Static task
static1
Behavioral task
behavioral1
Sample
e0112926d5b169e44e1f4a9786e90e045c5a52bd237c7d421e69f0037b42c648.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e0112926d5b169e44e1f4a9786e90e045c5a52bd237c7d421e69f0037b42c648.exe
Resource
win10v2004-20220812-en
General
-
Target
e0112926d5b169e44e1f4a9786e90e045c5a52bd237c7d421e69f0037b42c648
-
Size
1.4MB
-
MD5
75163d77154442ba516aaa2efa6ee6cb
-
SHA1
22cf7e24f910c021e652d672f79b42e94bfca4b5
-
SHA256
e0112926d5b169e44e1f4a9786e90e045c5a52bd237c7d421e69f0037b42c648
-
SHA512
ac4c84a6fb54482dd0ec3f2ea2c6f602847f35b74743173f2088b2319c2fb935f6f4de286b29c2a42f004712deb8ca77e5e4ce3197b529012f0b90adf334ba32
-
SSDEEP
24576:359/rnrbpEableWypIczoskDwM9Y9x3quwBytZUSQ0GKkIPmDNAQL:bCGJ+1quk3ekDL
Malware Config
Signatures
Files
-
e0112926d5b169e44e1f4a9786e90e045c5a52bd237c7d421e69f0037b42c648.exe windows x86
1b27c06cf5c3aa5f90773f22a9e52ee7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msacm32
acmStreamClose
acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmFormatSuggest
winmm
joyGetNumDevs
joyGetPosEx
joyGetDevCapsA
timeKillEvent
timeSetEvent
ddraw
DirectDrawCreate
dsound
ord1
kernel32
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
FlushFileBuffers
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
HeapSize
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
HeapReAlloc
HeapFree
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
ReleaseMutex
WaitForSingleObject
MulDiv
CreateProcessA
GetTickCount
SetCurrentDirectoryA
GetModuleFileNameA
WriteFile
GetVersion
GetPrivateProfileStringA
GetLastError
SetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileIntA
SetEndOfFile
DeleteFileA
HeapAlloc
InterlockedIncrement
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CreateFileA
GetFileTime
CreateDirectoryA
GetFileAttributesA
GetTempPathA
GetSystemTimeAsFileTime
FileTimeToDosDateTime
OpenMutexA
CloseHandle
CreateMutexA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FindFirstFileA
FindNextFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
InterlockedDecrement
user32
DefWindowProcA
IsIconic
PeekMessageA
TranslateMessage
DispatchMessageA
GetClientRect
OffsetRect
ClientToScreen
SetCursorPos
GetKeyNameTextA
SetCursor
GetDesktopWindow
SetForegroundWindow
PostMessageA
GetDC
ReleaseDC
BeginPaint
GetMenu
AdjustWindowRectEx
PostQuitMessage
SystemParametersInfoA
GetWindowRect
GetWindowLongA
SetWindowLongA
MessageBoxA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
UpdateWindow
SetFocus
RegisterWindowMessageA
GetClipboardData
OpenClipboard
EmptyClipboard
RegisterClipboardFormatA
SetClipboardData
CloseClipboard
MoveWindow
GetActiveWindow
SetWindowPos
EndPaint
SetRect
gdi32
GetSystemPaletteEntries
CreateFontA
DeleteObject
GetDeviceCaps
GetStockObject
advapi32
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
shell32
ShellExecuteA
ole32
CoCreateGuid
ifc22
?ChangeScreenResolution@CImmDevice@@UAEHHKK@Z
?SwitchToAbsoluteMode@CImmDevice@@UAEHH@Z
?prepare_device@CImmDevice@@MAEHXZ
?reset@CImmDXDevice@@MAEXXZ
?GetAPI@CImmMouse@@UAEPAUIFeelit@@XZ
?GetCurrentPosition@CImmDXDevice@@UAEHAAJ0@Z
?GetProductType@CImmMouse@@UAEKXZ
?GetDriverVersion@CImmMouse@@UAEHAAK00@Z
?GetProductName@CImmMouse@@UAEHPADH@Z
?GetProductGUIDString@CImmMouse@@UAEHPADH@Z
?GetProductGUID@CImmMouse@@UAE?AU_GUID@@XZ
?GetCurrentPosition@CImmMouse@@UAEHAAJ0@Z
?ChangeScreenResolution@CImmMouse@@UAEHHKK@Z
?SwitchToAbsoluteMode@CImmMouse@@UAEHH@Z
?prepare_device@CImmMouse@@MAEHXZ
?reset@CImmMouse@@MAEXXZ
?GetProductGUID@CImmDXDevice@@UAE?AU_GUID@@XZ
?GetProductGUIDString@CImmDXDevice@@UAEHPADH@Z
?GetProductName@CImmDXDevice@@UAEHPADH@Z
?GetDriverVersion@CImmDXDevice@@UAEHAAK00@Z
?GetProductType@CImmDXDevice@@UAEKXZ
?GetDevice@CImmDXDevice@@UAEPAUIFeelitDevice@@XZ
?GetAPI@CImmDXDevice@@UAEPAUIFeelit@@XZ
??1CImmProject@@QAE@XZ
?LoadProjectFromMemory@CImmProject@@QAEHPAXPAVCImmDevice@@@Z
??0CImmProject@@QAE@XZ
?Initialize@CImmDXDevice@@QAEHPAX0PAUIDirectInputA@@PAUIDirectInputDevice2A@@H@Z
??0CImmDXDevice@@QAE@XZ
?Initialize@CImmMouse@@QAEHPAX0KH@Z
??0CImmMouse@@QAE@XZ
??1CImmMouse@@UAE@XZ
??1CImmDXDevice@@UAE@XZ
?Start@CImmCompoundEffect@@QAEHKK@Z
?Stop@CImmCompoundEffect@@QAEHXZ
?GetStatus@CImmEffect@@QAEHPAK@Z
?GetContainedEffect@CImmCompoundEffect@@QAEPAVCImmEffect@@J@Z
?DestroyEffect@CImmProject@@QAEXPAVCImmCompoundEffect@@@Z
?CreateEffect@CImmProject@@QAEPAVCImmCompoundEffect@@PBDPAVCImmDevice@@K@Z
?GetDevice@CImmMouse@@UAEPAUIFeelitDevice@@XZ
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 781KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE