Static task
static1
Behavioral task
behavioral1
Sample
7cf65b12c2cbe192ad61a865e789896b88c1640e50b3ca243352871a6c6c0e6e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7cf65b12c2cbe192ad61a865e789896b88c1640e50b3ca243352871a6c6c0e6e.exe
Resource
win10v2004-20220901-en
General
-
Target
7cf65b12c2cbe192ad61a865e789896b88c1640e50b3ca243352871a6c6c0e6e
-
Size
236KB
-
MD5
507540d3ac145301641fe5e842ea69e1
-
SHA1
69f06f5587db8fd3fee248e8bd02d86c44834fde
-
SHA256
7cf65b12c2cbe192ad61a865e789896b88c1640e50b3ca243352871a6c6c0e6e
-
SHA512
bfc69eb0e2a47147878ba3f38345d59bed22e5d39d7629f8e955f6b7900b2708933d8ef3204cbd622a849f3e78038c0552bf71aebbdccedb27404f7393435286
-
SSDEEP
6144:tVgcr/RFn1OrToBlXmYUVeA/iTVxdjPcuKNM/zu9u2Ix:btr/z12oBlXgVeA/YxSaiQ2U
Malware Config
Signatures
Files
-
7cf65b12c2cbe192ad61a865e789896b88c1640e50b3ca243352871a6c6c0e6e.exe windows x86
abe13d5da8dfa9287c85887f3f3b3bdf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_controlfp
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
_CIpow
printf
_CIacos
calloc
_beginthreadex
_strupr
wcscpy
atoi
wcstombs
wcslen
mbstowcs
_access
strncat
vsprintf
exit
fopen
fwrite
??1type_info@@UAE@XZ
_CxxThrowException
fclose
??3@YAXPAX@Z
strrchr
_except_handler3
free
malloc
strncpy
sprintf
puts
strstr
putchar
rand
_ftol
memmove
??2@YAPAXI@Z
__CxxFrameHandler
__set_app_type
kernel32
LoadLibraryA
WaitForSingleObject
GetProcAddress
GetTickCount
GetLocalTime
FreeLibrary
CloseHandle
Sleep
SetEvent
LocalFree
GetCurrentProcessId
InterlockedDecrement
WideCharToMultiByte
GetStartupInfoA
GetModuleHandleA
GetExitCodeThread
TerminateThread
CreateThread
lstrlenA
MultiByteToWideChar
GetLastError
CreateEventA
user32
CreateWindowExA
GetLastInputInfo
SendMessageA
IsWindow
PostThreadMessageA
GetMessageA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
ws2_32
socket
closesocket
gethostbyname
recv
getsockname
gethostname
htonl
htons
connect
WSASocketA
sendto
inet_addr
send
setsockopt
WSACleanup
ntohs
WSAStartup
select
msvcp60
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
ole32
CLSIDFromProgID
CoCreateInstance
OleRun
CoInitialize
CoUninitialize
CLSIDFromString
oleaut32
GetErrorInfo
SysFreeString
VariantClear
SysAllocString
msvfw32
ICSendMessage
winmm
waveOutClose
waveOutUnprepareHeader
waveInStart
waveInReset
waveInOpen
waveInClose
waveInUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveInPrepareHeader
waveInAddBuffer
waveOutOpen
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ