Static task
static1
Behavioral task
behavioral1
Sample
170171501260802c4a5e2020b2aa260ee91df4772c9ff3293dada4d6b8c6e76a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
170171501260802c4a5e2020b2aa260ee91df4772c9ff3293dada4d6b8c6e76a.exe
Resource
win10v2004-20220901-en
General
-
Target
170171501260802c4a5e2020b2aa260ee91df4772c9ff3293dada4d6b8c6e76a
-
Size
1020KB
-
MD5
6e2032f5a42c33233bbd596668bd8180
-
SHA1
7efa9dd8818c3edbe34acac3538e04989c8be06f
-
SHA256
170171501260802c4a5e2020b2aa260ee91df4772c9ff3293dada4d6b8c6e76a
-
SHA512
a2b20ba61a066e0c162461f1d7e1d65752aa187db93b9145fc498139358702a935f3c1c93283014f9d498322d3c57b9fea5314da4b840e87a46c42b3bee3659a
-
SSDEEP
24576:NQZq7fVig3URf6ZtkwA9AVOb67ccbwr1D6PaG1:aZUfZCQd7Tac
Malware Config
Signatures
Files
-
170171501260802c4a5e2020b2aa260ee91df4772c9ff3293dada4d6b8c6e76a.exe windows x86
6fd62c6aeb475a2add08ae4c57d49bb2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dinput8
DirectInput8Create
dsound
ord1
d3d8
Direct3DCreate8
winmm
timeGetDevCaps
timeGetTime
timeEndPeriod
timeBeginPeriod
kernel32
SetFilePointer
FlushFileBuffers
RaiseException
LCMapStringA
CloseHandle
WriteFile
GetLastError
CreateFileA
ReadFile
GetModuleHandleA
MultiByteToWideChar
GetFileSize
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
GetProcAddress
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringW
SetStdHandle
user32
PostQuitMessage
ClipCursor
KillTimer
DefWindowProcA
ReleaseCapture
ClientToScreen
SetTimer
AdjustWindowRect
SetWindowPos
GetWindowRect
WaitMessage
SetCapture
TranslateMessage
PeekMessageA
ShowCursor
ShowWindow
SetCursorPos
SetForegroundWindow
EnumDisplaySettingsA
RegisterClassA
LoadCursorA
CreateWindowExA
mouse_event
GetMessageExtraInfo
GetClientRect
SetWindowLongA
GetWindowLongA
AdjustWindowRectEx
GetMenu
IsIconic
MessageBoxA
DestroyWindow
DispatchMessageA
UpdateWindow
gdi32
CreateSolidBrush
shell32
DragQueryFileA
DragFinish
ole32
CoUninitialize
CoCreateInstance
CoInitialize
Sections
.text Size: 768KB - Virtual size: 767KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 325KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_rwdseg Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_rwcseg Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE