Static task
static1
Behavioral task
behavioral1
Sample
6c42423e18decb610668de1f708a55f80dc7e73b4fbf32c739b9c6d4d4d97719.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6c42423e18decb610668de1f708a55f80dc7e73b4fbf32c739b9c6d4d4d97719.exe
Resource
win10v2004-20220901-en
General
-
Target
6c42423e18decb610668de1f708a55f80dc7e73b4fbf32c739b9c6d4d4d97719
-
Size
1.4MB
-
MD5
5d93d6b3c7fae90403a91666598d3d9f
-
SHA1
db22b53e6cb625c7cae1befa0655e83176dd9a76
-
SHA256
6c42423e18decb610668de1f708a55f80dc7e73b4fbf32c739b9c6d4d4d97719
-
SHA512
e20334d38b266caa8cf39e06362513d12b73995f9d1f9adbee353b6b58956825e53d146c34dc5c7011881cdab47eba968622c4df7e5474c1963ee59a77c1dd84
-
SSDEEP
24576:JHPn34MhTCilQoR1Ke2xnk6c/gfsGfhyQemrNDgPUzCgnextHWUziJm4IFMesbT7:RP9RbGGc9eTYmEbTrL1OImTyTYhlB7B
Malware Config
Signatures
Files
-
6c42423e18decb610668de1f708a55f80dc7e73b4fbf32c739b9c6d4d4d97719.exe windows x86
469abafc14b6bd0e7edf0c0da9f1b611
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
GetTickCount
WriteFile
SizeofResource
DeleteFileW
LoadResource
IsBadWritePtr
GetNativeSystemInfo
GetCurrentProcess
MultiByteToWideChar
LocalFree
LockResource
LoadLibraryW
WideCharToMultiByte
IsBadReadPtr
GetVolumeInformationW
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileStringW
FindResourceW
GetACP
ExitProcess
FreeResource
MulDiv
InterlockedIncrement
InterlockedDecrement
lstrcpyW
SetFilePointer
GetFileType
DuplicateHandle
ReadFile
SystemTimeToFileTime
DosDateTimeToFileTime
CreateDirectoryW
SetFileTime
GetFileSize
GlobalUnlock
GlobalLock
GlobalAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
GetTimeFormatA
GetDateFormatA
GetStartupInfoW
RaiseException
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapCreate
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
HeapSize
GetModuleHandleA
LoadLibraryA
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleHandleW
GetProcAddress
GetDriveTypeW
GetLogicalDriveStringsW
GetLocalTime
CloseHandle
Sleep
GetLastError
CreateFileW
GetModuleFileNameW
DeviceIoControl
user32
PostMessageW
RegisterClassW
LoadCursorW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
GetKeyState
UnionRect
InvalidateRect
SetTimer
KillTimer
SetCapture
ReleaseCapture
ScreenToClient
PtInRect
CharNextW
DestroyWindow
GetFocus
MapWindowPoints
IntersectRect
GetUpdateRect
IsRectEmpty
EndPaint
BeginPaint
GetActiveWindow
GetCursorPos
OffsetRect
SetCursor
SetPropW
GetWindowRgn
MoveWindow
IsZoomed
SetWindowRgn
FillRect
InvalidateRgn
GetGUIThreadInfo
CreateAcceleratorTableW
GetWindowTextW
GetWindowTextLengthW
GetCaretPos
GetCaretBlinkTime
SetForegroundWindow
DrawTextW
CharPrevW
SetRect
CreateCaret
HideCaret
ShowCaret
SetCaretPos
GetSysColor
LoadImageW
SendMessageW
EnableWindow
GetMessageW
SetFocus
TranslateMessage
DispatchMessageW
ShowWindow
IsWindow
SetWindowLongW
DefWindowProcW
GetPropW
GetWindowLongW
CallWindowProcW
wvsprintfW
wsprintfW
GetWindowRect
GetParent
GetWindow
GetMonitorInfoW
MonitorFromWindow
ClientToScreen
PostQuitMessage
SetWindowTextW
GetClientRect
IsWindowVisible
MessageBoxW
ReleaseDC
GetDC
EnumDisplayDevicesW
SetWindowPos
IsIconic
GetSystemMetrics
gdi32
CreateCompatibleDC
PtInRegion
CreatePatternBrush
CreateSolidBrush
CreateCompatibleBitmap
SaveDC
BitBlt
GetObjectA
SelectObject
TextOutW
GetCharABCWidthsW
GetTextExtentPoint32W
CreateRoundRectRgn
CreatePenIndirect
MoveToEx
LineTo
SetBkColor
ExtTextOutW
SetStretchBltMode
StretchBlt
CombineRgn
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SelectClipRgn
SetBkMode
SetTextColor
GetDeviceCaps
CreateDIBSection
RoundRect
CreateRectRgn
RestoreDC
Rectangle
SetWindowOrgEx
DeleteDC
CreatePen
GetStockObject
GetObjectW
CreateFontIndirectW
DeleteObject
GdiFlush
GetTextMetricsW
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
SetEntriesInAclW
StartServiceW
CreateServiceW
CloseServiceHandle
DeleteService
OpenServiceW
OpenSCManagerW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
GetSecurityInfo
SetSecurityInfo
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
ole32
CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
StringFromCLSID
comctl32
_TrackMouseEvent
ord17
iphlpapi
GetAdaptersAddresses
GetAdaptersInfo
winmm
waveOutGetDevCapsW
waveOutGetNumDevs
imm32
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
oleaut32
VariantInit
VariantClear
SysFreeString
SysAllocString
gdiplus
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipGetImageWidth
GdipLoadImageFromStreamICM
GdipGetPropertyItem
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdiplusShutdown
GdipFree
GdipAlloc
GdipDeleteBrush
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDeleteGraphics
GdipDeleteFontFamily
GdipDeleteFont
GdipDisposeImage
GdipCreateBitmapFromScan0
GdiplusStartup
GdipCreateLineBrushI
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipSetCompositingQuality
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipGraphicsClear
GdipDrawString
GdipDrawImage
GdipDrawImageRectI
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetFamily
GdipCloneBrush
GdipCloneImage
GdipLoadImageFromStream
Sections
.text Size: 438KB - Virtual size: 437KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 889KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ