Static task
static1
Behavioral task
behavioral1
Sample
15010030fefc474525737ca274fd73c8d5319584de996c193ae3e14635b4822f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
15010030fefc474525737ca274fd73c8d5319584de996c193ae3e14635b4822f.exe
Resource
win10v2004-20220812-en
General
-
Target
15010030fefc474525737ca274fd73c8d5319584de996c193ae3e14635b4822f
-
Size
856KB
-
MD5
353393875aeff2a6b1d3ab359d649340
-
SHA1
b2e3db4682a0d1c104bb4f227c551041862ba64c
-
SHA256
15010030fefc474525737ca274fd73c8d5319584de996c193ae3e14635b4822f
-
SHA512
2d7c35f1d54d3f3a2ced56722a8dda49ea713de50666cc82b4604dbd0922988b7d1031ee917d3af7dc765827090bfb82b7bf6e8d353191d0d1461b0412993fbf
-
SSDEEP
12288:YyH+SS1D4SJsmundGaANkDsn1UCRwi/WlVZU/M2/boyXhrSgm4DzNwAPaGM:SlD4msv7VZp2/boypPLPaGM
Malware Config
Signatures
Files
-
15010030fefc474525737ca274fd73c8d5319584de996c193ae3e14635b4822f.exe windows x86
b7a1c8a8325cb5ec3ec60537c51fed3b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dinput8
DirectInput8Create
dsound
ord11
d3d8
Direct3DCreate8
winmm
midiOutLongMsg
joyGetPosEx
timeGetTime
midiOutUnprepareHeader
timeKillEvent
timeSetEvent
timeGetDevCaps
midiOutShortMsg
midiOutPrepareHeader
timeEndPeriod
midiOutReset
midiOutClose
midiOutOpen
timeBeginPeriod
joyGetDevCapsA
kernel32
GetLocaleInfoA
GetCPInfo
Sleep
ReadFile
CloseHandle
GetFileSize
CreateFileA
WriteFile
LocalFree
FormatMessageA
GetLastError
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetStartupInfoA
GetConsoleTitleA
GetModuleFileNameA
CreateMutexA
MultiByteToWideChar
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
CreateThread
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
GlobalFree
CreateEventA
SetFilePointer
GlobalAlloc
SetStdHandle
IsProcessorFeaturePresent
GetProcAddress
LoadLibraryA
GetModuleHandleA
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
VirtualQuery
VirtualProtect
GetTimeZoneInformation
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
SetLastError
CompareStringW
TlsFree
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapSize
HeapReAlloc
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetTickCount
GetCurrentProcessId
CompareStringA
GetSystemInfo
FlushFileBuffers
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
HeapAlloc
HeapFree
RtlUnwind
RaiseException
CreateDirectoryA
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
MoveFileA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
user32
ShowWindow
GetKeyboardState
SetKeyboardState
MsgWaitForMultipleObjects
PostThreadMessageA
KillTimer
SetTimer
GetWindowLongA
MessageBoxA
GetForegroundWindow
GetWindowThreadProcessId
SetActiveWindow
DefWindowProcA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMetrics
SystemParametersInfoA
WINNLSEnableIME
ShowCursor
SetCursor
PeekMessageA
TranslateMessage
DispatchMessageA
AttachThreadInput
MoveWindow
DestroyWindow
gdi32
TextOutA
SetBkMode
SetTextColor
CreateDIBSection
CreateCompatibleDC
SelectObject
DeleteDC
DeleteObject
CreateFontA
GetStockObject
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
Sections
.text Size: 711KB - Virtual size: 710KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 20.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ