Static task
static1
Behavioral task
behavioral1
Sample
f3226dc8f52b9472c517a5397af3cd388e2903a358dc76c63161da1dc8a2efde.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f3226dc8f52b9472c517a5397af3cd388e2903a358dc76c63161da1dc8a2efde.exe
Resource
win10v2004-20220901-en
General
-
Target
f3226dc8f52b9472c517a5397af3cd388e2903a358dc76c63161da1dc8a2efde
-
Size
154KB
-
MD5
2cd2821719ffbac262ff2fd47b64b570
-
SHA1
14a9d46473716c9ac19980075e7411d660235296
-
SHA256
f3226dc8f52b9472c517a5397af3cd388e2903a358dc76c63161da1dc8a2efde
-
SHA512
a5a115dc8e290a380b6aefe5e249f252850e95fbd3b672dad9575d347599779877ed2120433340c9ed162b153a1e295f9362cffb5d4011176d3a708abcdf6d65
-
SSDEEP
3072:sNozsnDcE8D8gwX29s+aMNEn44CG0Zn14xnsiE+Ek0tazJT4/:WoonDcv81nsEn4tn1B+Ek0Y
Malware Config
Signatures
Files
-
f3226dc8f52b9472c517a5397af3cd388e2903a358dc76c63161da1dc8a2efde.exe windows x86
feff0c954438f0b0beaa74035b2b0fd8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dinput
DirectInputCreateW
DirectInputCreateEx
kernel32
LeaveCriticalSection
lstrlenA
lstrcpyA
CloseHandle
CompareStringA
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceNamesA
ExitProcess
GetCommandLineA
GetVersion
lstrcmpA
LoadResource
ReadFile
RtlUnwind
ole32
CreateFileMoniker
OleFlushClipboard
OleInitialize
CreateBindCtx
OleUninitialize
CoUninitialize
CoInitialize
CoTaskMemAlloc
OleLockRunning
CoCreateInstance
CoDisconnectObject
CoGetClassObject
CoRevokeClassObject
dsound
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCaptureCreate
user32
LoadImageA
OemToCharBuffA
GetMessageA
ToAscii
GetFocus
GetCursor
EndPaint
CreateIconFromResource
EnableWindow
DrawTextA
DrawIcon
ShowWindow
DestroyCaret
CreateDialogIndirectParamA
CreateDesktopW
CreateDesktopA
EndDialog
shell32
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetFileInfoA
SHGetDesktopFolder
SHFileOperationA
SHBindToParent
ShellExecuteW
msvfw32
ICGetInfo
ICInstall
ICCompress
Sections
.text Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ