Static task
static1
Behavioral task
behavioral1
Sample
291ae43da9bee010462ac7faf9fe2a6105b6e50e5a7f83450385bb5405614ee4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
291ae43da9bee010462ac7faf9fe2a6105b6e50e5a7f83450385bb5405614ee4.exe
Resource
win10v2004-20220812-en
General
-
Target
291ae43da9bee010462ac7faf9fe2a6105b6e50e5a7f83450385bb5405614ee4
-
Size
173KB
-
MD5
88fff541f8aae0ae4bbe682ce471849e
-
SHA1
cdfbda6fd483acdf5add9f9d2a6a10317ba69013
-
SHA256
291ae43da9bee010462ac7faf9fe2a6105b6e50e5a7f83450385bb5405614ee4
-
SHA512
400eebeb2bc58c24c7cd6a476ec3352776c178c74807f1a400220d39859ade18ebfd84b7e8bc5fd6d8aafb973c5be282b7ae6560e0e926dc3674243890ac4819
-
SSDEEP
3072:0o63ONv0PNRPn11dFoR8NvFbk0xj9qyXsCx2G3XvUWTG+1EdBeaO2OY06XswAyBn:073S2NRmakOj9jsCoCXv3PgUaOjW8oEw
Malware Config
Signatures
Files
-
291ae43da9bee010462ac7faf9fe2a6105b6e50e5a7f83450385bb5405614ee4.exe windows x86
e8fc453fbac50f64278975e0b93c9825
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mciSendCommandA
sndPlaySoundA
shlwapi
PathAddBackslashA
msimg32
AlphaBlend
TransparentBlt
setupapi
InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
GetFullPathNameW
GlobalAddAtomW
GetFullPathNameA
lstrcpyA
ResetEvent
LeaveCriticalSection
EnterCriticalSection
CreateThread
LoadLibraryW
DeleteCriticalSection
SetEvent
GetTimeZoneInformation
OutputDebugStringA
EnumResourceNamesA
GetTickCount
FileTimeToSystemTime
VerLanguageNameA
WaitForSingleObject
IsDBCSLeadByte
GetProcAddress
Sleep
GetTempPathA
InitializeCriticalSection
LoadLibraryA
FreeLibrary
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ