Static task
static1
Behavioral task
behavioral1
Sample
37e8695ff655a5e5f376023220e0a2fb1aa2f2f8ad6c7a35dd7f0044a3fc359c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
37e8695ff655a5e5f376023220e0a2fb1aa2f2f8ad6c7a35dd7f0044a3fc359c.exe
Resource
win10v2004-20220812-en
General
-
Target
37e8695ff655a5e5f376023220e0a2fb1aa2f2f8ad6c7a35dd7f0044a3fc359c
-
Size
145KB
-
MD5
090e90fe1814056261fe188fffc097e0
-
SHA1
39873811f59015faef78b2f8d64271ee5951c192
-
SHA256
37e8695ff655a5e5f376023220e0a2fb1aa2f2f8ad6c7a35dd7f0044a3fc359c
-
SHA512
b3694133803deaa8ab6b8f833902f2b8c043d5d31ec6f255d95d5cc7e5946ced00f3ffe52dc40691fa2bb9ae937b498cfc48b3b814e7e6e891f6999c28048594
-
SSDEEP
1536:vABRlZVTDUzVXRMZ/F/s2VFBpf6E6PEJEsMraS4rVQdNOpymNXP4XBfc:vABRNTDUHML044E6oEdKrcN5qOc
Malware Config
Signatures
Files
-
37e8695ff655a5e5f376023220e0a2fb1aa2f2f8ad6c7a35dd7f0044a3fc359c.exe windows x86
06307f67f3c5318400d954b337023e8e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
fmod
?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?init@System@FMOD@@QAG?AW4FMOD_RESULT@@HIPAX@Z
?getMasterChannelGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVChannelGroup@2@@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?playSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PAVSound@2@PAVChannelGroup@2@_NPAPAVChannel@2@@Z
?createDSPByType@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_DSP_TYPE@@PAPAVDSP@2@@Z
?getPaused@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?setPaused@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?getActive@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?removeDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@@Z
?addDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@HPAVDSP@2@PAPAVDSPConnection@2@@Z
?setParameterFloat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?update@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?close@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
FMOD_System_Create
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
Sleep
WriteConsoleOutputA
GetStdHandle
SetConsoleTitleA
SetConsoleCursorInfo
SetConsoleWindowInfo
SetConsoleScreenBufferSize
GetConsoleScreenBufferInfo
msvcr100
_controlfp_s
_invoke_watson
_except_handler4_common
strchr
vsprintf
memset
fflush
__iob_func
_getch
_kbhit
exit
strncpy
fclose
fread
malloc
ftell
fseek
fopen_s
free
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE