Static task
static1
Behavioral task
behavioral1
Sample
Tsonic_win.exe
Resource
win10-20220812-en
General
-
Target
Tsonic_win.exe
-
Size
6.5MB
-
MD5
151183afbc3c904c2f83b151d73e185a
-
SHA1
3539c163b243879de9549272f363f069db7800ca
-
SHA256
6604c9ca0b7e50be083f44c8e50cd91968b9743bdaa74d94f9e2bf11d5d5c054
-
SHA512
ad608e1376cc611c650b0a43d956e8307ae48222f4963fe2dadbf76354f3d03e2dcd0212b203689b338b69f51bb3056ebacee4342e9ad733c63b573d02500bf2
-
SSDEEP
196608:wLiWskKLXdQUNv+KAHcmln3EYUlXAbkeByLwJVVg:wZB6XTv+KA8mlnULtAb1yLKVg
Malware Config
Signatures
Files
-
Tsonic_win.exe.exe windows x86
90c7d58cb3d9fcc59a88aca189a502e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
ExitProcess
advapi32
RegCreateKeyA
gdi32
CreateCompatibleDC
user32
MessageBoxA
version
GetFileVersionInfoA
dsound
ord11
dinput8
DirectInput8Create
winmm
timeSetEvent
d3d8
Direct3DCreate8
shlwapi
PathIsDirectoryA
shfolder
SHGetFolderPathA
shell32
DragQueryFileA
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PSFD00 Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PSFD_I Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PSFD_P Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PSFD_B Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 476KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.3MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_rwdseg Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_rwcseg Size: 4KB - Virtual size: 893B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
stxt774 Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stxt371 Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stxt274 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE