Static task
static1
Behavioral task
behavioral1
Sample
6275358d47b8c6778924f9d64f514df83b034a8735edea3e431a17b9ca99d0d4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6275358d47b8c6778924f9d64f514df83b034a8735edea3e431a17b9ca99d0d4.exe
Resource
win10v2004-20220901-en
General
-
Target
6275358d47b8c6778924f9d64f514df83b034a8735edea3e431a17b9ca99d0d4
-
Size
212KB
-
MD5
f89bd0d1aadc487a1d323c50921bbc47
-
SHA1
2150bbfd0ed07d142be015eeb9d8571d492b82bc
-
SHA256
6275358d47b8c6778924f9d64f514df83b034a8735edea3e431a17b9ca99d0d4
-
SHA512
9e5712b4684a0e887893f199d1efae4c4be65ad8edc54e7760e676d438e20542774833167f0d5ccdd43457dc3cd9524dba101d725b837e666646cc88555f2f08
-
SSDEEP
1536:gsAr7WRhgCdAXm5SoWzacQlCVpUYXIYxdwBuHCRpeOSiLKGYdISo9m:UrigCdl5SGcQlSpUYbwuipeh/dLo9m
Malware Config
Signatures
Files
-
6275358d47b8c6778924f9d64f514df83b034a8735edea3e431a17b9ca99d0d4.exe windows x86
2f77d5052b02d77358cf30719016148a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
QueryPerformanceCounter
ReadFile
DeleteCriticalSection
lstrcpyW
GetLastError
VirtualFree
LoadLibraryA
GetLastError
GetCurrentProcessId
GetCurrentProcessId
lstrlenW
CreateFileW
GetCurrentProcessId
TerminateProcess
lstrlenW
MultiByteToWideChar
MultiByteToWideChar
HeapDestroy
lstrlenW
HeapFree
GetModuleFileNameA
WaitForSingleObject
LoadLibraryA
LoadLibraryW
lstrlenW
InterlockedDecrement
GetCommandLineA
HeapFree
SetLastError
LoadLibraryW
LoadLibraryA
CloseHandle
SetLastError
user32
MoveWindow
MapWindowPoints
GetDlgItem
DestroyMenu
CheckDlgButton
GetDlgItem
DefWindowProcW
CreateWindowExW
GetWindowTextW
ReleaseCapture
SetCapture
IsDialogMessageW
MapWindowPoints
EnableWindow
GetWindow
WinHelpW
GetKeyState
LoadStringA
LoadCursorW
IsWindow
RegisterClassW
LoadStringW
GetSysColor
EnableMenuItem
InvalidateRect
DestroyMenu
UpdateWindow
DispatchMessageW
IsIconic
OffsetRect
TranslateMessage
MessageBeep
GetWindowTextW
GetClientRect
DispatchMessageA
PeekMessageW
EndPaint
MessageBoxA
InvalidateRect
SetRect
CheckDlgButton
IsWindow
GetWindowTextW
EndPaint
CopyRect
DestroyWindow
SetForegroundWindow
LoadStringA
GetCursorPos
InvalidateRect
InvalidateRect
SetDlgItemTextW
IsWindow
DefWindowProcW
GetKeyState
SystemParametersInfoW
GetWindowLongW
gdi32
GetStockObject
GetDeviceCaps
MoveToEx
BitBlt
GetStockObject
TextOutW
LineTo
TextOutW
SetBkMode
PatBlt
DeleteObject
GetDeviceCaps
CreateCompatibleDC
GetDeviceCaps
SetBkMode
SetBkColor
DeleteObject
SetTextColor
GetStockObject
StretchBlt
SetBkMode
CreateBitmap
CreateCompatibleBitmap
CreateSolidBrush
MoveToEx
SelectObject
DeleteObject
SetTextColor
LineTo
SetBkColor
GetObjectW
GetTextExtentPoint32W
PatBlt
SelectObject
TextOutW
LineTo
ExtTextOutW
GetTextExtentPoint32W
DeleteDC
BitBlt
SetBkMode
CreateFontIndirectW
DeleteDC
GetStockObject
CreateCompatibleBitmap
CreateBitmap
BitBlt
DeleteDC
CreateBitmap
GetTextMetricsW
GetTextMetricsW
ExtTextOutW
PatBlt
SelectObject
TextOutW
SetBkColor
StretchBlt
CreateSolidBrush
DeleteObject
CreateBitmap
SelectObject
GetTextMetricsW
LineTo
GetStockObject
DeleteDC
DeleteDC
CreateFontIndirectW
GetStockObject
GetDeviceCaps
ExtTextOutW
GetDeviceCaps
SetBkMode
TextOutW
TextOutW
MoveToEx
CreateBitmap
DeleteObject
CreateSolidBrush
SetTextColor
GetDeviceCaps
SetBkMode
GetObjectW
PatBlt
GetTextMetricsW
PatBlt
StretchBlt
ExtTextOutW
LineTo
CreateSolidBrush
CreateFontIndirectW
SelectObject
CreateFontIndirectW
CreateCompatibleBitmap
CreateCompatibleBitmap
CreateBitmap
CreateFontIndirectW
GetDeviceCaps
DeleteDC
DeleteObject
Sections
.idata Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.fdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.fdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE