Static task
static1
Behavioral task
behavioral1
Sample
1f49d036f87c31d18065bc3d047be1da455b9d78bf5a1957b08a7b3b725d8b58.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f49d036f87c31d18065bc3d047be1da455b9d78bf5a1957b08a7b3b725d8b58.exe
Resource
win10v2004-20220812-en
General
-
Target
1f49d036f87c31d18065bc3d047be1da455b9d78bf5a1957b08a7b3b725d8b58
-
Size
198KB
-
MD5
a2220239c2695d456a4e3fd832b0bd7b
-
SHA1
f4dfbb5741d9e157ffeaf24dd88f17825c9bafac
-
SHA256
1f49d036f87c31d18065bc3d047be1da455b9d78bf5a1957b08a7b3b725d8b58
-
SHA512
c1976b642de517c8fa9eac5d073ecc403f78aa1cc248edb87820e586091240c6edd3b4b94f75ff77baeae841141ce45f402ce916ae731a2111c7b091a520e92b
-
SSDEEP
6144:L7vmWeaUbKxBEzA1wNKg192DcYiF001SU:L7vmPaUbK8zdEcj00AU
Malware Config
Signatures
Files
-
1f49d036f87c31d18065bc3d047be1da455b9d78bf5a1957b08a7b3b725d8b58.exe windows x86
90e267bbd82c5cf47c69c14e7b0f9086
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mixerGetControlDetailsW
mixerOpen
mixerClose
waveInStart
waveInReset
waveInClose
waveInAddBuffer
mixerGetLineInfoW
OpenDriver
waveInOpen
CloseDriver
mixerGetLineControlsW
waveInPrepareHeader
SendDriverMessage
waveInStop
mixerSetControlDetails
waveInGetDevCapsW
mixerGetID
waveInUnprepareHeader
advapi32
RegOpenKeyExW
RegEnumKeyExW
RegOpenKeyW
RegDeleteKeyW
RegCreateKeyW
RegCloseKey
RegSetValueExW
RegEnumKeyW
RegQueryValueExW
RegSetValueW
ole32
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
kernel32
lstrcmpW
ReadFile
GetTickCount
SetThreadPriority
SetFilePointer
MultiByteToWideChar
CreateEventW
GlobalAlloc
GetFileSize
ResetEvent
GlobalFree
GetDiskFreeSpaceW
InitializeCriticalSection
lstrcpyW
GetVersionExW
CreateIoCompletionPort
GetProfileIntA
SetEndOfFile
lstrcpyA
lstrcpynW
GlobalLock
WideCharToMultiByte
InterlockedExchange
GlobalUnlock
GetCurrentThread
VirtualFree
CreateFileW
lstrlenA
WaitForSingleObject
InterlockedIncrement
QueryPerformanceCounter
GetFullPathNameW
SetUnhandledExceptionFilter
PostQueuedCompletionStatus
GetStartupInfoA
GetSystemInfo
HeapAlloc
ReleaseSemaphore
DeleteCriticalSection
GetModuleFileNameA
CreateSemaphoreW
SetLastError
LeaveCriticalSection
GetCurrentProcess
LoadLibraryW
GetPrivateProfileStringW
FreeLibrary
GetProcAddress
InterlockedDecrement
lstrlenW
DeleteFileW
lstrcmpiW
GetLastError
IsBadWritePtr
GetProcessHeap
GetACP
IsBadCodePtr
IsBadReadPtr
GlobalHandle
WaitForMultipleObjects
SetEvent
GetSystemTimeAsFileTime
MulDiv
GlobalMemoryStatus
GetQueuedCompletionStatus
CloseHandle
GetCurrentProcessId
WriteFile
CreateThread
HeapFree
EnterCriticalSection
GetFileAttributesW
GetThreadPriority
user32
ReleaseDC
GetWindowLongW
EnableWindow
GetAsyncKeyState
ShowWindow
GetDlgItem
GetDC
SetDlgItemInt
GetClientRect
LoadCursorW
SetCursor
IsWindowVisible
SetWindowLongW
PeekMessageW
GetDlgItemInt
MoveWindow
SendMessageW
IsRectEmpty
GetDesktopWindow
TranslateMessage
GetWindowRect
CheckRadioButton
SetDlgItemTextW
IsWindow
DispatchMessageW
DefWindowProcW
CheckDlgButton
LoadStringW
ClientToScreen
InvalidateRect
CreateDialogParamW
wsprintfW
DestroyWindow
msvfw32
ICOpen
ICGetInfo
ICDecompress
ICClose
ICCompress
ICLocate
ICSendMessage
gdi32
GetPaletteEntries
GetTextExtentPoint32W
GetStockObject
GetObjectW
SelectObject
PatBlt
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ