Static task
static1
Behavioral task
behavioral1
Sample
25ebf1955d98b2a8d8e580ca12b1bb04a47cc423e672e6156438a8046397b3e7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
25ebf1955d98b2a8d8e580ca12b1bb04a47cc423e672e6156438a8046397b3e7.exe
Resource
win10v2004-20220901-en
General
-
Target
25ebf1955d98b2a8d8e580ca12b1bb04a47cc423e672e6156438a8046397b3e7
-
Size
512KB
-
MD5
21afc7e5cbb6701a8093adeca5ef0170
-
SHA1
9d267a5abf5073e1565e6ed6413a4318753051c0
-
SHA256
25ebf1955d98b2a8d8e580ca12b1bb04a47cc423e672e6156438a8046397b3e7
-
SHA512
8dc862412dffbb830f922f54f8b2eb6b12f6884e7773506756f8df8e3fc3395311325f3b21a2d142f72414d867f531fe209401f8fffd04e369cc6fbc5ee0cbfc
-
SSDEEP
12288:u5hYBEfuy6rJYc/UQGjgiSXSu1RBsSsPdxm:u5hYafuy6rJYcstjgiSXtuSo3m
Malware Config
Signatures
Files
-
25ebf1955d98b2a8d8e580ca12b1bb04a47cc423e672e6156438a8046397b3e7.exe windows x86
94e508c1a1303073eaa78bc67d79a092
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
ifc22
?GetDevice@CImmMouse@@UAEPAUIFeelitDevice@@XZ
?GetAPI@CImmMouse@@UAEPAUIFeelit@@XZ
?Initialize@CImmMouse@@QAEHPAX0KH@Z
??0CImmMouse@@QAE@XZ
??1CImmMouse@@UAE@XZ
?Close@CImmProject@@QAEXXZ
?ChangeBaseParamsPolar@CImmEffect@@QAEHJKPAUFEELIT_ENVELOPE@@KKKKK@Z
?GetContainedEffect@CImmCompoundEffect@@QAEPAVCImmEffect@@J@Z
?ChangeDirection@CImmEffect@@QAEHJJ@Z
?reset@CImmDXDevice@@MAEXXZ
?prepare_device@CImmDevice@@MAEHXZ
?SwitchToAbsoluteMode@CImmDevice@@UAEHH@Z
?ChangeScreenResolution@CImmDevice@@UAEHHKK@Z
?GetCurrentPosition@CImmDXDevice@@UAEHAAJ0@Z
?GetProductGUID@CImmDXDevice@@UAE?AU_GUID@@XZ
?GetProductGUIDString@CImmDXDevice@@UAEHPADH@Z
?GetProductName@CImmDXDevice@@UAEHPADH@Z
?GetDriverVersion@CImmDXDevice@@UAEHAAK00@Z
?GetProductType@CImmDXDevice@@UAEKXZ
?GetDevice@CImmDXDevice@@UAEPAUIFeelitDevice@@XZ
?GetAPI@CImmDXDevice@@UAEPAUIFeelit@@XZ
?Start@CImmCompoundEffect@@QAEHKK@Z
??1CImmProject@@QAE@XZ
?OpenFile@CImmProject@@QAEHPBDPAVCImmDevice@@@Z
?LoadProjectFromMemory@CImmProject@@QAEHPAXPAVCImmDevice@@@Z
??0CImmProject@@QAE@XZ
??0CImmDXDevice@@QAE@XZ
?Initialize@CImmDXDevice@@QAEHPAX0PAUIDirectInputA@@PAUIDirectInputDevice2A@@H@Z
??1CImmDXDevice@@UAE@XZ
?reset@CImmMouse@@MAEXXZ
?prepare_device@CImmMouse@@MAEHXZ
?SwitchToAbsoluteMode@CImmMouse@@UAEHH@Z
?ChangeScreenResolution@CImmMouse@@UAEHHKK@Z
?GetProductType@CImmMouse@@UAEKXZ
?GetCurrentPosition@CImmMouse@@UAEHAAJ0@Z
?GetProductGUID@CImmMouse@@UAE?AU_GUID@@XZ
?GetProductGUIDString@CImmMouse@@UAEHPADH@Z
?GetProductName@CImmMouse@@UAEHPADH@Z
?GetDriverVersion@CImmMouse@@UAEHAAK00@Z
?CreateEffect@CImmProject@@QAEPAVCImmCompoundEffect@@PBDPAVCImmDevice@@K@Z
winmm
joyGetPosEx
timeEndPeriod
timeGetTime
timeBeginPeriod
midiOutClose
midiOutUnprepareHeader
midiOutLongMsg
midiOutPrepareHeader
midiOutOpen
midiOutGetNumDevs
midiOutGetDevCapsA
midiStreamOpen
midiStreamProperty
midiStreamRestart
midiOutReset
midiStreamClose
midiStreamOut
midiOutShortMsg
kernel32
GlobalAlloc
lstrlenA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
CreateEventA
GetModuleHandleA
GetLocalTime
GlobalLock
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExA
Sleep
LocalFree
LocalAlloc
GetSystemInfo
ExitProcess
HeapFree
HeapAlloc
GlobalUnlock
GlobalHandle
GlobalFree
lstrcpyA
WinExec
CreateFileA
SetFilePointer
CloseHandle
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleFileNameA
WriteFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentVariableA
HeapDestroy
HeapCreate
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetLastError
GetStringTypeA
GetStringTypeW
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
GetFullPathNameA
SetEnvironmentVariableA
LoadLibraryA
SetStdHandle
ReadFile
FlushFileBuffers
VirtualFree
VirtualAlloc
HeapReAlloc
GetProcAddress
WideCharToMultiByte
user32
GetActiveWindow
GetClientRect
LoadAcceleratorsA
GetMenu
SetScrollPos
SetScrollRange
SendDlgItemMessageA
CheckRadioButton
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetMessageA
TranslateAcceleratorA
DlgDirListA
GetWindowRect
DestroyMenu
MessageBoxA
ShowCursor
GetSystemMetrics
AdjustWindowRectEx
SetWindowLongA
IsIconic
SetMenu
SetTimer
KillTimer
GetDlgItem
EnableWindow
SendMessageA
EnableMenuItem
SetForegroundWindow
GetDC
ReleaseDC
CreateDialogParamA
GetAsyncKeyState
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
SetRect
GetWindowLongA
AdjustWindowRect
SetWindowPos
ShowWindow
UpdateWindow
LoadMenuA
PeekMessageA
SetFocus
SetActiveWindow
BeginPaint
EndPaint
InvalidateRect
DefWindowProcA
MessageBeep
GetDlgItemTextA
IsDlgButtonChecked
DestroyWindow
CheckDlgButton
SetDlgItemTextA
PostQuitMessage
DialogBoxParamA
EndDialog
PostMessageA
wsock32
inet_addr
gethostbyname
gethostname
WSAStartup
WSACleanup
gdi32
TextOutA
PatBlt
DeleteObject
CreateCompatibleDC
BitBlt
StretchBlt
DeleteDC
SelectPalette
RealizePalette
CreateDIBSection
SelectObject
SetDIBColorTable
SetSystemPaletteUse
GetSystemPaletteEntries
GetDeviceCaps
SetBkMode
GetStockObject
CreatePalette
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
shell32
ShellExecuteA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
ddraw
DirectDrawCreate
dinput
DirectInputCreateA
dplayx
ord4
dsound
ord1
Sections
.text Size: 216KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 13.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ