Static task
static1
Behavioral task
behavioral1
Sample
8b8e5bc46e03f2ed1d056cb1c77da8612847847a1cd0be0a15f9519f32a6cc1f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b8e5bc46e03f2ed1d056cb1c77da8612847847a1cd0be0a15f9519f32a6cc1f.exe
Resource
win10v2004-20220901-en
General
-
Target
8b8e5bc46e03f2ed1d056cb1c77da8612847847a1cd0be0a15f9519f32a6cc1f
-
Size
300KB
-
MD5
62281c37838a63f427dc4585ba4176a0
-
SHA1
6ddde5eecc2e6b1135de4607088ba8eedcf4f792
-
SHA256
8b8e5bc46e03f2ed1d056cb1c77da8612847847a1cd0be0a15f9519f32a6cc1f
-
SHA512
2633b305cf103ed481596696e922e0e72e66d46f26ddbe071698e754a77ea5ecabb3966bcff5ee64f06f2aee9174a32310da0f8fe3883ded6100120dbc14eb87
-
SSDEEP
6144:6zM+949gGXnSgCgECde+LXo3jdfxrhsZhY7:DBZhECdezTZ1SZhY
Malware Config
Signatures
Files
-
8b8e5bc46e03f2ed1d056cb1c77da8612847847a1cd0be0a15f9519f32a6cc1f.exe windows x86
a6f1fd98d7945531a1e3a8fe4df547a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dsound
ord1
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
comctl32
ord17
gdi32
SetDIBColorTable
GetStockObject
RestoreDC
GetObjectA
GetDIBColorTable
ExtTextOutA
GetDeviceCaps
DeleteObject
CreateRectRgnIndirect
CreateCompatibleDC
DeleteDC
SelectObject
CreateFontA
SaveDC
RealizePalette
CreatePalette
SelectPalette
SetSystemPaletteUse
GetSystemPaletteEntries
CreateFontIndirectA
SetBkColor
Rectangle
StretchBlt
OffsetClipRgn
CreateDIBSection
GetClipRgn
ExcludeClipRect
BitBlt
SelectClipRgn
TextOutA
SetTextColor
SetBkMode
shell32
ShellExecuteA
user32
SystemParametersInfoA
KillTimer
PostQuitMessage
GetWindowLongA
CreateDialogParamA
GetMessageA
GetSysColor
GetWindowTextA
DrawFrameControl
DrawIconEx
IsWindowVisible
OffsetRect
GetWindowDC
FillRect
GetCursorPos
MapWindowPoints
WindowFromPoint
PtInRect
HideCaret
LoadImageA
PeekMessageA
TranslateMessage
DispatchMessageA
UnhookWindowsHookEx
SendMessageA
DestroyWindow
DestroyMenu
RedrawWindow
GetClientRect
IsIconic
LockWindowUpdate
BeginPaint
EndPaint
GetDC
CallNextHookEx
GetAsyncKeyState
DeleteMenu
InsertMenuItemA
RemoveMenu
DrawMenuBar
SetMenu
SetWindowPos
IsZoomed
MoveWindow
UpdateWindow
InvalidateRect
CreateMenu
LoadIconA
RegisterClassA
ShowWindow
MessageBoxA
ReleaseDC
SetWindowsHookExA
GetSystemMetrics
CreateWindowExA
EndDialog
SendDlgItemMessageA
SetTimer
SetWindowLongA
SetForegroundWindow
ShowCursor
GetWindowRect
DefWindowProcA
LoadCursorA
SetCursor
DialogBoxParamA
SetWindowTextA
GetActiveWindow
GetDesktopWindow
GetDlgItem
DrawTextA
PostMessageA
winmm
timeBeginPeriod
timeSetEvent
waveOutPrepareHeader
waveOutWrite
waveOutReset
timeKillEvent
waveOutOpen
waveOutUnprepareHeader
waveOutGetPosition
timeGetTime
timeEndPeriod
waveOutClose
waveOutGetDevCapsA
wsock32
closesocket
recv
accept
recvfrom
sendto
send
WSAStartup
WSACleanup
gethostname
socket
WSAGetLastError
WSAAsyncSelect
setsockopt
bind
getsockname
ntohs
ntohl
kernel32
HeapAlloc
CompareStringW
GetVersion
GetCommandLineA
GetStartupInfoA
SetEnvironmentVariableA
SuspendThread
GetSystemTime
FreeEnvironmentStringsW
ExitProcess
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
QueryPerformanceFrequency
GetModuleFileNameA
SetUnhandledExceptionFilter
GetVersionExA
GlobalMemoryStatus
LocalFree
LocalAlloc
QueryPerformanceCounter
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetFilePointer
CloseHandle
SetEndOfFile
FlushFileBuffers
ReadFile
WriteFile
GetLastError
FormatMessageA
CreateFileA
TerminateProcess
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
GlobalAlloc
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
CreateFileMappingA
Sleep
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
CompareStringA
LoadLibraryA
HeapFree
FreeLibrary
GetProcAddress
SetThreadPriority
CreateThread
CreateEventA
SetEvent
GetDriveTypeA
VirtualQuery
VirtualProtect
GetSystemInfo
GetModuleHandleA
GetLocalTime
GlobalLock
GetTimeZoneInformation
GlobalUnlock
GlobalFree
Sections
.text Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
N)�c�u Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE