Static task
static1
Behavioral task
behavioral1
Sample
06fa4df5957a45411b4cff2a699fc65e71129dc0ea777764db6c6422052f7d76.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06fa4df5957a45411b4cff2a699fc65e71129dc0ea777764db6c6422052f7d76.exe
Resource
win10v2004-20220812-en
General
-
Target
06fa4df5957a45411b4cff2a699fc65e71129dc0ea777764db6c6422052f7d76
-
Size
376KB
-
MD5
4da2068112d11c73c71e56e062400c70
-
SHA1
dbbca7dafea0c80ae16d8c1ee8892688d03d6ae5
-
SHA256
06fa4df5957a45411b4cff2a699fc65e71129dc0ea777764db6c6422052f7d76
-
SHA512
cfdd32afb4546bb8f80fa54b5369a9ac96bf5d0108754abc9e9917047b6b60e35978e3d3d7e40a23926552b5f73060142e143c3e547536386259b63ce13824a0
-
SSDEEP
6144:4s3L8GbAOilaXu7uM2mPKdzsHo0c0Uuo9gTLJyGsI:F8GbEQXu7AmAsId0UmJy
Malware Config
Signatures
Files
-
06fa4df5957a45411b4cff2a699fc65e71129dc0ea777764db6c6422052f7d76.exe windows x86
6576899ed75dba0552da1b62e5c3c49d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadPriority
TerminateThread
WaitForSingleObject
CreateThread
GetComputerNameA
VirtualAlloc
VirtualProtect
GetProcessVersion
GetTickCount
ExitProcess
FlushFileBuffers
CloseHandle
SetLastError
GetCommandLineA
GetSystemInfo
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetCurrentProcessId
SetPriorityClass
GlobalAlloc
GlobalFree
Sleep
GetCurrentDirectoryA
GetModuleHandleA
LoadLibraryA
GetProcAddress
OpenProcess
ExitThread
InterlockedExchange
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
SetStdHandle
VirtualQuery
GetLocaleInfoA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
WideCharToMultiByte
WriteFile
GetStdHandle
SetFilePointer
RtlUnwind
RaiseException
HeapFree
SetUnhandledExceptionFilter
VirtualFree
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
GetStringTypeA
MultiByteToWideChar
GetLastError
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
gdi32
GetCharWidth32A
TextOutA
SetTextColor
SetBkColor
GetTextExtentPoint32A
GetTextMetricsA
user32
GetKeyState
GetClientRect
PostQuitMessage
DefWindowProcA
UnregisterHotKey
GetDC
ReleaseDC
HideCaret
DestroyCaret
SendMessageA
SetCaretPos
ShowCaret
BeginPaint
DrawTextExA
EndPaint
wsprintfA
MessageBoxA
MessageBeep
GetSystemMetrics
GetDesktopWindow
winmm
timeBeginPeriod
winscard
SCardAccessStartedEvent
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 228KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
B/1 Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
APK1 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
B/7 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ