Static task
static1
Behavioral task
behavioral1
Sample
5671941c6bf132e3b58968f676486d519c8d03f648ab450a5f4b10ff2ecdfdab.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5671941c6bf132e3b58968f676486d519c8d03f648ab450a5f4b10ff2ecdfdab.exe
Resource
win10v2004-20220812-en
General
-
Target
5671941c6bf132e3b58968f676486d519c8d03f648ab450a5f4b10ff2ecdfdab
-
Size
184KB
-
MD5
6f0362c5d666c2789578d82e082c37b9
-
SHA1
289a7c11adf8bfe04247cf4812685e20f7ea3793
-
SHA256
5671941c6bf132e3b58968f676486d519c8d03f648ab450a5f4b10ff2ecdfdab
-
SHA512
3fc2420c656995a68318aeb83ac8d3f948857e6f526cd55bac6929a09431d3374f2919238cc20d941f700e9b844c343b629ddfba63dd8ccd9a3a037334f279be
-
SSDEEP
3072:/kVm95YjGMwW4dcGktyL2jmikZGLqM+aBwctrmQ3+lNYpf+gVameUqkfbhNJUdae:/kVm9aGM34i62jZkZiF+aFrmS+lNYofj
Malware Config
Signatures
Files
-
5671941c6bf132e3b58968f676486d519c8d03f648ab450a5f4b10ff2ecdfdab.exe windows x86
21b1ef04284c4ee757bc794780fb0645
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
lstrcmpW
GetCurrentThread
SetEvent
GetStartupInfoA
IsBadCodePtr
GetTickCount
GlobalHandle
lstrlenW
DeleteCriticalSection
CreateIoCompletionPort
GetProcessHeap
ReleaseSemaphore
GetProfileIntA
InterlockedIncrement
QueryPerformanceCounter
lstrcpyW
GetProcAddress
GetQueuedCompletionStatus
GetSystemInfo
MultiByteToWideChar
EnterCriticalSection
lstrcmpiW
GetModuleFileNameA
WriteFile
ResetEvent
GetPrivateProfileStringW
DeleteFileW
CreateEventW
GetDiskFreeSpaceW
IsBadWritePtr
WaitForSingleObject
GetCurrentProcessId
LoadLibraryW
WideCharToMultiByte
GetSystemTimeAsFileTime
GetEnvironmentStringsA
GetFullPathNameW
MulDiv
CreateSemaphoreW
GetThreadPriority
LeaveCriticalSection
InterlockedDecrement
SetUnhandledExceptionFilter
GetCurrentProcess
SetThreadPriority
WaitForMultipleObjects
GlobalFree
lstrcpynW
SetEndOfFile
SetFilePointer
InterlockedExchange
lstrlenA
VirtualFree
HeapAlloc
PostQueuedCompletionStatus
FreeLibrary
GlobalLock
GetFileAttributesW
GlobalAlloc
GlobalMemoryStatus
GetSystemDefaultLangID
HeapFree
GlobalUnlock
CreateFileW
IsBadReadPtr
GetVersionExW
InitializeCriticalSection
GetFileSize
GetLastError
CreateThread
lstrcpyA
GetACP
ReadFile
winmm
CloseDriver
waveInAddBuffer
mixerGetControlDetailsW
waveInPrepareHeader
mixerGetLineInfoW
waveInStart
waveInClose
waveInReset
SendDriverMessage
mixerSetControlDetails
waveInStop
mixerClose
waveInOpen
waveInGetDevCapsW
mixerGetID
OpenDriver
waveInUnprepareHeader
mixerOpen
mixerGetLineControlsW
user32
LoadCursorW
ShowWindow
GetWindowRect
GetClientRect
GetDesktopWindow
SetWindowLongW
DispatchMessageW
CheckDlgButton
IsWindowVisible
CheckRadioButton
IsWindow
ReleaseDC
GetAsyncKeyState
IsRectEmpty
wsprintfW
ClientToScreen
TranslateMessage
InvalidateRect
EnableWindow
CreateDialogParamW
LoadStringW
SendMessageW
MoveWindow
SetDlgItemInt
DefWindowProcW
PeekMessageW
SetCursor
DestroyWindow
GetWindowLongW
GetDlgItem
GetDC
GetDlgItemInt
SetDlgItemTextW
msvcrt
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
_ftol
_except_handler3
wcslen
advapi32
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyW
RegCloseKey
RegEnumKeyW
RegQueryValueExW
RegOpenKeyExW
RegSetValueW
RegCreateKeyW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ole32
CoUninitialize
CoCreateInstance
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoInitialize
gdi32
GetObjectW
SelectObject
GetTextExtentPoint32W
PatBlt
GetPaletteEntries
GetStockObject
msvfw32
ICSendMessage
ICClose
ICLocate
ICOpen
ICCompress
ICGetInfo
ICDecompress
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ