Static task
static1
Behavioral task
behavioral1
Sample
c6d9c9c38560fd001c16686e231efcd51405419f7d7b5ca509e39fb5634a6792.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6d9c9c38560fd001c16686e231efcd51405419f7d7b5ca509e39fb5634a6792.exe
Resource
win10v2004-20221111-en
General
-
Target
c6d9c9c38560fd001c16686e231efcd51405419f7d7b5ca509e39fb5634a6792
-
Size
2.1MB
-
MD5
27abcb3628b4afd0dd8f5f24a0623689
-
SHA1
97ac4d10745b001d63826c142b12b812759ea72c
-
SHA256
c6d9c9c38560fd001c16686e231efcd51405419f7d7b5ca509e39fb5634a6792
-
SHA512
503c6d7bed29823b6254c05b4bf0978a55734beaa23231a4aa6d70fbd74311f8dcc67d224dc6255833f3220abbd0a203358501df2e386b7930e95606d5185f3e
-
SSDEEP
12288:QeqOByJuml1OcL9JXdehgwFt7hSjXNQiay:QemdlkcL9JXsLFHUXNQia
Malware Config
Signatures
Files
-
c6d9c9c38560fd001c16686e231efcd51405419f7d7b5ca509e39fb5634a6792.exe windows x86
7220155ceaee9a32b85baa81247050d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeSetEvent
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
mixerGetControlDetailsA
mixerClose
timeKillEvent
mixerSetControlDetails
kernel32
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
WritePrivateProfileStringA
SetHandleCount
lstrcmpA
GetModuleFileNameA
GetPrivateProfileStringA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
lstrcpyA
WinExec
lstrlenA
lstrcatA
ExitProcess
DeleteFileA
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
GetCurrentProcess
FindClose
FindNextFileA
CopyFileA
SetCurrentDirectoryA
FindFirstFileA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapSize
TerminateProcess
GetACP
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
RtlUnwind
GetTickCount
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetStringTypeExA
CreateDirectoryA
GetProcAddress
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetProfileStringA
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
GetCurrentDirectoryA
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetThreadLocale
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
GetCurrentThreadId
GlobalAlloc
GetCurrentThread
GetLastError
lstrcpynA
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
LocalFree
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
SetLastError
InterlockedDecrement
FindResourceA
LoadResource
LockResource
GetVersion
user32
GetMenuStringA
InsertMenuA
LoadStringA
GetSysColorBrush
GetClassNameA
CharNextA
FindWindowA
SetRect
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
GetSystemMenu
DeleteMenu
AppendMenuA
IsRectEmpty
SetParent
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
WindowFromPoint
GetMessageA
TranslateMessage
ValidateRect
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetCapture
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
PostThreadMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
GetNextDlgTabItem
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindowLongA
SetWindowPos
RegisterWindowMessageA
IsIconic
GetWindowPlacement
GetSystemMetrics
LoadImageA
LoadBitmapA
SystemParametersInfoA
ExitWindowsEx
SetPropA
UpdateWindow
RegisterClipboardFormatA
GetTabbedTextExtentA
CharUpperA
GetNextDlgGroupItem
CopyAcceleratorTableA
DestroyIcon
LockWindowUpdate
GetDCEx
InvertRect
LoadMenuA
GetSubMenu
GetCursorPos
LoadIconA
DrawTextA
CopyIcon
InflateRect
GetMessagePos
PtInRect
MessageBeep
SetWindowLongA
OffsetRect
GetWindow
IntersectRect
GetWindowRect
SendMessageA
GetClientRect
KillTimer
SetTimer
CopyImage
SetCursor
FillRect
GetSysColor
InvalidateRect
IsWindow
PostMessageA
GetDC
ReleaseDC
GetParent
ClientToScreen
ScreenToClient
DestroyCursor
LoadCursorA
EnableWindow
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
SendDlgItemMessageA
gdi32
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
CreateRectRgn
GetDeviceCaps
GetViewportExtEx
SetROP2
CreatePen
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateRectRgnIndirect
GetMapMode
SetRectRgn
CombineRgn
StretchDIBits
CreateCompatibleBitmap
GetCharWidthA
Rectangle
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
GetTextColor
GetBkColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
StartDocA
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
BitBlt
GetCurrentObject
SelectObject
GetStockObject
CreateFontIndirectA
CreateFontA
CreateCompatibleDC
StretchBlt
CreateSolidBrush
PatBlt
GetObjectA
DeleteObject
GetTextMetricsA
GetTextExtentPoint32A
LPtoDP
GetTextExtentPointA
GetWindowExtEx
CreateDIBitmap
DPtoLP
comdlg32
CommDlgExtendedError
GetFileTitleA
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
GetFileSecurityA
RegQueryValueA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegSetValueA
RegCloseKey
SetFileSecurityA
RegDeleteValueA
RegQueryValueExA
shell32
ExtractIconA
DragQueryFileA
DragFinish
SHBrowseForFolderA
SHGetPathFromIDListA
Shell_NotifyIconA
ShellExecuteA
SHGetFileInfoA
comctl32
ord8
ImageList_AddMasked
ord17
ImageList_Destroy
ImageList_Create
oledlg
ord8
ole32
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
CoTaskMemFree
OleUninitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemAlloc
olepro32
ord253
oleaut32
VariantTimeToSystemTime
SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocStringLen
SysAllocString
VariantClear
SysFreeString
VariantChangeType
skinh
SkinH_Attach
Sections
.text Size: 352KB - Virtual size: 351KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ