Static task
static1
Behavioral task
behavioral1
Sample
c6577204f9fec153e94898ad1040ea8db68da7af91b4f87544c5a9c4e8ceec35.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6577204f9fec153e94898ad1040ea8db68da7af91b4f87544c5a9c4e8ceec35.exe
Resource
win10v2004-20220812-en
General
-
Target
c6577204f9fec153e94898ad1040ea8db68da7af91b4f87544c5a9c4e8ceec35
-
Size
150KB
-
MD5
4d91f48a0030d6b29fd377fd55b0839f
-
SHA1
3ebdeb2b6028557880892a43f80874f39b11a0d8
-
SHA256
c6577204f9fec153e94898ad1040ea8db68da7af91b4f87544c5a9c4e8ceec35
-
SHA512
c428d2f3fec078a2ae823ec7fdb41d6a1d96c2f18cde8ec7818f8434fb3e9170da8e71ff160ccde6bbf79b5a7ab34fce0c3b5f72a4e3b5518119f6af2332b7c1
-
SSDEEP
3072:iG94gIXsX6Lwh9qlfl7zn1UXTP1FXkabGYCeH4Ev/u:iG9zXolfpzwTPGHeH4EH
Malware Config
Signatures
Files
-
c6577204f9fec153e94898ad1040ea8db68da7af91b4f87544c5a9c4e8ceec35.exe windows x86
e2cabbfbe66d337f1c30fb8c7bbcd04b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CopyFileA
CreateDirectoryA
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileW
CreateProcessA
CreateProcessW
DeleteCriticalSection
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
ExpandEnvironmentStringsA
FileTimeToDosDateTime
FileTimeToSystemTime
FindFirstFileW
FindNextFileW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThread
GetDiskFreeSpaceA
GetFileSize
GetFileType
GetFullPathNameA
GetLocaleInfoW
GetModuleFileNameA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDefaultLCID
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetTimeZoneInformation
GetUserDefaultLangID
GetVersion
GetVersionExW
GetWindowsDirectoryA
GlobalFindAtomA
GlobalLock
HeapCreate
HeapFree
HeapSize
InterlockedIncrement
IsBadWritePtr
IsDBCSLeadByte
LCMapStringA
LeaveCriticalSection
LoadLibraryW
MapViewOfFile
MulDiv
OpenProcess
QueryPerformanceCounter
RaiseException
ReleaseMutex
ResetEvent
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WaitForSingleObject
WriteConsoleA
WriteFile
lstrcatA
lstrcmpiA
lstrcmpiW
lstrlenW
user32
AdjustWindowRectEx
BeginPaint
CheckMenuItem
CloseClipboard
CreateMenu
DefWindowProcA
DeleteMenu
DestroyCursor
DestroyMenu
DispatchMessageA
DrawFrameControl
EnableMenuItem
EndPaint
EqualRect
FindWindowA
FrameRect
GetCapture
GetClassNameA
GetClientRect
GetDesktopWindow
GetFocus
GetForegroundWindow
GetIconInfo
GetLastActivePopup
GetMenuItemID
GetMenuState
GetMessageA
GetParent
GetPropA
GetScrollInfo
GetScrollPos
GetSubMenu
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowLongA
GetWindowThreadProcessId
InsertMenuItemA
InvalidateRect
IsDialogMessageA
IsRectEmpty
IsWindow
IsWindowEnabled
IsZoomed
LoadBitmapA
LoadCursorA
LoadIconA
LoadStringA
OffsetRect
OpenClipboard
RegisterClipboardFormatA
RemoveMenu
ScrollWindow
SendDlgItemMessageA
SetCapture
SetFocus
SetForegroundWindow
SetScrollPos
SetWindowLongA
SetWindowTextA
ShowCursor
ShowOwnedPopups
ShowWindow
TrackPopupMenu
UnhookWindowsHookEx
UnregisterClassA
WindowFromPoint
wsprintfA
gdi32
AbortDoc
Arc
BeginPath
CloseEnhMetaFile
CopyMetaFileW
CreateBitmap
CreateCompatibleBitmap
CreateDCW
CreateDIBSection
CreateFontA
CreateFontIndirectA
CreateFontIndirectW
CreateHatchBrush
CreateRectRgn
CreateRectRgnIndirect
DeleteObject
EndPage
EndPath
EnumEnhMetaFile
EnumFontFamiliesExA
EnumFontFamiliesW
Escape
ExcludeClipRect
ExtSelectClipRgn
FillRgn
FrameRgn
GetCharWidthA
GetCharacterPlacementA
GetClipBox
GetCurrentObject
GetDIBColorTable
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetMapMode
GetMetaFileBitsEx
GetNearestPaletteIndex
GetPixel
GetROP2
GetStockObject
GetSystemPaletteEntries
GetTextAlign
GetTextFaceA
GetTextFaceW
GetWindowExtEx
LPtoDP
LineDDA
MoveToEx
OffsetWindowOrgEx
PlayMetaFileRecord
PolyBezierTo
PolyDraw
RealizePalette
SelectClipRgn
SetAbortProc
SetBkColor
SetBkMode
SetColorAdjustment
SetDIBitsToDevice
SetMapMode
SetPolyFillMode
SetStretchBltMode
SetTextAlign
SetTextColor
StartDocA
TextOutA
shell32
CommandLineToArgvW
DragQueryFile
SHAddToRecentDocs
SHBrowseForFolderA
SHGetDiskFreeSpaceExW
SHGetFolderPathA
SHGetMalloc
SHGetPathFromIDList
SHGetSpecialFolderPathW
ShellExecuteExA
Shell_NotifyIconW
comctl32
CreatePropertySheetPageA
CreatePropertySheetPageW
CreateStatusWindowA
DestroyPropertySheetPage
ImageList_Add
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetDragCursorImage
ImageList_Write
InitCommonControlsEx
InitializeFlatSB
PropertySheetA
PropertySheetW
advapi32
AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
CloseServiceHandle
ControlService
ConvertStringSecurityDescriptorToSecurityDescriptorW
CopySid
CryptDestroyHash
CryptGenRandom
DeleteService
FreeSid
GetLengthSid
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitiateSystemShutdownA
IsValidSid
LookupPrivilegeValueA
LookupPrivilegeValueW
OpenProcessToken
OpenSCManagerW
OpenServiceA
OpenThreadToken
RegCloseKey
RegCreateKeyA
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumKeyExW
RegEnumKeyW
RegEnumValueA
RegEnumValueW
RegFlushKey
RegOpenKeyA
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyA
RegQueryValueA
RegQueryValueExA
SetSecurityDescriptorDacl
msvcrt
_CIcosh
__lc_codepage
__lconv_init
__p__fmode
__pioinfo
_close
_filbuf
_fmode
_isctype
_open
_setmode
_tempnam
_wchmod
_wcsnicmp
fwrite
modf
putchar
setbuf
strerror
system
tolower
wcspbrk
wprintf
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE