Static task
static1
Behavioral task
behavioral1
Sample
f6d1b6307e4ced354e033f43746c315c6e3c71d6200db5c97f11b33c82305c75.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6d1b6307e4ced354e033f43746c315c6e3c71d6200db5c97f11b33c82305c75.exe
Resource
win10v2004-20221111-en
General
-
Target
f6d1b6307e4ced354e033f43746c315c6e3c71d6200db5c97f11b33c82305c75
-
Size
824KB
-
MD5
7dc012da4d0fdd4df383fd5bb83ab99f
-
SHA1
6ff4d16bb0e443785104e5753093bd49a9e2af96
-
SHA256
f6d1b6307e4ced354e033f43746c315c6e3c71d6200db5c97f11b33c82305c75
-
SHA512
7d6c7079e875fd89a3a07b670ff3bcdfea310bed7a84befb2bb84c63ca3092cb81a4d8aa1146b64eb570c766ee60c9a23bd6c005b1c4efc21c4de62445b743f6
-
SSDEEP
24576:kr5G76WxdIfabvRKhonWQ+zpvarDSm7Za:BdIfabkhoWQ+z9arGm7
Malware Config
Signatures
Files
-
f6d1b6307e4ced354e033f43746c315c6e3c71d6200db5c97f11b33c82305c75.exe windows x86
307c9b2b1262b2579ad2512fcd43f469
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GlobalAddAtomA
CompareStringW
LockResource
GetTimeFormatA
HeapFree
TlsGetValue
IsValidCodePage
TlsAlloc
ExitProcess
CloseHandle
GlobalFlags
GetSystemInfo
CompareStringA
InterlockedIncrement
GetLocaleInfoA
LockFile
lstrcmpA
LCMapStringW
FileTimeToLocalFileTime
GetCurrentProcess
GetSystemTimeAsFileTime
GetFullPathNameA
GlobalUnlock
EnumResourceLanguagesA
GetVolumeInformationA
SetUnhandledExceptionFilter
WaitForSingleObject
GetTimeZoneInformation
GetStartupInfoA
GlobalFindAtomA
FreeEnvironmentStringsA
SetThreadPriority
SuspendThread
GetFileSizeEx
GetThreadLocale
GetEnvironmentStringsW
RtlUnwind
QueryPerformanceCounter
GetConsoleCP
InitializeCriticalSection
GlobalHandle
VirtualQuery
InterlockedExchange
LocalReAlloc
GetConsoleOutputCP
GetEnvironmentStrings
CreateThread
lstrlenA
GetACP
WriteConsoleA
CreateEventA
SetHandleCount
LocalAlloc
LocalFree
FindResourceExA
GetCPInfo
MulDiv
SetStdHandle
VirtualAlloc
LoadResource
SetEndOfFile
GetFileAttributesA
GetStringTypeA
ExitThread
HeapAlloc
UnlockFile
GetDateFormatA
LeaveCriticalSection
FormatMessageA
GetModuleHandleW
TerminateProcess
SetLastError
UnhandledExceptionFilter
LCMapStringA
ReadFile
GetCurrentThreadId
FreeLibrary
TlsFree
GetStdHandle
ConvertDefaultLocale
CreateFileA
GetStringTypeW
HeapCreate
ResumeThread
GetLastError
GetModuleFileNameA
GlobalGetAtomNameA
WriteConsoleW
FreeResource
Sleep
GetFileType
DuplicateHandle
FlushFileBuffers
FileTimeToSystemTime
InitializeCriticalSectionAndSpinCount
TlsSetValue
HeapSize
GlobalLock
FindFirstFileA
FindResourceA
WideCharToMultiByte
SetEnvironmentVariableA
SetFilePointer
RaiseException
GetProcAddress
GetCurrentProcessId
WriteFile
GetFileTime
InterlockedDecrement
GlobalDeleteAtom
DeleteFileA
VirtualFree
WritePrivateProfileStringA
SetErrorMode
SizeofResource
GetModuleFileNameW
IsDebuggerPresent
GetDriveTypeA
DeleteCriticalSection
MultiByteToWideChar
GetVersionExA
GlobalReAlloc
GlobalFree
GetCommandLineA
SetEvent
GetTickCount
FreeEnvironmentStringsW
GetConsoleMode
lstrcmpW
HeapReAlloc
GetCurrentDirectoryA
GetCurrentThread
VirtualProtect
ExpandEnvironmentStringsA
GetModuleHandleA
EnterCriticalSection
GetOEMCP
GlobalAlloc
GetFileSize
FindClose
user32
SetWindowTextA
SystemParametersInfoA
GetWindowRect
GetDesktopWindow
SetWindowLongA
SendMessageA
GetClassInfoExA
EnableMenuItem
GetDlgCtrlID
MapWindowPoints
GetLastActivePopup
GetParent
SetCursor
GetClassNameA
GetCapture
InvalidateRect
CallWindowProcA
GetWindowTextA
BeginPaint
EqualRect
GetMessageA
GetNextDlgTabItem
GetWindowTextLengthA
GetSystemMenu
GrayStringA
GetWindowThreadProcessId
CopyAcceleratorTableA
CheckMenuItem
ReleaseCapture
LoadBitmapA
DrawTextA
SetWindowRgn
KillTimer
IsDialogMessageA
IsWindowEnabled
DefWindowProcA
GetMenu
GetSystemMetrics
GetClassLongA
AdjustWindowRectEx
GetMenuItemID
GetKeyState
IntersectRect
CreatePopupMenu
CopyRect
MessageBoxA
RegisterClipboardFormatA
SetWindowPos
CreateDialogIndirectParamA
GetCursorPos
WindowFromPoint
TrackPopupMenu
SetWindowContextHelpId
InvalidateRgn
GetDlgItem
WinHelpA
AppendMenuA
PostMessageA
SetPropA
GetMessagePos
GetActiveWindow
LoadIconA
ReleaseDC
EndDialog
CharUpperA
GetSubMenu
RegisterWindowMessageA
LoadCursorA
ValidateRect
SetCapture
PtInRect
InsertMenuA
RemovePropA
ModifyMenuA
EndPaint
SetForegroundWindow
SetMenuItemBitmaps
PostQuitMessage
DispatchMessageA
GetClientRect
FillRect
GetTopWindow
CallNextHookEx
SetMenu
DrawIcon
GetMenuCheckMarkDimensions
GetWindowDC
GetMenuItemCount
DestroyMenu
GetForegroundWindow
DrawFrameControl
IsWindowVisible
RegisterClassA
DestroyWindow
GetMessageTime
GetAsyncKeyState
SetActiveWindow
PostThreadMessageA
UnhookWindowsHookEx
IsWindow
SetRect
GetSysColorBrush
GetWindowPlacement
IsChild
GetWindow
GetDC
MapDialogRect
EnableWindow
CreateWindowExA
MessageBeep
ScreenToClient
GetClassInfoA
GetPropA
SendDlgItemMessageA
MoveWindow
ClientToScreen
PeekMessageA
SetWindowsHookExA
GetMenuState
IsIconic
GetFocus
TabbedTextOutA
UpdateWindow
CharNextA
GetNextDlgGroupItem
DrawTextExA
ShowWindow
UnregisterClassA
GetWindowLongA
SetTimer
TranslateMessage
IsRectEmpty
RedrawWindow
SetFocus
GetSysColor
OffsetRect
gdi32
SetViewportExtEx
CreatePen
CreateCompatibleDC
CreateFontIndirectA
SetBkMode
GetCurrentPositionEx
PtVisible
GetMapMode
BeginPath
LPtoDP
SelectObject
CreateSolidBrush
RestoreDC
GetClipBox
OffsetViewportOrgEx
DeleteDC
SetTextColor
PathToRegion
StretchBlt
EnumFontFamiliesExA
StrokeAndFillPath
SetViewportOrgEx
SetWindowOrgEx
GetWindowExtEx
SetBkColor
ExtSelectClipRgn
GetObjectA
EndPath
LineTo
GetViewportExtEx
MoveToEx
DPtoLP
SetMapMode
BitBlt
CreateCompatibleBitmap
GetRgnBox
GetTextColor
PolyBezierTo
DeleteObject
Escape
GetBkColor
CreateRectRgnIndirect
ScaleViewportExtEx
SetWindowExtEx
GetStockObject
ScaleWindowExtEx
CreateBitmap
ExtTextOutA
RectVisible
SaveDC
TextOutA
CombineRgn
GetDeviceCaps
comdlg32
GetFileTitleA
advapi32
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegQueryValueA
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoGetClassObject
OleInitialize
CLSIDFromString
OleIsCurrentClipboard
CoTaskMemFree
OleUninitialize
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoTaskMemAlloc
CoFreeUnusedLibraries
OleFlushClipboard
StgCreateDocfileOnILockBytes
oleaut32
VariantCopy
SysAllocStringLen
SysStringLen
SafeArrayDestroy
SysAllocStringByteLen
VariantTimeToSystemTime
SysAllocString
SysFreeString
SystemTimeToVariantTime
VariantInit
OleCreateFontIndirect
VariantChangeType
VariantClear
comctl32
ord17
shlwapi
PathStripToRootA
PathFindFileNameA
PathIsUNCA
PathFindExtensionA
rpcrt4
UuidCreate
secur32
CompleteAuthToken
oledlg
ord8
Sections
.text Size: 780KB - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.oiu Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bdsh Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ