Static task
static1
Behavioral task
behavioral1
Sample
06e38511a79a877503106ad3187dd9fd4c852960cc7e7cb9aef99686dee16e81.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06e38511a79a877503106ad3187dd9fd4c852960cc7e7cb9aef99686dee16e81.exe
Resource
win10v2004-20220812-en
General
-
Target
06e38511a79a877503106ad3187dd9fd4c852960cc7e7cb9aef99686dee16e81
-
Size
709KB
-
MD5
2c5b2ad9dfdbbf13b13eede384ba51ba
-
SHA1
73d829b06cc3d7d2f3cb2659fc36120cbe7c253f
-
SHA256
06e38511a79a877503106ad3187dd9fd4c852960cc7e7cb9aef99686dee16e81
-
SHA512
339e7d1415a55020cd28f8d57e40cc8108884947a90d14d7b91e5df4ee45e1da2c4a38327982c747df8498e91fda2496369b968fa8ea1e192b6d228d7466c674
-
SSDEEP
12288:TgRlKnfCJe/s59r/ZJtAu4bVNno4ygL6MpCI3LI0HQr97Q1kCgUsmFnmZz34j3O:TwlKnX/sn3tmbVNo4yg+GH3LI0ik1kGa
Malware Config
Signatures
Files
-
06e38511a79a877503106ad3187dd9fd4c852960cc7e7cb9aef99686dee16e81.exe windows x86
4d212867cd0ca81e4247b4b7a7e65505
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
msacm32
acmFormatTagDetailsA
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest
acmStreamClose
comctl32
ord17
kernel32
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetCurrentProcess
GetVersionExA
CreateProcessA
ExpandEnvironmentStringsA
GetExitCodeProcess
LocalFileTimeToFileTime
SystemTimeToFileTime
RemoveDirectoryA
Sleep
DeleteFileA
GetTempPathA
SetFileAttributesA
CopyFileA
CreateMutexA
GetDriveTypeA
CompareFileTime
WaitForSingleObject
GetLastError
CreateEventA
SetEvent
OpenEventA
GetModuleFileNameA
GetUserDefaultLangID
SetErrorMode
SetStdHandle
LoadLibraryA
GetProcAddress
LCMapStringW
LCMapStringA
InterlockedIncrement
InterlockedDecrement
HeapCreate
FlushFileBuffers
TlsGetValue
SetLastError
SetFileTime
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
TerminateProcess
RtlUnwind
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
VirtualFree
VirtualAlloc
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcmpiA
SetFilePointer
GetLocaleInfoA
GetLocaleInfoW
GetFileSize
GetFileTime
CloseHandle
WriteFile
ReadFile
CreateFileA
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
ExitProcess
HeapDestroy
GetFileAttributesA
user32
PostMessageA
MoveWindow
GetAsyncKeyState
KillTimer
EnableMenuItem
GetWindowLongA
SetWindowLongA
GetSysColorBrush
CallWindowProcA
GetClientRect
GetDesktopWindow
GetDC
ReleaseDC
EnumDisplaySettingsA
GetSysColor
FillRect
CopyRect
GetSystemMetrics
DrawFrameControl
DrawIcon
DrawTextA
RedrawWindow
FindWindowA
SetFocus
EnableWindow
ShowWindow
LoadIconA
LoadCursorA
SetCursor
SetTimer
DialogBoxParamA
CreateDialogParamA
SendDlgItemMessageA
MessageBeep
GetDlgItem
EndDialog
SetDlgItemTextA
GetParent
SendMessageA
PeekMessageA
DispatchMessageA
SetForegroundWindow
SetWindowTextA
DestroyWindow
MessageBoxA
IsIconic
UnregisterHotKey
RegisterHotKey
SetCursorPos
ChangeDisplaySettingsA
GetForegroundWindow
SystemParametersInfoA
GetFocus
GetSystemMenu
gdi32
GetStockObject
GetObjectA
GetTextExtentPoint32A
TextOutA
SetBkColor
GetDeviceCaps
SelectObject
SetTextColor
SetBkMode
DeleteObject
CreateFontIndirectA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 581KB - Virtual size: 923KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 13.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE