Static task
static1
Behavioral task
behavioral1
Sample
a6d4a5fe02f0981f78fc879b7898491cc0cad7ccb1b8b4d1d1d26e404d0ed283.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6d4a5fe02f0981f78fc879b7898491cc0cad7ccb1b8b4d1d1d26e404d0ed283.exe
Resource
win10v2004-20220901-en
General
-
Target
a6d4a5fe02f0981f78fc879b7898491cc0cad7ccb1b8b4d1d1d26e404d0ed283
-
Size
16.6MB
-
MD5
6f5285ca90718309c7fc4e33f94496a8
-
SHA1
372cdd0656f6a8442bdd8aaa7a9fb67e69f40582
-
SHA256
a6d4a5fe02f0981f78fc879b7898491cc0cad7ccb1b8b4d1d1d26e404d0ed283
-
SHA512
c84495cfb70627437f365612d7c7c7a7d76607bdafada0d2a549db4421b4234bbaa42f3011a042b6a5d2f900d9f449de7510e357e4a54b67032db4017f3c0089
-
SSDEEP
49152:se1wX4fUTxOdzOkuuqyARS/kGbJxt1+sJmoKYug/P5LeNnuUKSct:PwIIxOyu/u61FxX+sUsugHU0Upct
Malware Config
Signatures
Files
-
a6d4a5fe02f0981f78fc879b7898491cc0cad7ccb1b8b4d1d1d26e404d0ed283.exe windows x86
b4d71d6ed579f18bea1ee4aba2242ad6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
SetConsoleMode
CreateSemaphoreA
GetBinaryTypeA
TerminateProcess
GetBinaryTypeW
CompareStringW
GetACP
IsBadStringPtrA
GetTempPathW
LCMapStringA
GetConsoleOutputCP
VerifyVersionInfoW
GetStdHandle
FindFirstFileA
GetProcAddress
GetProcessVersion
CreateSemaphoreW
GetFileType
GetModuleHandleA
CompareStringA
GetCurrentThreadId
LocalSize
GetCurrentProcessId
GetPrivateProfileSectionW
CloseHandle
GetSystemInfo
VirtualProtect
FlushFileBuffers
FormatMessageW
GetStringTypeW
GetStringTypeA
HeapSize
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
SetStdHandle
GetCPInfo
GetOEMCP
LoadLibraryA
WideCharToMultiByte
VirtualQuery
InterlockedExchange
RtlUnwind
InitializeCriticalSection
SetFilePointer
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetStartupInfoA
SetHandleCount
GetCommandLineA
ExitProcess
Sleep
GetLocaleInfoW
GetCurrencyFormatW
EnumTimeFormatsW
GetDateFormatA
GetCurrencyFormatA
EscapeCommFunction
IsBadReadPtr
SleepEx
SetCommBreak
OpenSemaphoreA
FlushConsoleInputBuffer
SetConsoleActiveScreenBuffer
GetCurrentProcess
GetLocaleInfoA
IsBadStringPtrW
GetDateFormatW
GetCommandLineW
LCMapStringW
GetEnvironmentStringsW
GetLastError
HeapFree
HeapAlloc
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
user32
ToAsciiEx
DestroyWindow
SetWindowPlacement
GetMessageA
CloseClipboard
HideCaret
MapDialogRect
CreateDialogParamA
TrackPopupMenu
IsIconic
SetKeyboardState
SetForegroundWindow
GetWindowTextLengthA
SendMessageA
DrawEdge
ShowCaret
WinHelpA
GetCapture
IsDialogMessageA
GetKeyboardState
GetWindowTextA
GetKeyboardLayout
InvalidateRect
EnableMenuItem
EndDialog
DestroyCaret
CheckDlgButton
OpenClipboard
SetCaretPos
InsertMenuA
SetWindowTextA
LoadCursorA
GetCaretBlinkTime
SetDlgItemTextA
GetDoubleClickTime
gdi32
TextOutA
TranslateCharsetInfo
DeleteDC
CreateFontA
GetDeviceCaps
ExcludeClipRect
CreateBitmap
CreateCompatibleDC
SetMapMode
Rectangle
GetCharWidthA
GetCharWidth32W
SetPaletteEntries
GetTextExtentExPointA
CreatePen
GetTextMetricsA
IntersectClipRect
GetObjectA
CreateSolidBrush
shell32
CommandLineToArgvW
Sections
.text Size: 484KB - Virtual size: 483KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 284KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ