Static task
static1
Behavioral task
behavioral1
Sample
6be4125db2d46ed044a34c9144193962dd2be5a62408414752a1fd2038c4360a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6be4125db2d46ed044a34c9144193962dd2be5a62408414752a1fd2038c4360a.exe
Resource
win10v2004-20230220-en
General
-
Target
6be4125db2d46ed044a34c9144193962dd2be5a62408414752a1fd2038c4360a
-
Size
1.7MB
-
MD5
e7f0e5ef10419c52c0e2ef5c9cd130b3
-
SHA1
7b0fd50c78f11fdbb7630a574e0ad6f2d7209e27
-
SHA256
6be4125db2d46ed044a34c9144193962dd2be5a62408414752a1fd2038c4360a
-
SHA512
9dedecb40bbc8fee4b25b31eca63c530bd5e02e1ca26664af3b69a437b07e264bbf2fb71d665fa1e0090b20a48239c8c4551f94e87482cc7c974fa1d5b4d0796
-
SSDEEP
49152:SqfuaBrx6YuY1gdPeFMrji2E8HdsxkueQdPtE:SqfuaBr00mP9ewdluDnE
Malware Config
Signatures
Files
-
6be4125db2d46ed044a34c9144193962dd2be5a62408414752a1fd2038c4360a.exe windows x86
15d7bd8ef17ac5476cf86376fb7705bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
FileTimeToLocalFileTime
Sleep
WaitForMultipleObjects
GetTickCount
SetPriorityClass
GetCurrentProcess
lstrlenA
lstrcatA
GetLastError
ReadFile
GetStdHandle
WriteFile
MoveFileW
DeleteFileW
FreeLibrary
LoadLibraryExA
LoadLibraryA
AreFileApisANSI
LoadLibraryExW
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
SetCurrentDirectoryA
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
CreateDirectoryA
DeleteFileA
GetWindowsDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryW
GetSystemDirectoryW
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
GetShortPathNameA
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathA
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
GetFullPathNameW
SearchPathW
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindFirstChangeNotificationW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetFileSize
SetFilePointer
GetFileInformationByHandle
SetEndOfFile
CreateFileA
CompareFileTime
FileTimeToSystemTime
EnterCriticalSection
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
GetVersionExA
UnmapViewOfFile
ExpandEnvironmentStringsW
MapViewOfFile
CreateFileMappingA
GetFileSizeEx
GetCommandLineW
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetLocaleInfoA
GetLocaleInfoW
IsValidCodePage
SetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapDestroy
HeapCreate
HeapReAlloc
FatalAppExitA
ExitProcess
HeapSize
IsDebuggerPresent
TerminateProcess
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
CreateThread
GetCurrentThreadId
GetProcAddress
DeleteCriticalSection
ExitThread
HeapFree
HeapAlloc
RtlUnwind
RaiseException
user32
CharPrevExA
MoveWindow
InvalidateRect
SetFocus
CharToOemA
CharLowerW
CharUpperW
CharLowerA
CharUpperA
DialogBoxParamW
CreateDialogParamW
DialogBoxParamA
CreateDialogParamA
GetDialogBaseUnits
SystemParametersInfoA
GetDlgCtrlID
GetWindowLongA
SetWindowLongA
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetWindowTextA
CreateWindowExW
RegisterClassW
RegisterClassA
GetWindowTextA
GetWindowTextLengthA
CreateWindowExA
SendMessageW
LoadStringW
LoadStringA
CharPrevA
CharNextA
MessageBoxW
LoadIconA
LoadCursorA
wsprintfA
SetDlgItemTextA
ShowWindow
KillTimer
SetTimer
PostMessageA
ScreenToClient
IsDlgButtonChecked
IsWindow
EndDialog
SendMessageA
GetWindowRect
MapDialogRect
GetDlgItem
SetCursor
gdi32
GetStockObject
shell32
DragFinish
SHGetPathFromIDListA
SHBrowseForFolderA
DragQueryFileA
DragQueryFileW
SHGetMalloc
SHGetFileInfoA
ole32
CoInitialize
CoUninitialize
oleaut32
VariantCopy
SysAllocStringByteLen
VariantClear
SysAllocString
SysFreeString
shlwapi
PathFileExistsW
Sections
.text Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ