Static task
static1
Behavioral task
behavioral1
Sample
495d71d5ababf3d127d338d5b9d443a9d22558c19aa344d6485e0463a48bf25f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
495d71d5ababf3d127d338d5b9d443a9d22558c19aa344d6485e0463a48bf25f.exe
Resource
win10v2004-20220812-en
General
-
Target
495d71d5ababf3d127d338d5b9d443a9d22558c19aa344d6485e0463a48bf25f
-
Size
278KB
-
MD5
8057ed34cf93adb3b051abaf88eaefd0
-
SHA1
161d20be6f366c4c267dfebb51c6996c293ae0a8
-
SHA256
495d71d5ababf3d127d338d5b9d443a9d22558c19aa344d6485e0463a48bf25f
-
SHA512
bd1022c2c051a2b9546c3b84604abc38588a4ef13062e46c2ebda9cf290ac84e53d544a478774a4dd50346c44593fd53a634f115515c9c96bd36af6ba7e53ec3
-
SSDEEP
3072:v/9GmYMWj3RCstpfU+4eXY42zCi3v977Fn/5v5nIgSbBsjMaEOTzoI7h+aS1Gn/:Hv543RCstNeSYcGvVZxv5nPE4zo0naG/
Malware Config
Signatures
Files
-
495d71d5ababf3d127d338d5b9d443a9d22558c19aa344d6485e0463a48bf25f.exe windows x86
3804cb98e05395ab417301ac5d09cb2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
WaitForMultipleObjects
ExitThread
CloseHandle
CreateEventA
CreateThread
FindResourceA
LoadResource
LockResource
lstrlenA
lstrcmpiA
GetTickCount
GlobalUnlock
GlobalFree
_lclose
ReadFile
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetLastError
GetProcAddress
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
RtlUnwind
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
CreateFileA
lstrcpyA
SetEndOfFile
FlushFileBuffers
LCMapStringA
SetStdHandle
SetFilePointer
GetVolumeInformationA
Sleep
lstrcatA
OpenFile
_llseek
_lread
LCMapStringW
GlobalLock
LoadLibraryA
GlobalAlloc
GlobalHandle
user32
DrawTextA
wsprintfA
MoveWindow
TranslateMessage
PtInRect
ReleaseCapture
ShowCursor
SetRect
MessageBoxA
GetActiveWindow
ReleaseDC
GetDC
CallWindowProcA
InvalidateRect
EndDialog
GetDlgItemTextA
SetWindowLongA
GetDlgItem
SetDlgItemTextA
GetKeyNameTextA
SetCapture
GetCursorPos
PostMessageA
SetTimer
SetCursorPos
DialogBoxParamA
DestroyWindow
CreateDialogParamA
BeginPaint
EndPaint
GetAsyncKeyState
KillTimer
PostQuitMessage
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
ShowWindow
UpdateWindow
SetFocus
FindWindowA
SendMessageA
PeekMessageA
GetMessageA
DispatchMessageA
gdi32
CreateCompatibleDC
TextOutA
CreateCompatibleBitmap
SetTextColor
SetBkMode
SelectObject
StretchDIBits
CreatePalette
GetSystemPaletteEntries
SetPixel
GetPixel
DeleteObject
CreateFontIndirectA
DeleteDC
GetStockObject
GetObjectA
SetDIBits
BitBlt
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
GetUserNameA
RegCreateKeyExA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
ddraw
DirectDrawCreate
dplayx
ord4
dsound
DirectSoundCreate
winmm
mmioDescend
mmioCreateChunk
mmioWrite
mmioGetInfo
mmioAdvance
mmioSetInfo
mmioSeek
mmioOpenA
mmioRead
mmioAscend
mmioClose
mixerSetControlDetails
mixerGetNumDevs
mixerOpen
mixerGetControlDetailsA
mixerClose
mciSendStringA
Sections
.text Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE