Static task
static1
Behavioral task
behavioral1
Sample
42df422bab0de3e7c9c85d6e8f227d3037e0d3ea855a0b1a38b6176ef03b7643.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42df422bab0de3e7c9c85d6e8f227d3037e0d3ea855a0b1a38b6176ef03b7643.exe
Resource
win10v2004-20220812-en
General
-
Target
42df422bab0de3e7c9c85d6e8f227d3037e0d3ea855a0b1a38b6176ef03b7643
-
Size
183KB
-
MD5
42da74b86ff942c74704dd7e42d549b0
-
SHA1
2ef846fe5c9dd2f60cd4e5f6d9c590281cc4f81b
-
SHA256
42df422bab0de3e7c9c85d6e8f227d3037e0d3ea855a0b1a38b6176ef03b7643
-
SHA512
fee4aa272d0470e3416d54a0b124c848e3288698eecbb376220c0d7ad38515d3a43208e87b71f36b5e824b336b79243899b645910a2510928300c4ae134fb55b
-
SSDEEP
3072:N5g0729lKnUus/TH4cEPwLgwrDVpg7xmUnH1zDNYG7JpycNiDpZpBaQPwEXw1xdr:92jKnUus/THNLgMgUiuUJYcNiDph/IEW
Malware Config
Signatures
Files
-
42df422bab0de3e7c9c85d6e8f227d3037e0d3ea855a0b1a38b6176ef03b7643.exe windows x86
401f751a49a47e78feecf8b7d1566084
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_ftol
_except_handler3
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
wcslen
kernel32
GlobalFree
WaitForMultipleObjects
GetProcessHeap
GlobalLock
GetThreadPriority
GetFileSize
PostQueuedCompletionStatus
SetEndOfFile
CreateThread
GetQueuedCompletionStatus
InitializeCriticalSection
InterlockedDecrement
GetSystemTimeAsFileTime
InterlockedIncrement
GetFullPathNameW
GetStartupInfoA
GlobalMemoryStatus
GetProfileIntA
GetSystemInfo
ReleaseSemaphore
GlobalUnlock
InterlockedExchange
lstrlenW
WideCharToMultiByte
GlobalAlloc
ResetEvent
GlobalHandle
DeleteFileW
LeaveCriticalSection
lstrcpynW
SetUnhandledExceptionFilter
WriteFile
DeleteCriticalSection
GetCurrentProcessId
lstrcpyA
EnterCriticalSection
FreeLibrary
LoadLibraryW
GetCurrentThread
MulDiv
GetEnvironmentStringsW
GetModuleFileNameA
QueryPerformanceCounter
CreateEventW
HeapAlloc
SetFilePointer
lstrcmpW
GetVersionExW
SetEvent
VirtualFree
GetLastError
GetTickCount
CloseHandle
IsBadWritePtr
GetCurrentProcess
SetThreadPriority
CreateIoCompletionPort
IsBadReadPtr
CreateFileW
lstrcpyW
GetDiskFreeSpaceW
GetFileAttributesW
HeapFree
lstrcmpiW
GetPrivateProfileStringW
MultiByteToWideChar
WaitForSingleObject
ReadFile
lstrlenA
CreateSemaphoreW
GetSystemDefaultLangID
IsBadCodePtr
winmm
waveInPrepareHeader
waveInClose
waveInUnprepareHeader
waveInStart
waveInOpen
CloseDriver
mixerSetControlDetails
waveInGetDevCapsW
mixerGetControlDetailsW
mixerOpen
OpenDriver
waveInStop
waveInAddBuffer
mixerGetLineControlsW
mixerGetLineInfoW
waveInReset
mixerClose
SendDriverMessage
mixerGetID
user32
EnableWindow
MoveWindow
SendMessageW
CheckDlgButton
GetClientRect
IsWindow
DefWindowProcW
ClientToScreen
SetCursor
GetWindowLongW
InvalidateRect
SetDlgItemTextW
DispatchMessageW
PeekMessageW
TranslateMessage
GetDlgItem
ShowWindow
CreateDialogParamW
ReleaseDC
IsRectEmpty
CheckRadioButton
wsprintfW
SetWindowLongW
GetWindowRect
GetAsyncKeyState
SetDlgItemInt
GetDC
IsWindowVisible
LoadStringW
GetDesktopWindow
LoadCursorW
DestroyWindow
GetDlgItemInt
advapi32
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyW
RegSetValueW
RegCloseKey
RegCreateKeyW
RegEnumKeyExW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW
gdi32
GetObjectW
GetPaletteEntries
GetStockObject
PatBlt
GetTextExtentPoint32W
SelectObject
msvfw32
ICOpen
ICGetInfo
ICCompress
ICDecompress
ICSendMessage
ICClose
ICLocate
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
ole32
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoInitialize
Sections
.text Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ