufferW
TlsAlloc
TlsFree
TlsGetValue
SetLocaleInfoW
VirtualAlloc
FreeLibrary
GetProcAddress
GetProfileSectionW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
SetEvent
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitThread
GetLastError
CreateThread
ExitProcess
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
SetFilePointer
CloseHandle
GetFileType
CreateFileA
ReadFile
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
SetLastError
GetCurrentThread
TlsSetValue
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapReAlloc
IsBadWritePtr
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
VirtualProtect
GetSystemInfo
VirtualQuery
MultiByteToWideChar
GetConsoleCP
ReadConsoleInputW
InitializeCriticalSection
RtlUnwind
SetStdHandle
HeapSize
SetEndOfFile
GetFileAttributesW
FlushFileBuffers
GetTimeFormatA
GetDateFormatA
GetCPInfo
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LoadLibraryA
GetACP
GetOEMCP
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
SetConsoleCtrlHandler
RaiseException
GetLocaleInfoW
CreateProcessA
GetFileAttributesA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
ole32
StringFromGUID2
StgGetIFillLockBytesOnFile
CoQueryProxyBlanket
CoInitializeEx
CoCreateInstance
CoCreateGuid
OleCreateFromFile
user32
MsgWaitForMultipleObjects
SendDlgItemMessageA
RegisterClipboardFormatW
WinHelpA
OpenClipboard
GetTitleBarInfo
DdeReconnect
DdeDisconnectList
CharToOemA
DlgDirSelectExW
DispatchMessageW
PeekMessageW
TranslateMessage
Sections
.text Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 628KB - Virtual size: 625KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE