Behavioral task
behavioral1
Sample
WAVEPAD/Keygen/Wavepad Sound Editor 4.24- Keygen.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
WAVEPAD/Keygen/Wavepad Sound Editor 4.24- Keygen.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
WAVEPAD/WavepadSoundEditor.4.24.exe
Resource
win7-20221111-en
General
-
Target
1d52fc42be9aa3405344ce775be99598c4e02200c74e8c9f23f90933e4369e15
-
Size
666KB
-
MD5
ee0a5a1d1527ed56ea17cc1140f2d897
-
SHA1
17697729627fd8890312b18a82c6e5e804a1c625
-
SHA256
1d52fc42be9aa3405344ce775be99598c4e02200c74e8c9f23f90933e4369e15
-
SHA512
875a5f876a1709114bcd5c2e90b70ae1f55ff1285dbe04d139de2a6229e3688e9e875112acb4e70e972555ac53a5ab16df002f738cf8ed16150470d807e92655
-
SSDEEP
12288:W72wj6BRiMW410HHYjN9Hm+SBxny3ojIGoon81Eo/ddixdSrjyUK4kUXm6aLJLbp:VCM3045pV2dKd1onS/e3SrjyqkUXsNVv
Malware Config
Signatures
-
resource yara_rule static1/unpack001/WAVEPAD/Keygen/Wavepad Sound Editor 4.24- Keygen.exe upx
Files
-
1d52fc42be9aa3405344ce775be99598c4e02200c74e8c9f23f90933e4369e15.zip
-
WAVEPAD/Keygen/Thumbs.db
-
WAVEPAD/Keygen/Wavepad Sound Editor 4.24- Keygen.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
WAVEPAD/READ ME TO REGISTER.txt
-
WAVEPAD/WavepadSoundEditor.4.24.exe.exe windows x86
e39768ed4512f9091ef47c4b8829a333
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupIterateCabinetA
ole32
CoUninitialize
CoInitializeEx
shell32
ShellExecuteExA
user32
wsprintfA
kernel32
GetStartupInfoA
lstrcpyA
GetModuleHandleA
DeleteFileA
GetTempPathA
GetModuleFileNameA
FindResourceA
WriteFile
CloseHandle
WaitForSingleObject
ExitProcess
SizeofResource
LockResource
GetLastError
LoadResource
CreateFileA
Sections
.rdata Size: 1024B - Virtual size: 764B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 805B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 551KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE