Static task
static1
Behavioral task
behavioral1
Sample
dffcea2c1c57fd073841a0f49470001c9ad791e7abb821da90ceb3813f4b347f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dffcea2c1c57fd073841a0f49470001c9ad791e7abb821da90ceb3813f4b347f.exe
Resource
win10v2004-20220812-en
General
-
Target
dffcea2c1c57fd073841a0f49470001c9ad791e7abb821da90ceb3813f4b347f
-
Size
212KB
-
MD5
09a06eb4145a010970ba5282317e8b0f
-
SHA1
959aaab5be85f56d799f899f966dbbe48c2b2391
-
SHA256
dffcea2c1c57fd073841a0f49470001c9ad791e7abb821da90ceb3813f4b347f
-
SHA512
c2ff611ed4f9b5d689d2e77594931c989d83b5b739493fc3dff6076a819a6d491bba7a7a6384dd8654b051dfbb19ef7c023227305b3f40d7e78a80a33debc984
-
SSDEEP
3072:ywFB3IMKcSYNqtLFbLt1hSCYPnkf+4fHRLdhYZ4z1sxtbjIUWnoRzX:y2SMIHbxeZ4zytbLj
Malware Config
Signatures
Files
-
dffcea2c1c57fd073841a0f49470001c9ad791e7abb821da90ceb3813f4b347f.exe windows x86
cb6643f8b1f6eb6ad098d382cdebb2a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetModuleFileNameA
DeviceIoControl
CloseHandle
CreateFileA
GetTickCount
GetTimeFormatA
Sleep
ResetEvent
WaitForSingleObject
SetEvent
CreateEventA
CreateThread
FreeLibrary
LoadResource
FindResourceExA
LoadLibraryW
GetUserDefaultLangID
WaitForMultipleObjects
SetThreadPriority
SetPriorityClass
GetThreadPriority
GetPriorityClass
GetCurrentThread
GetLastError
SetFilePointer
SetStdHandle
FlushFileBuffers
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcessId
GetModuleHandleA
user32
SendMessageA
EndDialog
GetDlgItemTextA
GetWindowLongA
SetWindowTextA
GetWindowTextA
GetDlgItem
DestroyWindow
CreateDialogParamA
IsDialogMessageA
DialogBoxParamA
GetMessageA
DefWindowProcA
PostThreadMessageA
KillTimer
PostQuitMessage
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
FindWindowA
MessageBeep
SetTimer
SetWindowLongA
SetDlgItemTextA
GetForegroundWindow
MessageBoxA
SetForegroundWindow
PostMessageA
CreateWindowExA
advapi32
RegCloseKey
RegOpenKeyExA
RegNotifyChangeKeyValue
RegSetValueExA
RegDeleteValueA
RegEnumKeyA
RegQueryValueExA
winmm
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveOutOpen
waveOutWrite
waveOutPrepareHeader
waveInClose
waveInUnprepareHeader
waveInStart
waveOutRestart
waveInAddBuffer
waveInPrepareHeader
waveInReset
waveInOpen
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ