Static task
static1
Behavioral task
behavioral1
Sample
f6af9fe09d3e828fa1d7ac4b95344f0cd93daf3df8a260595a07376e9b63c472.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f6af9fe09d3e828fa1d7ac4b95344f0cd93daf3df8a260595a07376e9b63c472.exe
Resource
win10v2004-20221111-en
General
-
Target
f6af9fe09d3e828fa1d7ac4b95344f0cd93daf3df8a260595a07376e9b63c472
-
Size
288KB
-
MD5
850f18f745e6ffe852309b5407c2e659
-
SHA1
3ae288a33098a12a53a22ed732efef3a752f60c3
-
SHA256
f6af9fe09d3e828fa1d7ac4b95344f0cd93daf3df8a260595a07376e9b63c472
-
SHA512
4c22b06fb4220e37e277cc6343f2962ab39108e94f6e4a3ed1d6103dafa9ab6d4206f4912a518c9b0a973349651bdedc85560b0cc8bd58c1a9fa50cf8c5670ed
-
SSDEEP
6144:DXrsyQNpvg80re2jah4qH0V0yHOuHQCDF8DrBO3PQZBW1umPtKOgp:TrF2opuRH0VJQCDF8DrY3PQHW1HA3
Malware Config
Signatures
Files
-
f6af9fe09d3e828fa1d7ac4b95344f0cd93daf3df8a260595a07376e9b63c472.exe windows x86
b5ba1dfe0167ee17bfc8ab0bb3dbcf62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalGetAtomNameW
LocalFileTimeToFileTime
SetConsoleWindowInfo
GetSystemDirectoryW
GetSystemDefaultLangID
SleepEx
GetConsoleMode
GetStdHandle
PostQueuedCompletionStatus
TlsFree
OutputDebugStringA
ScrollConsoleScreenBufferA
GetLongPathNameA
GetModuleFileNameA
InterlockedExchangeAdd
GetTempFileNameW
GetEnvironmentStringsW
GetConsoleOutputCP
CreateWaitableTimerA
SetProcessAffinityMask
GetHandleInformation
GetVersionExA
GetTempPathA
lstrcpyA
SwitchToThread
ReadConsoleA
BackupSeek
SetConsoleTitleW
lstrlenW
ConvertDefaultLocale
SetCommTimeouts
BackupWrite
GlobalUnlock
FindFirstFileA
SetStdHandle
GetDiskFreeSpaceExW
lstrcpynA
Sleep
SetWaitableTimer
OpenMutexW
AllocConsole
GetProcessVersion
CreateEventA
QueueUserAPC
GetPrivateProfileIntW
GetNumberFormatA
FoldStringW
SystemTimeToTzSpecificLocalTime
EnumTimeFormatsW
VirtualProtect
LocalAlloc
GetModuleHandleA
ResetEvent
LoadLibraryA
GetDiskFreeSpaceA
GetConsoleCP
GetLocaleInfoW
_lclose
GetVersion
ExpandEnvironmentStringsW
WriteConsoleOutputA
EnumSystemLocalesA
MoveFileW
GetLongPathNameW
HeapSize
GlobalGetAtomNameA
EnumCalendarInfoW
GlobalDeleteAtom
GlobalMemoryStatus
GetLogicalDrives
GetEnvironmentStrings
GetStartupInfoW
CompareFileTime
WriteFileEx
GetFileInformationByHandle
GetTickCount
GetNamedPipeInfo
OpenEventA
HeapCreate
IsValidCodePage
GetSystemDirectoryA
GlobalFindAtomW
SetConsoleMode
GetFileSize
QueryPerformanceFrequency
GetStartupInfoA
GetCommandLineA
GetProcessHeap
SetCommMask
GetCommState
GetOEMCP
LCMapStringA
FindNextFileA
FlushConsoleInputBuffer
ReadConsoleInputW
IsBadStringPtrA
VirtualFree
FlushFileBuffers
LoadLibraryExA
GetBinaryTypeW
GetStringTypeExA
MapViewOfFile
GetFileAttributesExW
GetShortPathNameA
EraseTape
PeekNamedPipe
TlsGetValue
GetAtomNameW
FindFirstChangeNotificationW
GetLogicalDriveStringsA
ClearCommBreak
user32
GetClassLongW
CharToOemW
MsgWaitForMultipleObjectsEx
MapVirtualKeyW
DrawEdge
IsWindowEnabled
EnumDisplaySettingsExA
CopyRect
WinHelpA
SetFocus
GetFocus
EnumWindows
GetWindowWord
CharUpperBuffW
CloseClipboard
GetGuiResources
OemToCharA
CharLowerBuffW
SetClassLongW
IsZoomed
ChildWindowFromPoint
RegisterDeviceNotificationA
ChangeDisplaySettingsExA
DrawTextW
RegisterClipboardFormatA
ChangeMenuA
SetMenuItemBitmaps
UnregisterClassW
EnumDisplaySettingsA
ModifyMenuA
GetUserObjectInformationA
TrackPopupMenu
wvsprintfA
DestroyCaret
ChangeDisplaySettingsA
UpdateWindow
AppendMenuW
LoadIconW
GetClassNameA
MessageBeep
CharPrevA
ReplyMessage
GetScrollPos
ScrollWindow
IsCharLowerA
CreateDesktopA
PostThreadMessageW
ToUnicode
GetClipboardSequenceNumber
FillRect
MsgWaitForMultipleObjects
MonitorFromWindow
AttachThreadInput
GetClassLongA
gdi32
GetStockObject
ExcludeClipRect
SetDIBits
OffsetWindowOrgEx
SelectClipPath
CreateHatchBrush
Polygon
EnumFontFamiliesExW
GetBkColor
StrokePath
SelectObject
PathToRegion
CreateFontW
CopyMetaFileA
LineTo
DescribePixelFormat
GetSystemPaletteUse
comdlg32
ChooseColorA
GetFileTitleW
advapi32
LookupPrivilegeDisplayNameA
IsTextUnicode
RegSetKeySecurity
AllocateLocallyUniqueId
IsValidAcl
RegFlushKey
GetSecurityDescriptorSacl
SetPrivateObjectSecurity
SetNamedSecurityInfoW
GetExplicitEntriesFromAclW
LookupAccountNameA
AccessCheckAndAuditAlarmW
RegSetValueW
QueryServiceConfigW
RegDeleteValueA
RegDeleteKeyA
OpenSCManagerA
GetSecurityDescriptorGroup
CryptGetProvParam
CryptDecrypt
CryptSetKeyParam
SetTokenInformation
OpenServiceA
OpenServiceW
RegEnumKeyA
StartServiceCtrlDispatcherA
LookupPrivilegeValueW
RegSaveKeyW
RegCloseKey
AddAce
DestroyPrivateObjectSecurity
ClearEventLogW
SetFileSecurityW
GetServiceDisplayNameA
GetServiceKeyNameW
BuildTrusteeWithNameW
shell32
FindExecutableA
SHGetPathFromIDListW
DragQueryPoint
DragAcceptFiles
ole32
CoMarshalInterThreadInterfaceInStream
CoReleaseServerProcess
OleBuildVersion
CreateBindCtx
OleCreateFromData
oleaut32
LoadTypeLibEx
GetErrorInfo
VariantChangeType
LoadTypeLi
SysStringLen
SetErrorInfo
VariantCopy
CreateErrorInfo
SafeArrayAccessData
DispGetIDsOfNames
comctl32
ImageList_Add
ImageList_DrawEx
shlwapi
SHAutoComplete
HashData
PathStripToRootA
PathRemoveArgsW
UrlCreateFromPathW
StrDupA
UrlGetPartW
SHRegQueryUSValueW
PathIsURLW
SHGetValueA
StrPBrkW
StrStrIW
PathCommonPrefixW
StrFormatByteSizeW
setupapi
SetupDiGetClassDescriptionW
SetupDefaultQueueCallbackA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstallParamsA
SetupOpenAppendInfFileW
SetupOpenAppendInfFileA
msvcrt
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
Sections
.text Size: 272KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE