Static task
static1
Behavioral task
behavioral1
Sample
b6bef2c9c727cb7ea2f6a32c37251b45197ae098d8c1564235f2136c9880edc4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6bef2c9c727cb7ea2f6a32c37251b45197ae098d8c1564235f2136c9880edc4.exe
Resource
win10v2004-20221111-en
General
-
Target
b6bef2c9c727cb7ea2f6a32c37251b45197ae098d8c1564235f2136c9880edc4
-
Size
731KB
-
MD5
21962311753cb8d25dd1e1fb22a40282
-
SHA1
fe63f3e9c069bf7326191723dd8f61ef73bedffb
-
SHA256
b6bef2c9c727cb7ea2f6a32c37251b45197ae098d8c1564235f2136c9880edc4
-
SHA512
ad844530a73955a286158da23b4d71c8fab6bb56c16ee681511d69978ce4b4e5a7c850264b7d0b1850441d7af0dcfe2f71c50daa5a3c4decc8785c1b580a40cd
-
SSDEEP
12288:9rvp9MDsjFtEzGL2DPIJgCD/DPpNnYnYWAUrQPF/6SHOxDjmDDXAnGbvpaZY:9F9CySbofD/vUYQrA/68QjmfQnAF
Malware Config
Signatures
Files
-
b6bef2c9c727cb7ea2f6a32c37251b45197ae098d8c1564235f2136c9880edc4.exe windows x86
8fb356fb623d27ae6814401905a453ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassNameW
PeekMessageW
GetIconInfo
LoadCursorW
GetCursorPos
CloseDesktop
EndDialog
OpenDesktopA
FindWindowExW
DrawIcon
GetClipboardData
GetDlgItem
CloseWindowStation
PeekMessageA
GetDlgItemTextA
ToUnicode
GetKeyState
GetMessageA
ExitWindowsEx
GetForegroundWindow
SendMessageW
MsgWaitForMultipleObjects
CharLowerBuffA
GetWindowTextW
OpenWindowStationA
SetThreadDesktop
GetWindowThreadProcessId
GetWindowLongW
SetProcessWindowStation
GetKeyboardState
DispatchMessageW
GetMessageW
GetDlgItemTextW
kernel32
GetLastError
FindNextFileW
lstrcatA
DisconnectNamedPipe
GetFileSizeEx
GetExitCodeProcess
SystemTimeToFileTime
GetTempFileNameW
FindResourceW
EnterCriticalSection
CreateDirectoryW
HeapFree
GetModuleFileNameA
GetLogicalDrives
UnmapViewOfFile
GetLocalTime
ReleaseMutex
GetDriveTypeW
CloseHandle
lstrcatW
WaitForSingleObject
MoveFileExW
InitializeCriticalSection
Sleep
GetProcessTimes
MultiByteToWideChar
GlobalUnlock
GlobalLock
GetCurrentProcessId
SetLastError
MapViewOfFile
WriteProcessMemory
OpenProcess
ExpandEnvironmentStringsW
GetFileTime
lstrcpyW
CreateEventW
GetThreadPriority
GetModuleHandleA
SetThreadPriority
GetVersionExW
lstrcmpiA
lstrcpyA
CreateMutexW
SetFileAttributesW
HeapAlloc
FlushFileBuffers
WriteFile
CopyFileW
HeapReAlloc
ResetEvent
GetComputerNameW
IsBadReadPtr
GetTimeZoneInformation
DeleteFileW
SetEndOfFile
WideCharToMultiByte
Sections
.vsb Size: 39KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fun Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xqzgv Size: 7KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ