Static task
static1
Behavioral task
behavioral1
Sample
bdf1cb20321fecfcce61f64d2b30934c69ac88350b683c5aaf3c732e9b600c43.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bdf1cb20321fecfcce61f64d2b30934c69ac88350b683c5aaf3c732e9b600c43.exe
Resource
win10v2004-20220812-en
General
-
Target
bdf1cb20321fecfcce61f64d2b30934c69ac88350b683c5aaf3c732e9b600c43
-
Size
90KB
-
MD5
916515cd677e816247f32fb882ac6569
-
SHA1
7d914c9bbfccf60d8a0125d6087d93538ef5a56a
-
SHA256
bdf1cb20321fecfcce61f64d2b30934c69ac88350b683c5aaf3c732e9b600c43
-
SHA512
b25819b2df93690cdbee130b9eea5d0f70b7c0d47e972fd18770a52b4f7c984b11c7f32347bf6cf3f4fb4c31dd0ac15908031881c14c0b5ef298359de8f2b75a
-
SSDEEP
1536:qYqRInU8h0w2cw1S10wRDkXWEiYc0iAk4CI9DcWBC/z4toaf1000:QyynUqXWYc0iAFxrk/zcf1n0
Malware Config
Signatures
Files
-
bdf1cb20321fecfcce61f64d2b30934c69ac88350b683c5aaf3c732e9b600c43.exe windows x86
bfd4987194c6c132890ddcb3d019ea54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathCombineW
PathAppendW
PathRemoveFileSpecW
PathRemoveBackslashW
dsound
ord3
winmm
timeKillEvent
timeSetEvent
mixerSetControlDetails
mixerGetNumDevs
mixerGetDevCapsW
mixerOpen
mixerClose
mixerGetLineControlsW
mixerGetLineInfoW
mixerGetControlDetailsW
kernel32
lstrcmpW
GetFileAttributesW
lstrcmpiW
LoadLibraryW
GetProcAddress
FreeLibrary
MultiByteToWideChar
GetModuleFileNameW
InterlockedIncrement
lstrcpynA
lstrcmpA
SetCurrentDirectoryW
GetLastError
CloseHandle
WaitForSingleObject
CreateProcessW
GetCurrentProcessId
GetTickCount
GetACP
LocalAlloc
InterlockedExchange
RaiseException
LoadLibraryA
LocalFree
GetCurrentDirectoryW
OutputDebugStringW
lstrlenW
lstrcmpiA
lstrcpyW
WideCharToMultiByte
InterlockedDecrement
ole32
PropVariantClear
CoTaskMemFree
CLSIDFromString
CoCreateInstance
oleaut32
VariantInit
Sections
.text Size: 49KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ