Static task
static1
Behavioral task
behavioral1
Sample
6dde7d0aac0303b2f8a37807a04bc8296d0d17bbba16d2f4b785ade4c8e5f922.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6dde7d0aac0303b2f8a37807a04bc8296d0d17bbba16d2f4b785ade4c8e5f922.exe
Resource
win10v2004-20220812-en
General
-
Target
6dde7d0aac0303b2f8a37807a04bc8296d0d17bbba16d2f4b785ade4c8e5f922
-
Size
12.5MB
-
MD5
327dacd6c7d09fd6a5cbf137cc346f1d
-
SHA1
5c78ca6d65c3c4b24d8facefe88a2667e2eae751
-
SHA256
6dde7d0aac0303b2f8a37807a04bc8296d0d17bbba16d2f4b785ade4c8e5f922
-
SHA512
20ce2d621329c22c9bc0e6fcf131475a4cf2f6ff360060342703825def3cf31ad4f5ffdb2e8c8acbabc1ddebd66499af6d184918f2f0c30e291a2ad22ec78dbf
-
SSDEEP
393216:AxPRVetOK0Qn5lXnNYfy99spWHFwVJT7LBuJ3G:URVLK0QmyMpgF2hnBkW
Malware Config
Signatures
Files
-
6dde7d0aac0303b2f8a37807a04bc8296d0d17bbba16d2f4b785ade4c8e5f922.exe windows x86
46e585cbbd6dd3cbb1c22474dfda0a76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
FileTimeToLocalFileTime
Sleep
WaitForMultipleObjects
GetTickCount
SetPriorityClass
GetCurrentProcess
lstrlenA
lstrcatA
GetLastError
ReadFile
GetStdHandle
WriteFile
MoveFileW
DeleteFileW
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
CreateDirectoryA
DeleteFileA
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
GetFullPathNameA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetTempFileNameW
GetFullPathNameW
FindClose
FindFirstFileA
FindFirstFileW
GetFileSize
SetFilePointer
SetEndOfFile
CreateFileA
EnterCriticalSection
GetProcAddress
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
InitializeCriticalSection
GetVersionExA
UnmapViewOfFile
ExpandEnvironmentStringsW
MapViewOfFile
CreateFileMappingA
GetCommandLineW
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapCreate
HeapReAlloc
ExitProcess
HeapSize
IsDebuggerPresent
TerminateProcess
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
CreateThread
GetCurrentThreadId
FileTimeToSystemTime
DeleteCriticalSection
ExitThread
HeapFree
HeapAlloc
RtlUnwind
RaiseException
user32
MoveWindow
InvalidateRect
SetFocus
CharUpperW
CharUpperA
DialogBoxParamW
DialogBoxParamA
SystemParametersInfoA
GetDlgCtrlID
GetWindowLongA
SetWindowLongA
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
SendMessageW
LoadStringW
LoadStringA
MessageBoxW
LoadIconA
SetCursor
wsprintfA
SetDlgItemTextA
ShowWindow
KillTimer
SetTimer
PostMessageA
ScreenToClient
IsDlgButtonChecked
IsWindow
EndDialog
SendMessageA
GetWindowRect
MapDialogRect
GetDlgItem
LoadCursorA
gdi32
GetStockObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
SHGetFileInfoA
ole32
CoInitialize
CoUninitialize
oleaut32
VariantClear
SysAllocString
SysFreeString
shlwapi
PathFileExistsW
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ