Static task
static1
Behavioral task
behavioral1
Sample
b618d108b2dbbd49586d419af292a9c9c22cb2d43614c6f79b933622e986b6b6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b618d108b2dbbd49586d419af292a9c9c22cb2d43614c6f79b933622e986b6b6.exe
Resource
win10v2004-20220812-en
General
-
Target
b618d108b2dbbd49586d419af292a9c9c22cb2d43614c6f79b933622e986b6b6
-
Size
252KB
-
MD5
746f81a527ce711419049a5aa1ae3f3c
-
SHA1
8edbf03b981ff404f633a4775f69ac702c1ba998
-
SHA256
b618d108b2dbbd49586d419af292a9c9c22cb2d43614c6f79b933622e986b6b6
-
SHA512
897f1832aad7b6d025880cba25b0f266b17702d97efec8e7ef6a5a0ae8cbe45ee8afbc9c47d78624a5a02ab721f0f07062b36cc821ca7f1c715fa770c953bd6c
-
SSDEEP
6144:3J/ZXypi2kKepX03WzWLmu/NWa4RY0ANlYfjf:xakKM0GzWL7Vh4RY
Malware Config
Signatures
Files
-
b618d108b2dbbd49586d419af292a9c9c22cb2d43614c6f79b933622e986b6b6.exe windows x86
44b21cc5a77c93455334a6d40b4241b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
SetEnvironmentVariableA
SetupComm
IsBadWritePtr
SwitchToFiber
GetLongPathNameA
GetSystemTimeAsFileTime
DeleteCriticalSection
FindCloseChangeNotification
GetNumberFormatW
GetTempPathW
GetConsoleCursorInfo
UnhandledExceptionFilter
EnumSystemCodePagesW
CreateEventA
SetVolumeLabelA
FlushConsoleInputBuffer
GlobalAddAtomA
GetWindowsDirectoryA
GetSystemTime
OpenFile
GetAtomNameA
ReadConsoleInputW
GetProfileStringA
FillConsoleOutputCharacterA
CreateWaitableTimerA
lstrcatW
SetTimeZoneInformation
GetFileInformationByHandle
VirtualProtect
SetCommTimeouts
SetCommMask
CreateNamedPipeW
ReleaseMutex
OutputDebugStringA
GetProcessTimes
GlobalFindAtomW
CreateDirectoryExA
GetDriveTypeW
EnumDateFormatsW
SetThreadAffinityMask
SetFileAttributesA
LocalFileTimeToFileTime
GetEnvironmentVariableW
InitializeCriticalSection
ExitThread
_lopen
GlobalFree
GetModuleHandleA
FatalAppExitA
MoveFileExA
GetFileAttributesExA
SetConsoleMode
GetFileType
GenerateConsoleCtrlEvent
GetVersion
SetStdHandle
FlushFileBuffers
WritePrivateProfileStringA
ReadDirectoryChangesW
SetEvent
CreateMutexA
EraseTape
FindFirstFileExW
SystemTimeToFileTime
VirtualUnlock
FindFirstFileA
WriteConsoleOutputW
SetLastError
DebugBreak
GetStartupInfoA
SetThreadLocale
DosDateTimeToFileTime
FreeLibraryAndExitThread
lstrlenA
OutputDebugStringW
VirtualAlloc
user32
DispatchMessageW
SetDlgItemTextA
DefDlgProcW
FlashWindow
GetWindowLongA
CreateDialogIndirectParamW
GetPropW
IsCharLowerA
IsDialogMessageW
EnumDisplayMonitors
GetPropA
CharNextA
GetTopWindow
EnableScrollBar
DefWindowProcA
InvertRect
EnumDesktopsA
SetMenu
GetAncestor
ScrollWindowEx
GetClipboardOwner
CharNextExA
ExitWindowsEx
CharToOemW
InsertMenuW
GetKeyboardLayout
MessageBeep
EnumDisplaySettingsExA
IsChild
ToUnicode
SetWindowsHookExA
TileWindows
TranslateAcceleratorA
MsgWaitForMultipleObjectsEx
MessageBoxIndirectW
SetTimer
RegisterDeviceNotificationW
gdi32
SetArcDirection
GetTextCharset
GetDIBits
GetTextMetricsA
GetObjectW
GetPixelFormat
AddFontResourceA
CreateFontW
PlayMetaFileRecord
GetEnhMetaFileHeader
DeleteEnhMetaFile
CreateEnhMetaFileW
OffsetViewportOrgEx
GetWinMetaFileBits
SetTextJustification
OffsetWindowOrgEx
DescribePixelFormat
RectVisible
Chord
CreatePolygonRgn
SelectPalette
comdlg32
GetOpenFileNameA
PrintDlgW
ChooseColorA
advapi32
StartServiceCtrlDispatcherW
GetSidLengthRequired
GetFileSecurityA
OpenProcessToken
RegSetKeySecurity
FreeSid
RegLoadKeyA
SetServiceStatus
RegReplaceKeyW
SetSecurityDescriptorGroup
OpenSCManagerA
CryptAcquireContextW
QueryServiceStatus
ObjectDeleteAuditAlarmW
DeleteService
RegConnectRegistryA
CryptGenKey
BuildTrusteeWithNameW
SetNamedSecurityInfoW
AllocateAndInitializeSid
CryptGetUserKey
CloseEventLog
GetSecurityDescriptorLength
RegRestoreKeyW
EnumServicesStatusA
CryptGetProvParam
LookupAccountNameA
SetNamedSecurityInfoA
ReportEventW
LookupAccountSidA
RegLoadKeyW
MapGenericMask
ImpersonateLoggedOnUser
ChangeServiceConfigW
RegOpenKeyW
shell32
SHChangeNotify
SHGetDesktopFolder
ole32
OleFlushClipboard
OleCreateLink
oleaut32
SafeArrayPutElement
LoadTypeLibEx
SysFreeString
VariantChangeType
SafeArrayCreate
SafeArrayGetLBound
shlwapi
SHDeleteKeyA
StrTrimW
SHAutoComplete
SHQueryValueExW
StrChrA
PathCanonicalizeA
SHRegWriteUSValueW
msvcrt
__p__commode
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__p__fmode
__set_app_type
_except_handler3
_adjust_fdiv
Sections
.text Size: 236KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE