Static task
static1
Behavioral task
behavioral1
Sample
1e6feb8fb61a878a47f6968f7e98d0fdda10c6ac5e71d9c44ce8942f45702cee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e6feb8fb61a878a47f6968f7e98d0fdda10c6ac5e71d9c44ce8942f45702cee.exe
Resource
win10v2004-20220812-en
General
-
Target
1e6feb8fb61a878a47f6968f7e98d0fdda10c6ac5e71d9c44ce8942f45702cee
-
Size
185KB
-
MD5
277e158f930747b5b5f9bb12522dd4b2
-
SHA1
532b7fd501f6b5ecd256c2785acbc5d9492c0a15
-
SHA256
1e6feb8fb61a878a47f6968f7e98d0fdda10c6ac5e71d9c44ce8942f45702cee
-
SHA512
f238f03db3b67d979ee8293d1c2c7f2878e428f98ddc8b8e39de951621e922ddc1db9ba462e027ff3f3552bacf321210cc21930213b11552bcc0df8a2e72bc9c
-
SSDEEP
3072:aPoW4uiHWsF9pFp3ut221iZ9+Bw3D9yYu5hJJLp7bYaRvWvvV26iNnqjCJzvaorM:aPcumF9X2k9DJZ0hbV7bYaqabahA+t
Malware Config
Signatures
Files
-
1e6feb8fb61a878a47f6968f7e98d0fdda10c6ac5e71d9c44ce8942f45702cee.exe windows x86
c8e593ecb3bc0409c482e1d6026d7afc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
ICGetInfo
ICSendMessage
ICOpen
ICLocate
ICDecompress
ICClose
ICCompress
kernel32
HeapFree
lstrcmpiW
GetDiskFreeSpaceW
GetStartupInfoA
ResetEvent
GetProcessHeap
GetSystemInfo
MultiByteToWideChar
MulDiv
SetUnhandledExceptionFilter
WaitForSingleObject
InitializeCriticalSection
GetVersionExW
GetFullPathNameW
InterlockedDecrement
GetQueuedCompletionStatus
GlobalHandle
IsBadWritePtr
CreateFileW
IsBadCodePtr
GetProfileIntA
GlobalLock
SetFilePointer
GetThreadPriority
WaitForMultipleObjects
DeleteFileW
CreateThread
GetCurrentProcess
InterlockedIncrement
lstrcmpW
HeapAlloc
GetCurrentThread
GetSystemDefaultLangID
SetEvent
PostQueuedCompletionStatus
LeaveCriticalSection
GetFileSize
WriteFile
WideCharToMultiByte
ReleaseSemaphore
GlobalUnlock
GetLastError
IsBadReadPtr
lstrcpyW
GetEnvironmentStringsW
GetCurrentProcessId
lstrcpyA
SetEndOfFile
GlobalMemoryStatus
GetFileAttributesW
EnterCriticalSection
FreeLibrary
CreateEventW
GetTickCount
lstrlenW
GetSystemTimeAsFileTime
GetModuleFileNameA
GetPrivateProfileStringW
VirtualFree
ReadFile
GlobalAlloc
lstrlenA
InterlockedExchange
CloseHandle
LoadLibraryW
IsBadHugeReadPtr
CreateSemaphoreW
lstrcpynW
CreateIoCompletionPort
GlobalFree
QueryPerformanceCounter
DeleteCriticalSection
SetThreadPriority
user32
GetAsyncKeyState
IsWindow
GetClientRect
SetDlgItemInt
GetDlgItem
GetWindowLongW
wsprintfW
SetWindowLongW
ReleaseDC
CreateDialogParamW
SetDlgItemTextW
IsWindowVisible
InvalidateRect
CheckRadioButton
DefWindowProcW
ShowWindow
GetDC
DestroyWindow
MoveWindow
GetDlgItemInt
TranslateMessage
DispatchMessageW
LoadCursorW
SendMessageW
IsRectEmpty
SetCursor
EnableWindow
PeekMessageW
CheckDlgButton
GetDesktopWindow
LoadStringW
GetWindowRect
ClientToScreen
winmm
mixerGetLineControlsW
mixerGetID
waveInStop
waveInClose
CloseDriver
mixerGetControlDetailsW
mixerGetLineInfoW
waveInStart
mixerClose
waveInOpen
SendDriverMessage
waveInReset
waveInGetDevCapsW
mixerOpen
waveInUnprepareHeader
waveInAddBuffer
OpenDriver
waveInPrepareHeader
mixerSetControlDetails
advapi32
RegEnumKeyW
RegSetValueExW
RegSetValueW
RegEnumKeyExW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyW
ole32
CoTaskMemFree
CoTaskMemAlloc
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoUninitialize
StringFromGUID2
gdi32
SelectObject
GetPaletteEntries
GetStockObject
GetObjectW
GetTextExtentPoint32W
PatBlt
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
msvcrt
_purecall
_ftol
??2@YAPAXI@Z
wcslen
??3@YAXPAX@Z
_except_handler3
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ