Static task
static1
Behavioral task
behavioral1
Sample
ee46f6dd7264780d7f1ca5afe460288f12fb071ca40b25874303e72c5ba7a031.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee46f6dd7264780d7f1ca5afe460288f12fb071ca40b25874303e72c5ba7a031.exe
Resource
win10v2004-20220812-en
General
-
Target
ee46f6dd7264780d7f1ca5afe460288f12fb071ca40b25874303e72c5ba7a031
-
Size
320KB
-
MD5
04aa0b2e2639fc7f2861394d966e032b
-
SHA1
63ad7231cfa3f8859dc850ff1a321de9908f029b
-
SHA256
ee46f6dd7264780d7f1ca5afe460288f12fb071ca40b25874303e72c5ba7a031
-
SHA512
bd6da11a711264f6443ea3ad8e2b1b1fe5ee12de171b54cd649e30fdbd0c771387cd2af43f6a41e0199bd995119d5e503f449857ba6040dd0e8ce582d923984d
-
SSDEEP
6144:SGE0w1cL34Kc1YIRoNdqaA3+1kiR1C8NoiTQtr9stbk:STqUcNA3+1kiR1C8Ngl90k
Malware Config
Signatures
Files
-
ee46f6dd7264780d7f1ca5afe460288f12fb071ca40b25874303e72c5ba7a031.exe windows x86
9abcd34cfc8df637fdaa80070e6e237b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
sndPlaySoundA
mixerGetLineInfoA
mixerGetControlDetailsA
mixerSetControlDetails
mixerGetLineControlsA
kernel32
SetThreadExecutionState
GetLocalTime
GetPrivateProfileIntA
WinExec
GetPrivateProfileStructA
GetDateFormatA
WritePrivateProfileStructA
CloseHandle
CreateThread
GetTimeFormatA
Beep
CreateDirectoryA
SetCurrentDirectoryA
RemoveDirectoryA
Sleep
DeleteFileA
CopyFileA
GetWindowsDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
MoveFileA
CreateFileA
CompareStringW
CompareStringA
SetEnvironmentVariableA
LCMapStringW
SetStdHandle
SetEndOfFile
LoadLibraryA
GetOEMCP
LCMapStringA
HeapAlloc
HeapFree
GetACP
FindFirstFileA
FindNextFileA
GetLastError
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
GetModuleHandleA
GetStartupInfoA
GetFileAttributesA
GetVersion
ExitProcess
GetCommandLineA
GetEnvironmentVariableA
GetVersionExA
GetModuleFileNameA
HeapCreate
VirtualFree
HeapDestroy
GetCPInfo
FlushFileBuffers
VirtualAlloc
RaiseException
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetProcAddress
WriteFile
UnhandledExceptionFilter
ReadFile
FreeEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsA
GetEnvironmentStringsW
SetHandleCount
GetEnvironmentStrings
GetFileType
RtlUnwind
GetStdHandle
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetFilePointer
GetTimeZoneInformation
msvfw32
DrawDibOpen
DrawDibDraw
DrawDibClose
user32
RegisterClassExA
InvalidateRect
LoadCursorA
SendMessageA
GetWindowLongA
GetDlgItem
CreateWindowExA
DefWindowProcA
DestroyWindow
EndDialog
SetWindowLongA
SetTimer
ShowWindow
MoveWindow
PostQuitMessage
KillTimer
OffsetRect
GetClientRect
SetRect
DrawTextA
InflateRect
UpdateWindow
SetWindowPos
LoadIconA
FindWindowA
GetMessageA
SetWindowTextA
CheckMenuRadioItem
CreatePopupMenu
AppendMenuA
CharLowerA
TrackPopupMenu
SetCursor
CopyRect
IsWindowVisible
GetDC
BringWindowToTop
ReleaseDC
MessageBeep
IsDialogMessageA
SetForegroundWindow
PeekMessageA
GetParent
TranslateMessage
DispatchMessageA
EnableWindow
SetFocus
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
IsDlgButtonChecked
DialogBoxParamA
SendDlgItemMessageA
SetDlgItemTextA
CreateDialogParamA
MessageBoxA
LoadBitmapA
ReleaseCapture
GetWindowRect
SetCapture
FillRect
GetSysColor
PtInRect
PostMessageA
wsprintfA
FrameRect
gdi32
SetTextColor
GetObjectA
LineTo
MoveToEx
GetStockObject
CreatePen
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
BitBlt
EndDoc
DeleteDC
StartPage
StartDocA
EndPage
TextOutA
CreateFontA
SetBkMode
Ellipse
GetDeviceCaps
SetAbortProc
SetBkColor
StretchDIBits
comdlg32
GetSaveFileNameA
GetOpenFileNameA
PrintDlgA
comctl32
PropertySheetA
ord17
InitCommonControlsEx
ImageList_Create
ImageList_Add
dvr2ui
LoadImageDll
DrawTextOutlineEnhance
DrawClock1
OpenUI
InitDrawModelsLogos
CloseUI
TabChange
GetHue
DrawPtzButtonEnable
TermDrawModelsLogos
SetBackGround
UpdateSearchClock
GetHddStat
DrawPtzButtonDisable
ScrollHitTest
ScrollHitTest1
ButtonHitTest
MoveDlg
FileReadEventLog
FileReadEventLogEnd
FileDeleteEventLog
FileAllDeleteEventLog
RDispBoxDrawReplay
RFDispBoxDrawReplay
RDispBoxDraw
RFDispBoxDraw
DrawImageLogos
DrawPlayMode
DrawConsoleMode
EnableAlarm
DrawPtzLightButton
DrawPtzAutoButton
CFDispBoxDrawCapture
CDispBoxDrawCapture
SetBrightness
SetContrast
SetSaturation
DrawPushButtonDisable
DrawAdjustButtonDisable
SetSenSorStat
SetAlarmStat
SetMotionStat
CDispBoxDraw
CFDispBoxDraw
DrawTextOutlineOSD
DrawTextOutlineTransOSD
GetEventDirName
AddEvent
DrawAllButtonDisable
DrawAllButton
FontChange
GetCurrentPath
CreateMemoryBitmap
BltAndDeleteMemoryBitmap
StringLoad
CenterDlg
DrawNetWorkDisable
DrawWebCamDisable
DrawSelectCamera
DrawAutoSwitchingButton
DrawEmapDisable
GetCurTime
GetBrightness
GetContrast
GetSaturation
RemoteUiOnCheck
EnableCamera
SetRecordingStat
SetHue
dvr2kern
ExitAviWriterMode
TermOverlay
InitOverlay
StopAviWriter
EnterAviWriterMode
StartAviWriter
IsOverlaySupported
ActivateOverlay
EnableFastBackwardPlay
SetRemoteBufferingUnit
StopRemoteCaptureImage
Logout
RequestRemoteProc
GetLastDibFrameEx
SetDisplayMode
EnableDibData
DisableDibData
SetActiveAudioChannel
StartRemoteCaptureImage
GetLastDibFrame
play
Login
TermSoundPlay
SetMinute
SetDate
DeletePlayer
CreatePlayer
IsSoundCardInstalled
InitSoundPlay
SetMonth
LockDayTimeTable
ClearOverlayScreen
SetPlayerSharpBlur
SetPlayerBrightness
UnlockDayTimeTable
MoveOverlay
imglib
CleanUpImageBuffer
LoadBmp
InsertWatermark
LoadJpg
SaveJpg
SaveBmp
keypad
CreateKeypad
Sections
.text Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE