Static task
static1
Behavioral task
behavioral1
Sample
c6e092316f61d2fc9c84299dd224a6e419e74c98c51a44023f8f72530ac28fdc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c6e092316f61d2fc9c84299dd224a6e419e74c98c51a44023f8f72530ac28fdc.exe
Resource
win10v2004-20230220-en
General
-
Target
c6e092316f61d2fc9c84299dd224a6e419e74c98c51a44023f8f72530ac28fdc
-
Size
172KB
-
MD5
915f42f54d50a7c048322b8cb9363010
-
SHA1
6657525ac7d66b4755f7bc7d691b1be8cad426a6
-
SHA256
c6e092316f61d2fc9c84299dd224a6e419e74c98c51a44023f8f72530ac28fdc
-
SHA512
330f381bbd4d14f278c0b8e6eb09a04b9337ce15f755589250127fcfd29888526e0b12496da0ad281897a0822d14381b5084aa9398142fa9aa1427afe3189b33
-
SSDEEP
3072:8tVNFLtlAQ0/fu/Mb8XlF08Ne0vdco7ZY5bm3ofOV3x0IQebfpT6D1dS4LrNjo:OVDZlR06hQ8AI1omYfOzRRfZ4/Nk
Malware Config
Signatures
Files
-
c6e092316f61d2fc9c84299dd224a6e419e74c98c51a44023f8f72530ac28fdc.exe windows x86
23c8f2a764eeaf66da5ac055f244c7b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
GetUserNameA
GetCurrentHwProfileA
RegCloseKey
RegCreateKeyExW
RegSetValueExW
user32
TranslateMessage
DispatchMessageW
DefWindowProcW
RegisterClassW
GetMessageW
CreateWindowExW
DestroyWindow
UnregisterClassW
ws2_32
gethostbyname
WSACleanup
WSAStartup
crypt32
CryptBinaryToStringA
wininet
InternetGetConnectedState
HttpSendRequestA
InternetReadFile
shell32
ShellExecuteA
SHCreateDirectoryExW
SHCreateDirectoryExA
kernel32
HeapReAlloc
HeapSize
ReadConsoleW
FlushFileBuffers
GetProcessHeap
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
WriteConsoleW
SetEndOfFile
GetACP
IsValidCodePage
FindFirstFileExW
CloseHandle
WaitForMultipleObjects
CreateThread
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
CreateFileA
GetFileSize
ReadFile
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetLogicalDrives
GetVolumeInformationA
Sleep
GetModuleFileNameW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetComputerNameA
FindClose
FindFirstFileW
FindNextFileW
GetDiskFreeSpaceExW
GetDriveTypeW
GetWindowsDirectoryW
GetModuleHandleA
DeleteFileW
CreateFileW
WriteFile
TerminateProcess
OpenProcess
QueryFullProcessImageNameW
GetVolumeInformationW
GetModuleHandleW
CopyFileW
GetFileTime
CreateProcessA
GetModuleFileNameA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
LCMapStringW
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
MoveFileExW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetFileType
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
CompareStringW
DecodePointer
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ