Static task
static1
Behavioral task
behavioral1
Sample
4888fe09617418a88ca9986615f1eedc396f3c6805368b655053cafb00ebae8e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4888fe09617418a88ca9986615f1eedc396f3c6805368b655053cafb00ebae8e.exe
Resource
win10v2004-20220812-en
General
-
Target
4888fe09617418a88ca9986615f1eedc396f3c6805368b655053cafb00ebae8e
-
Size
169KB
-
MD5
03b5a1bd911f277403d749ec5a770484
-
SHA1
aff79fd17c993a724c9f4e363ee88b147672860c
-
SHA256
4888fe09617418a88ca9986615f1eedc396f3c6805368b655053cafb00ebae8e
-
SHA512
71ef5bd6b1d7008156e4f0f4220215c90f7ad4c2a7671fa73599ef95c9081a7dfde9ef4f271accc14489a2f8df581171e31a5ab746c289b9af3faba2107a8bde
-
SSDEEP
3072:QH2w/ZCYDu/90kfYQKtdmGWUM+VHv6/EA0X6ufz2lzfZAAmeMb4/:QH2w/G90fzdmGWUM+JS/z0X92dfZAeM
Malware Config
Signatures
Files
-
4888fe09617418a88ca9986615f1eedc396f3c6805368b655053cafb00ebae8e.exe windows x86
c69dd54db4819c89fbf82df497dfa867
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dinput
DirectInputCreateEx
DirectInputCreateA
kernel32
SetCurrentDirectoryA
lstrcmpA
TlsGetValue
CloseHandle
EnumResourceLanguagesW
ExitProcess
GetModuleHandleA
GetTimeFormatA
LoadResource
MapViewOfFile
SetUnhandledExceptionFilter
SetLastError
ole32
DoDragDrop
OleInitialize
OleSetClipboard
OleUninitialize
CoInitialize
CreateOleAdviseHolder
RegisterDragDrop
WriteClassStg
WriteClassStm
WriteFmtUserTypeStg
CreateDataAdviseHolder
CoUninitialize
CoRegisterMessageFilter
CoRegisterClassObject
ReadClassStg
CLSIDFromProgID
CoCreateInstance
CoGetClassObject
CoGetMalloc
ProgIDFromCLSID
dsound
DirectSoundEnumerateW
DirectSoundCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureCreate
user32
DestroyMenu
DestroyCaret
EnableMenuItem
shell32
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteA
ShellExecuteExA
ShellExecuteExW
SHFileOperationA
msvfw32
GetOpenFileNamePreviewW
GetSaveFileNamePreviewW
ICMThunk32
DrawDibProfileDisplay
Sections
.text Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ