Static task
static1
Behavioral task
behavioral1
Sample
525dc4cd0b469aca19d338e80f967d6e034a1ba653f239759a00b115185576c8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
525dc4cd0b469aca19d338e80f967d6e034a1ba653f239759a00b115185576c8.exe
Resource
win10v2004-20220812-en
General
-
Target
525dc4cd0b469aca19d338e80f967d6e034a1ba653f239759a00b115185576c8
-
Size
190KB
-
MD5
571672c51a8417641ff1e97b8a25b390
-
SHA1
9f657714372838fe59706de78e926c2b034c2f14
-
SHA256
525dc4cd0b469aca19d338e80f967d6e034a1ba653f239759a00b115185576c8
-
SHA512
bc994a03d56347b3526fe57a5784e294c07498c827a7bb9cad305a7a0dc943a8437de81e773568f4fb66f2ab41084dbc716c3950f4e91ec0c1a4f5615df60666
-
SSDEEP
3072:lSPFw17DFpdt8C/fMc0vqBlacQ8wwqAwkEUBTtB+g4auQUGqn9574YpuAXx7+kF:lS8l1z/fD0vy6AwXCTtB+gfbon/1uCh
Malware Config
Signatures
Files
-
525dc4cd0b469aca19d338e80f967d6e034a1ba653f239759a00b115185576c8.exe windows x86
aaf8228b13d0ee05e21e4e777c12d43e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
SendMessageW
LoadCursorW
GetDesktopWindow
SetDlgItemTextW
IsWindow
GetDlgItemInt
CheckDlgButton
SetCursor
CreateDialogParamW
EnableWindow
DefWindowProcW
GetClientRect
IsRectEmpty
LoadStringW
GetWindowLongW
SetWindowLongW
ClientToScreen
GetAsyncKeyState
ReleaseDC
PeekMessageW
SetDlgItemInt
MoveWindow
IsWindowVisible
TranslateMessage
InvalidateRect
GetWindowRect
CheckRadioButton
DispatchMessageW
GetDC
DestroyWindow
GetDlgItem
wsprintfW
winmm
waveInStart
waveInClose
mixerGetLineInfoW
mixerClose
waveInUnprepareHeader
OpenDriver
mixerGetLineControlsW
waveInStop
CloseDriver
waveInGetDevCapsW
mixerGetID
SendDriverMessage
waveInOpen
waveInReset
waveInAddBuffer
mixerSetControlDetails
mixerOpen
mixerGetControlDetailsW
waveInPrepareHeader
kernel32
IsBadCodePtr
CreateIoCompletionPort
VirtualFree
LoadLibraryW
GlobalMemoryStatus
WideCharToMultiByte
lstrcmpiW
HeapAlloc
InterlockedIncrement
WriteFile
GetModuleFileNameA
GlobalUnlock
GetFullPathNameW
GetProfileIntA
IsBadWritePtr
GetStartupInfoA
SetFilePointer
GetACP
GetSystemInfo
GetLastError
lstrcpyW
IsBadReadPtr
PostQueuedCompletionStatus
GetPrivateProfileStringW
GetSystemDefaultLangID
InterlockedExchange
GlobalLock
GetDiskFreeSpaceW
GlobalHandle
GetThreadPriority
QueryPerformanceCounter
ReadFile
CreateFileW
GetCurrentProcess
SetThreadPriority
HeapFree
MulDiv
lstrlenW
lstrcpyA
ReleaseSemaphore
CreateSemaphoreW
GetProcAddress
CreateEventW
SetEvent
CloseHandle
GetCurrentThread
InitializeCriticalSection
GetCurrentProcessId
InterlockedDecrement
MultiByteToWideChar
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetFileAttributesW
GetTickCount
SetEndOfFile
GetVersionExW
EnterCriticalSection
ResetEvent
CreateThread
GetFileSize
GetQueuedCompletionStatus
lstrlenA
GlobalAlloc
LeaveCriticalSection
FreeLibrary
WaitForSingleObject
lstrcpynW
DeleteFileW
DeleteCriticalSection
WaitForMultipleObjects
GetProcessHeap
GlobalFree
lstrcmpW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
advapi32
RegCreateKeyW
RegQueryValueExW
RegOpenKeyW
RegSetValueExW
RegEnumKeyExW
RegSetValueW
RegOpenKeyExW
RegCloseKey
RegEnumKeyW
RegDeleteKeyW
msvfw32
ICClose
ICGetInfo
ICSendMessage
ICOpen
ICLocate
ICCompress
ICDecompress
gdi32
GetObjectW
SelectObject
PatBlt
GetStockObject
GetPaletteEntries
GetTextExtentPoint32W
ole32
CoCreateInstance
CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemFree
CoUninitialize
CoInitialize
Sections
.text Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ