Static task
static1
Behavioral task
behavioral1
Sample
0722254f5f26344483b51a7653f12c983b85af053b17d66ec2ca4acbae8e10b0.exe
Resource
win7-20221111-en
General
-
Target
0722254f5f26344483b51a7653f12c983b85af053b17d66ec2ca4acbae8e10b0
-
Size
168KB
-
MD5
36bc00ff4e5197a03662bc572a53c4f9
-
SHA1
f987ccb8cf8ea308a7552a0392291094157dd356
-
SHA256
0722254f5f26344483b51a7653f12c983b85af053b17d66ec2ca4acbae8e10b0
-
SHA512
df800e19bc20e512113a1351d057f57c522ef7905cad045f6ebc25f78b4e7d6e66d8dd8fe8431b4c091a7493d9e9d295066be87c52e1e3ec753dbca3ee661d51
-
SSDEEP
3072:aYkmuN0D9litI/vcncFDyeo/kt+aDWTzh5JrwPlJkOqRReMcDH1:aYkmuN0x9/kccdkvqTHEl0IDV
Malware Config
Signatures
Files
-
0722254f5f26344483b51a7653f12c983b85af053b17d66ec2ca4acbae8e10b0.exe windows x86
a42093ecd1921a1132c3993e1fd75f14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
FreeLibrary
LoadLibraryA
WideCharToMultiByte
GetCurrentDirectoryA
GlobalAlloc
GlobalFree
LocalAlloc
LocalLock
LocalUnlock
WriteFile
GetProcAddress
lstrcpyA
CreateFileA
lstrcmpiA
SetFilePointer
CloseHandle
ReadFile
lstrcmpA
GlobalLock
GlobalUnlock
GetTickCount
Sleep
LocalFree
SetEnvironmentVariableA
CompareStringW
GetStringTypeW
RtlUnwind
GetStringTypeA
VirtualFree
HeapCreate
HeapFree
GetFileType
GetStdHandle
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
FreeEnvironmentStringsA
GetModuleFileNameA
FreeEnvironmentStringsW
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
GetVersion
GetCommandLineA
ExitProcess
GetModuleHandleA
GetLocalTime
GetStartupInfoA
GetTimeZoneInformation
GetSystemTime
LCMapStringW
lstrlenA
GetOEMCP
LCMapStringA
VirtualAlloc
GetACP
GetCPInfo
HeapReAlloc
CompareStringA
HeapAlloc
user32
PostMessageA
UnregisterClassA
MessageBoxA
DestroyWindow
wsprintfA
EndPaint
SendMessageA
GetMessageA
DispatchMessageA
TranslateMessage
ReleaseDC
UpdateWindow
ShowWindow
RegisterClassExA
CreateWindowExA
GetDC
FindWindowA
LoadCursorA
LoadIconA
DefWindowProcA
SetCursor
SetWindowPos
DialogBoxParamA
GetFocus
SetParent
InvalidateRect
GetWindow
GetClientRect
FillRect
EndDialog
SetFocus
IsWindow
GetWindowRect
SendDlgItemMessageA
GetParent
BeginPaint
SetTimer
PostQuitMessage
KillTimer
gdi32
DeleteObject
SetBkColor
SetTextColor
GetStockObject
BitBlt
GetObjectA
DeleteDC
CreateCompatibleDC
StretchDIBits
SelectObject
CreateDIBitmap
Rectangle
GetDeviceCaps
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
ole32
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
SysFreeString
msvfw32
ICClose
avicap32
capGetDriverDescriptionA
capCreateCaptureWindowA
winmm
mmioAscend
waveOutUnprepareHeader
waveOutClose
mmioOpenA
mmioDescend
mmioClose
mmioRead
waveOutOpen
waveOutPrepareHeader
waveOutWrite
waveOutReset
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE