Static task
static1
Behavioral task
behavioral1
Sample
014c54589200d015ae64c36be350a55feebc1bafd7bb9e6f13e2cc6f7aade6a1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
014c54589200d015ae64c36be350a55feebc1bafd7bb9e6f13e2cc6f7aade6a1.exe
Resource
win10v2004-20220901-en
General
-
Target
014c54589200d015ae64c36be350a55feebc1bafd7bb9e6f13e2cc6f7aade6a1
-
Size
452KB
-
MD5
676b0046520c625704d2a765651ceff0
-
SHA1
e5cedd6a3b5664b34ee7c7f5015828a95edd8e13
-
SHA256
014c54589200d015ae64c36be350a55feebc1bafd7bb9e6f13e2cc6f7aade6a1
-
SHA512
4f381db6510a27bb5eed550deb1b1ac74a486264f805868b68a9fb491306caf43c3c4d31c23ba9cfda94f036366a81edf7fcbd3a7b3817349124e9f550f7ec06
-
SSDEEP
6144:lVmyN35b4PAnjb/U57R9V0EjR7ZCCQeewQeeXQeesQeezLQeefQeea9hCac+Y888:O6b4PAf/Ql9eo7Z2hU+Y+uUPJSsPL
Malware Config
Signatures
Files
-
014c54589200d015ae64c36be350a55feebc1bafd7bb9e6f13e2cc6f7aade6a1.exe windows x86
5df0d755153c0f5b4da72257e1d4f271
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
HeapCreate
GetModuleFileNameA
LCMapStringW
HeapDestroy
Sleep
GetACP
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
FlushFileBuffers
SetStdHandle
SetFilePointer
SetUnhandledExceptionFilter
FindResourceA
LoadResource
SizeofResource
LockResource
GetPrivateProfileStringA
GetPrivateProfileIntA
SetEndOfFile
MultiByteToWideChar
GetCPInfo
IsBadWritePtr
VirtualAlloc
VirtualFree
GetOEMCP
GetTickCount
HeapSize
HeapFree
lstrlenA
LCMapStringA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapReAlloc
ReadFile
RaiseException
GetCurrentProcess
TerminateProcess
ExitProcess
WritePrivateProfileStringA
GetVersion
GetCommandLineA
GetStartupInfoA
WideCharToMultiByte
DebugBreak
LocalFree
FormatMessageA
GetLastError
GetFileSize
MapViewOfFile
CreateFileMappingA
CreateFileA
CreateFileW
GetVersionExA
CloseHandle
UnmapViewOfFile
GetProcAddress
LoadLibraryA
GetModuleHandleA
OutputDebugStringA
GetProfileIntA
FatalAppExitA
WriteFile
IsProcessorFeaturePresent
RtlUnwind
user32
LoadBitmapA
ShowCursor
SetForegroundWindow
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
DestroyWindow
UpdateWindow
ShowWindow
CreateDialogParamA
MessageBoxA
DefWindowProcA
GetAsyncKeyState
SetWindowPos
GetSystemMetrics
wsprintfA
WaitMessage
DispatchMessageA
TranslateMessage
PeekMessageA
SetFocus
SetWindowTextA
GetDlgItem
GetWindowRect
ScreenToClient
CopyRect
BeginPaint
EndPaint
SetActiveWindow
gdi32
SelectObject
GetPixel
SetPixel
BitBlt
DeleteDC
DeleteObject
GetStockObject
CreateCompatibleDC
ole32
CoInitialize
CoUninitialize
CoCreateInstance
d3d8
Direct3DCreate8
dsound
ord11
dinput8
DirectInput8Create
dplayx
ord4
winmm
timeGetTime
mmioClose
mmioOpenA
mmioAscend
mmioRead
mmioDescend
mmioGetInfo
mmioCreateChunk
mmioSeek
mmioSetInfo
mmioAdvance
mmioWrite
wsock32
inet_addr
gethostname
WSAStartup
WSACleanup
gethostbyname
advapi32
RegOpenKeyA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 332KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 140.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ