Static task
static1
Behavioral task
behavioral1
Sample
972118c938cd695012cf54c582782b0f03875db05dd464c639a6ab584e1de9c5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
972118c938cd695012cf54c582782b0f03875db05dd464c639a6ab584e1de9c5.exe
Resource
win10v2004-20221111-en
General
-
Target
972118c938cd695012cf54c582782b0f03875db05dd464c639a6ab584e1de9c5
-
Size
656KB
-
MD5
104ebb0a0267a6b2ca17134e643d62c8
-
SHA1
b4891bd811e6620673f3b8be8c591ee632f81695
-
SHA256
972118c938cd695012cf54c582782b0f03875db05dd464c639a6ab584e1de9c5
-
SHA512
0ab54f16f8227ca5437cd35c6e64e74d6d4c5ab0c33b559efff46fb310a02db85bf182bc79f24b3fff94ca8a3015cde32c367483524687ec290c545e1eed4674
-
SSDEEP
12288:xjuIUxHFMqPZE4MflAUBxt8WgKgCyjwNjT+X7WsVkNe:luISX/SlbBxt8nC8wFT0bVk
Malware Config
Signatures
Files
-
972118c938cd695012cf54c582782b0f03875db05dd464c639a6ab584e1de9c5.exe windows x86
3ac76a3ae34edd26104d4646e550ac1f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveInGetNumDevs
waveOutReset
joySetCapture
joyGetPos
waveInOpen
midiInOpen
midiInGetNumDevs
waveInPrepareHeader
waveInClose
waveInReset
joyReleaseCapture
midiInClose
midiInStop
waveInStart
waveInUnprepareHeader
waveInAddBuffer
midiInStart
midiInGetDevCapsW
mfc42
ord1576
user32
ReleaseCapture
EndDialog
GetPropA
CharNextA
GetForegroundWindow
SetWindowPlacement
GetIconInfo
GetDlgItem
DrawEdge
GetMenuItemID
GetMessageA
SetActiveWindow
GetSystemMenu
ShowCaret
DestroyMenu
TrackPopupMenu
SetScrollRange
GetKeyState
DefWindowProcA
EndPaint
GetScrollRange
LoadAcceleratorsA
TranslateAcceleratorA
RegisterWindowMessageA
SetDlgItemTextA
GetScrollInfo
IsIconic
CreateIconIndirect
GetCursorPos
LockWindowUpdate
EmptyClipboard
AdjustWindowRectEx
CopyRect
IsMenu
MapVirtualKeyA
GetMessagePos
GetSystemMetrics
GetParent
AppendMenuA
WaitMessage
SetPropA
SetWindowTextA
PostQuitMessage
GetClassInfoExA
DrawStateA
BeginPaint
wsprintfA
SetWindowLongA
MessageBoxA
LoadIconA
LoadBitmapA
GetWindowLongA
CopyAcceleratorTableA
IsWindow
GetDC
GetClassNameA
IsWindowEnabled
RegisterClassA
mouse_event
CreatePopupMenu
FindWindowA
LoadCursorA
SetWindowContextHelpId
BringWindowToTop
ToAsciiEx
GetActiveWindow
SetFocus
SetParent
SetWindowRgn
SystemParametersInfoA
EnableMenuItem
UpdateWindow
SetMenuDefaultItem
MapWindowPoints
FillRect
RegisterClassExA
OpenClipboard
RedrawWindow
SendDlgItemMessageA
IsChild
EnableWindow
GrayStringA
ReleaseDC
SetScrollInfo
GetClientRect
GetLastActivePopup
DestroyAcceleratorTable
RemoveMenu
CreateWindowExA
DrawTextA
IsClipboardFormatAvailable
DeferWindowPos
CreateAcceleratorTableA
SetWindowPos
WindowFromPoint
DestroyIcon
DeleteMenu
ShowWindow
PostMessageA
CallWindowProcA
PeekMessageA
IsWindowVisible
GetFocus
SetScrollPos
IsDialogMessageA
ClientToScreen
InvalidateRect
MapDialogRect
DispatchMessageA
LoadMenuA
GetWindow
GetWindowTextA
GetSubMenu
GetNextDlgTabItem
GetCursor
IsZoomed
CallNextHookEx
GetKeyboardLayoutList
GetWindowThreadProcessId
LoadImageA
DrawFrameControl
CharUpperA
GetSysColor
TabbedTextOutA
GetMenuStringA
SetCaretPos
GetKeyNameTextA
GetClassLongA
comctl32
ImageList_GetIcon
InitCommonControlsEx
ImageList_GetIconSize
kernel32
VirtualQuery
CompareStringA
GetTickCount
FreeEnvironmentStringsW
LCMapStringA
TlsSetValue
WriteFile
IsBadWritePtr
GetOEMCP
TlsFree
DeleteCriticalSection
LCMapStringW
GetFileType
GetEnvironmentStringsW
GetLocalTime
GetEnvironmentStrings
HeapDestroy
VirtualAlloc
FreeEnvironmentStringsA
GetStdHandle
GetTimeZoneInformation
GetACP
GetLastError
HeapAlloc
TlsGetValue
GetCommandLineA
GetCurrentThreadId
MultiByteToWideChar
GetStringTypeA
GetModuleHandleA
InterlockedIncrement
SetFilePointer
FlushFileBuffers
VirtualFree
RtlUnwind
SetHandleCount
GetCurrentProcessId
GetSystemTime
CloseHandle
LoadLibraryA
EnterCriticalSection
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
ReadFile
GetVersion
GetCurrentThread
SetStdHandle
InterlockedDecrement
GetStartupInfoA
QueryPerformanceCounter
ExitProcess
GetProcAddress
GetStringTypeW
CreateMutexA
InterlockedExchange
HeapFree
SetLastError
TlsAlloc
InitializeCriticalSection
GetModuleFileNameA
LeaveCriticalSection
WideCharToMultiByte
GetCPInfo
UnhandledExceptionFilter
FatalAppExitA
HeapReAlloc
SetEnvironmentVariableA
HeapCreate
CompareStringW
advapi32
RegQueryValueExA
IsValidSecurityDescriptor
RegDeleteKeyA
AccessCheck
DuplicateToken
RegSetValueExA
RegCreateKeyExA
ole32
OleCreateStaticFromData
RegisterDragDrop
CoTaskMemFree
CLSIDFromString
CoTaskMemAlloc
CoLockObjectExternal
CoRevokeClassObject
CreateBindCtx
OleIsCurrentClipboard
ReleaseStgMedium
OleRun
CoRegisterMessageFilter
WriteClassStm
OleUninitialize
CoFreeUnusedLibraries
OleSaveToStream
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 448KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ