Static task
static1
Behavioral task
behavioral1
Sample
41001ca51a31843b1b24533f8dbc3b3b9585352b3f6181c60e55d2dbe4dc5a83.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
41001ca51a31843b1b24533f8dbc3b3b9585352b3f6181c60e55d2dbe4dc5a83.exe
Resource
win10v2004-20220812-en
General
-
Target
41001ca51a31843b1b24533f8dbc3b3b9585352b3f6181c60e55d2dbe4dc5a83
-
Size
199KB
-
MD5
2d6df553cd3037cc045eadcb64e60ec9
-
SHA1
3402be5bf7aa43cc13a0510d5506ec479ffc4238
-
SHA256
41001ca51a31843b1b24533f8dbc3b3b9585352b3f6181c60e55d2dbe4dc5a83
-
SHA512
927b0eacbfa9c4e844691059867102f84c328a33b332f38159477602b2b4f38fd7b7e15534460237c24478561309ff1437748883754e857ab3319c50c7f8fe4f
-
SSDEEP
6144:gEvYV/rDanaUWXZPHlcqzyKkd7/BKqpQh:gWSrDanah9HlmKMzBKph
Malware Config
Signatures
Files
-
41001ca51a31843b1b24533f8dbc3b3b9585352b3f6181c60e55d2dbe4dc5a83.exe windows x86
7709ccbd0984c973366b3519416af117
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadCursorW
ShowWindow
DefWindowProcW
GetWindowRect
IsRectEmpty
IsWindow
MoveWindow
SendMessageW
EnableWindow
GetWindowLongW
CheckDlgButton
GetAsyncKeyState
InvalidateRect
GetDesktopWindow
DispatchMessageW
SetCursor
wsprintfW
SetDlgItemTextW
TranslateMessage
LoadStringW
ReleaseDC
IsWindowVisible
SetDlgItemInt
DestroyWindow
CheckRadioButton
GetDlgItem
ClientToScreen
CreateDialogParamW
GetClientRect
SetWindowLongW
GetDlgItemInt
PeekMessageW
GetDC
kernel32
GetFullPathNameW
InterlockedDecrement
GetThreadPriority
DeleteCriticalSection
GetQueuedCompletionStatus
CreateSemaphoreW
GetSystemTimeAsFileTime
WaitForMultipleObjects
GetModuleFileNameA
DeleteFileW
IsBadWritePtr
GlobalLock
CreateIoCompletionPort
SetThreadPriority
GetDiskFreeSpaceW
lstrcmpW
CreateFileW
GetProfileIntA
PostQueuedCompletionStatus
ResetEvent
GetCurrentProcessId
SetUnhandledExceptionFilter
WaitForSingleObject
lstrcpyA
InterlockedExchange
GetFileAttributesW
GetTickCount
WriteFile
GetFileSize
HeapFree
GlobalMemoryStatus
GetVersionExW
IsBadCodePtr
lstrcpynW
HeapAlloc
GetProcessHeap
GetSystemInfo
IsBadHugeReadPtr
lstrlenA
MulDiv
EnterCriticalSection
CreateEventW
GetEnvironmentStringsW
VirtualFree
FreeLibrary
InterlockedIncrement
GetPrivateProfileStringW
QueryPerformanceCounter
SetEvent
GlobalHandle
GetCurrentProcess
GetStartupInfoA
ReadFile
GlobalAlloc
CreateThread
OutputDebugStringA
GetLastError
SetFilePointer
IsBadReadPtr
SetEndOfFile
lstrlenW
lstrcpyW
LeaveCriticalSection
GetSystemDefaultLangID
InitializeCriticalSection
GetCurrentThread
LoadLibraryW
GetCPInfo
CloseHandle
lstrcmpiW
GlobalFree
ReleaseSemaphore
WideCharToMultiByte
MultiByteToWideChar
GlobalUnlock
winmm
CloseDriver
OpenDriver
mixerSetControlDetails
waveInClose
waveInGetDevCapsW
mixerGetLineControlsW
waveInReset
mixerOpen
waveInOpen
mixerGetLineInfoW
waveInPrepareHeader
waveInStop
waveInStart
mixerGetControlDetailsW
mixerGetID
SendDriverMessage
waveInAddBuffer
mixerClose
waveInUnprepareHeader
msvfw32
ICOpen
ICGetInfo
ICDecompress
ICCompress
ICSendMessage
ICLocate
ICClose
gdi32
PatBlt
GetStockObject
GetTextExtentPoint32W
GetObjectW
GetPaletteEntries
SelectObject
advapi32
RegCloseKey
RegSetValueExW
RegCreateKeyW
RegOpenKeyExW
RegEnumKeyW
RegOpenKeyW
RegSetValueW
RegQueryValueExW
RegEnumKeyExW
RegDeleteKeyW
ole32
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
msvcrt
wcslen
??2@YAPAXI@Z
_purecall
_except_handler3
??3@YAXPAX@Z
_ftol
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ