Static task
static1
Behavioral task
behavioral1
Sample
9a1d203a19e97ba883fc69dbc4e34938e06e9d0dc24ee5c75c5c89258cfde61b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a1d203a19e97ba883fc69dbc4e34938e06e9d0dc24ee5c75c5c89258cfde61b.exe
Resource
win10v2004-20220812-en
General
-
Target
9a1d203a19e97ba883fc69dbc4e34938e06e9d0dc24ee5c75c5c89258cfde61b
-
Size
199KB
-
MD5
846ff2116976c22f07b5662e5fa8f422
-
SHA1
71fd4e61d96f47bd860b7cab0002031b84318d15
-
SHA256
9a1d203a19e97ba883fc69dbc4e34938e06e9d0dc24ee5c75c5c89258cfde61b
-
SHA512
535266a0baa435af8a1a91973cb9482176200763b3c692ab7f0bd822a6659fd99ca0f2f9a8547c711a8365458509e635dc83d15aeb9c7b5e3cd1eb73549ee2ea
-
SSDEEP
3072:5gpvtds308Yedko5BqzqEQw57WKNiFJy3ICuuZuUsFHwpSHXZ2Q/9r3fC6rgP:SEYC/BqzqEQK7WKWCMvFHwkHXwQlLQ
Malware Config
Signatures
Files
-
9a1d203a19e97ba883fc69dbc4e34938e06e9d0dc24ee5c75c5c89258cfde61b.exe windows x86
8d283d20cd602c9c5971d5e26f76b5ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynW
GetProcAddress
GetProfileIntA
IsBadCodePtr
GetThreadPriority
FreeLibrary
GlobalMemoryStatus
CreateIoCompletionPort
GlobalAlloc
InterlockedExchange
SetLastError
lstrlenW
ReadFile
InitializeCriticalSection
GetCurrentProcess
GetTickCount
GlobalHandle
CreateThread
QueryPerformanceCounter
DeleteCriticalSection
SetFilePointer
CreateSemaphoreW
GetQueuedCompletionStatus
GetStartupInfoA
lstrcmpW
GetFullPathNameW
MultiByteToWideChar
GetACP
SetUnhandledExceptionFilter
GetFileSize
lstrcmpiW
CloseHandle
SetThreadPriority
GlobalLock
PostQueuedCompletionStatus
SetEndOfFile
IsBadReadPtr
ResetEvent
GetLastError
EnterCriticalSection
WideCharToMultiByte
GetSystemInfo
InterlockedDecrement
IsBadWritePtr
WaitForSingleObject
WaitForMultipleObjects
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
DeleteFileW
GetVersionExW
MulDiv
GetCurrentProcessId
lstrcpyW
SetEvent
CreateEventW
GetDiskFreeSpaceW
GlobalFree
InterlockedIncrement
CreateFileW
GlobalUnlock
lstrlenA
GetFileAttributesW
GetProcessHeap
LeaveCriticalSection
WriteFile
lstrcpyA
VirtualFree
GetModuleFileNameA
ReleaseSemaphore
GetPrivateProfileStringW
LoadLibraryW
GetCurrentThread
user32
DestroyWindow
MoveWindow
GetWindowLongW
CheckDlgButton
PeekMessageW
GetDC
TranslateMessage
SetDlgItemTextW
GetDesktopWindow
IsWindow
IsRectEmpty
CheckRadioButton
EnableWindow
GetDlgItem
IsWindowVisible
ShowWindow
InvalidateRect
SetWindowLongW
GetWindowRect
wsprintfW
ClientToScreen
DefWindowProcW
GetAsyncKeyState
CreateDialogParamW
GetClientRect
SendMessageW
LoadStringW
SetCursor
GetDlgItemInt
DispatchMessageW
SetDlgItemInt
ReleaseDC
LoadCursorW
winmm
mixerOpen
waveInStop
waveInUnprepareHeader
waveInStart
waveInReset
mixerGetID
CloseDriver
mixerSetControlDetails
mixerGetControlDetailsW
waveInGetDevCapsW
waveInClose
mixerClose
mixerGetLineControlsW
SendDriverMessage
waveInAddBuffer
waveInOpen
waveInPrepareHeader
OpenDriver
mixerGetLineInfoW
ole32
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoUninitialize
CoInitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
msvfw32
ICGetInfo
ICClose
ICCompress
ICDecompress
ICSendMessage
ICOpen
ICLocate
advapi32
RegSetValueW
RegDeleteKeyW
RegEnumKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegOpenKeyW
RegEnumKeyW
RegCreateKeyW
RegOpenKeyExW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
gdi32
SelectObject
GetObjectW
PatBlt
GetTextExtentPoint32W
GetPaletteEntries
GetStockObject
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 407KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ