Static task
static1
Behavioral task
behavioral1
Sample
6c694057feae5b24dc288d515cb523e508798f93ca4405ff53cb35a2d2352125.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6c694057feae5b24dc288d515cb523e508798f93ca4405ff53cb35a2d2352125.exe
Resource
win10v2004-20220812-en
General
-
Target
6c694057feae5b24dc288d515cb523e508798f93ca4405ff53cb35a2d2352125
-
Size
681KB
-
MD5
a3babf69b85b89f6742426eededdd736
-
SHA1
e3d250b7fd4836600a39881eda5d562dc5a3a030
-
SHA256
6c694057feae5b24dc288d515cb523e508798f93ca4405ff53cb35a2d2352125
-
SHA512
e878026d7be7b7ced86311611e9d8134919d459c90a0e6b5f2e9f6349640e4e62984d130ed70e3aa150e45c58cd43c53c4b99fad02796f979f528358d6224fdb
-
SSDEEP
12288:B7xnXHpK5soEC7IdG1TyVnl2lfzL79EKIoNDfVIg:RJXHpGs7CTCnl2hzL7OlC1
Malware Config
Signatures
Files
-
6c694057feae5b24dc288d515cb523e508798f93ca4405ff53cb35a2d2352125.exe windows x86
786e0801d83dd0bf6f4f8a807130ab2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetComputerNameA
GetVersionExA
GetLogicalDriveStringsA
GetCurrentProcess
GetModuleHandleA
GetLocalTime
GetFileSize
CreateFileW
InterlockedDecrement
CreateProcessA
GetCurrentProcessId
WaitForSingleObject
CreateMutexA
GetVersion
GetExitCodeProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
CreateDirectoryW
DeleteFileW
FindClose
FindNextFileW
FindFirstFileW
TerminateProcess
OpenProcess
GetDriveTypeA
GetTempPathA
SetFileAttributesA
CopyFileA
lstrlenW
HeapFree
GetProcessHeap
FindResourceA
SizeofResource
LockResource
LoadResource
FindResourceExA
lstrlenA
HeapReAlloc
HeapAlloc
SetConsoleMode
ReadConsoleInputA
CreateDirectoryA
GetModuleFileNameW
LoadLibraryW
DeviceIoControl
FreeLibrary
lstrcmpA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LoadLibraryA
SetEndOfFile
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetProcAddress
MultiByteToWideChar
CreateMutexW
ReleaseMutex
Sleep
WideCharToMultiByte
FormatMessageA
GetLastError
SetFilePointer
ReadFile
CreateFileA
WriteFile
InitializeCriticalSectionAndSpinCount
VirtualQuery
SetStdHandle
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
VirtualAlloc
VirtualFree
HeapCreate
GetConsoleMode
GetConsoleCP
ExitProcess
IsValidCodePage
GetOEMCP
GetACP
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
SetConsoleCtrlHandler
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
IsDebuggerPresent
UnhandledExceptionFilter
CreateThread
ExitThread
RtlUnwind
QueryPerformanceCounter
GlobalMemoryStatus
CloseHandle
DeleteFileA
GetStdHandle
FlushConsoleInputBuffer
GetTickCount
GetSystemTimeAsFileTime
GetLogicalDrives
OutputDebugStringA
RaiseException
HeapSize
HeapDestroy
InterlockedIncrement
user32
GetWindowRect
SystemParametersInfoA
GetParent
GetWindowLongA
GetDlgItemTextA
EndDialog
SendMessageA
SetFocus
GetDlgItem
SetForegroundWindow
KillTimer
SetTimer
LoadIconA
wsprintfW
BroadcastSystemMessageA
MessageBoxA
GetWindow
wsprintfA
SetWindowPos
GetClientRect
MapWindowPoints
DialogBoxParamA
advapi32
RegCreateKeyExA
RegOpenKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegSetValueExA
RegQueryValueExA
RegCloseKey
shell32
SHFileOperationA
ShellExecuteExA
ole32
OleRun
CoInitializeEx
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitialize
oleaut32
SysAllocStringLen
SysFreeString
SysAllocString
VariantInit
VariantClear
ws2_32
WSACleanup
inet_ntoa
gethostbyname
gethostname
WSAStartup
closesocket
WSACloseEvent
WSAGetLastError
WSASend
WSAResetEvent
freeaddrinfo
WSASetLastError
getaddrinfo
WSASocketA
WSAEnumNetworkEvents
WSAConnect
WSAEventSelect
WSASetEvent
WSACreateEvent
WSARecv
inet_addr
WSAGetOverlappedResult
shlwapi
PathFileExistsA
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
CM_Get_Child
CM_Get_Device_IDA
CM_Get_Sibling
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
dbghelp
MiniDumpWriteDump
psapi
GetModuleFileNameExW
wininet
DeleteUrlCacheEntry
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
Sections
.text Size: 530KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ