Static task
static1
Behavioral task
behavioral1
Sample
5b48d1c556110fc3a8556d299cd8b6c6ecc4f95058a4f067fd902abe18f4d92f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5b48d1c556110fc3a8556d299cd8b6c6ecc4f95058a4f067fd902abe18f4d92f.exe
Resource
win10v2004-20220812-en
General
-
Target
5b48d1c556110fc3a8556d299cd8b6c6ecc4f95058a4f067fd902abe18f4d92f
-
Size
172KB
-
MD5
a09ec20d8aa49bd10e5eee477fc9ac60
-
SHA1
6e46f7535cdd563b6c882566c82e122d7f3b1199
-
SHA256
5b48d1c556110fc3a8556d299cd8b6c6ecc4f95058a4f067fd902abe18f4d92f
-
SHA512
af141c0126e1f97d59ce8bcf7fbee94953e3d1aedbab820d4c1fdf4c75b5d0fb6a58d90e79413daf1d3f136fe09750fae4273791ad9b1dc47bd18ee691c7abe0
-
SSDEEP
3072:9RjoYaN2nByE8s0mpXlZolxJ7KiyMkRz2KlQGxFwPL4ZXcUPh+bGayNfQe:3jo1gBy6pev7fyQPL49J9NZ
Malware Config
Signatures
Files
-
5b48d1c556110fc3a8556d299cd8b6c6ecc4f95058a4f067fd902abe18f4d92f.exe windows x86
b75719f7caec840a260acd3339171806
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalMemoryStatus
GetSystemDirectoryA
QueryPerformanceFrequency
GetDiskFreeSpaceExA
MultiByteToWideChar
GetTickCount
QueryPerformanceCounter
LoadLibraryA
GetEnvironmentStringsW
GetEnvironmentStrings
GetModuleHandleA
SetEnvironmentVariableA
GetLastError
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
GetCPInfo
IsBadCodePtr
FreeEnvironmentStringsA
FreeEnvironmentStringsW
VirtualAlloc
HeapReAlloc
GetACP
CloseHandle
CompareStringW
CompareStringA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
CreateFileA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
WriteFile
VirtualFree
ReadFile
GetStdHandle
UnhandledExceptionFilter
HeapSize
GetProcAddress
SetFilePointer
GetFileType
SetHandleCount
GetOEMCP
SetEndOfFile
GetCurrentProcess
WideCharToMultiByte
TerminateProcess
user32
GetSystemMetrics
CreateWindowExA
GetDC
RegisterClassA
LoadCursorA
LoadIconA
ReleaseDC
SetFocus
PostMessageA
PeekMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
GetCursorPos
InvalidateRect
GetForegroundWindow
GetClientRect
ClientToScreen
SetWindowLongA
SetRect
AdjustWindowRect
SetWindowPos
UpdateWindow
gdi32
GetDeviceCaps
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteA
ole32
CoInitialize
ddraw
DirectDrawCreate
winmm
timeGetTime
timeSetEvent
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
timeKillEvent
mss32
_AIL_sample_buffer_ready@4
_AIL_sample_status@4
_AIL_file_size@4
_AIL_close_stream@4
_AIL_file_read@8
_AIL_stream_status@4
_AIL_mem_free_lock@4
_AIL_close_digital_driver@4
_AIL_set_redist_directory@4
_AIL_startup@0
_AIL_waveOutOpen@16
_AIL_allocate_sample_handle@4
_AIL_minimum_sample_buffer_size@12
_AIL_mem_alloc_lock@4
_AIL_stop_sample@4
_AIL_pause_stream@8
_AIL_resume_sample@4
_AIL_shutdown@0
_AIL_release_sample_handle@4
_AIL_load_sample_buffer@16
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE