Static task
static1
Behavioral task
behavioral1
Sample
249211f1b5de54473fa37d29d2a11143d7cdb2b1ea30279f99c733750f0210f0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
249211f1b5de54473fa37d29d2a11143d7cdb2b1ea30279f99c733750f0210f0.exe
Resource
win10v2004-20221111-en
General
-
Target
249211f1b5de54473fa37d29d2a11143d7cdb2b1ea30279f99c733750f0210f0
-
Size
1.4MB
-
MD5
e2c3a34081957fdc8a74767afdbe5bfc
-
SHA1
83138a3780571d77c607d6ccffe9fafe72a5524c
-
SHA256
249211f1b5de54473fa37d29d2a11143d7cdb2b1ea30279f99c733750f0210f0
-
SHA512
1409330e30987b018b186a4ae26c7c2299a41edaa6c70abb394c360bf20e7223f368328f7ffc6757477992b3ca0fc07f58e33c8291e8275bb566d386acdca4b8
-
SSDEEP
24576:2dG3bIv5XN9pZpiV1msvpTMiNViywxRq:XIh99b8LTzU9
Malware Config
Signatures
Files
-
249211f1b5de54473fa37d29d2a11143d7cdb2b1ea30279f99c733750f0210f0.exe windows x86
99631dcc7fd7e6d5c1dcba4b8c18ef81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
kernel32
WideCharToMultiByte
CompareStringW
IsBadReadPtr
GetSystemInfo
GetTickCount
Sleep
WriteFile
SetFilePointer
VirtualQuery
MapViewOfFile
UnmapViewOfFile
GetFileSize
GetFileSizeEx
ReadFile
FlushViewOfFile
SetEndOfFile
FindClose
FlushFileBuffers
IsBadWritePtr
SetLastError
GetFullPathNameW
FindFirstFileW
CreateFileMappingW
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryW
LockResource
GetSystemTime
GetModuleFileNameA
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetStartupInfoW
GetModuleHandleA
CreateThread
ExitThread
HeapReAlloc
RtlUnwind
ExitProcess
LoadLibraryA
LCMapStringW
LCMapStringA
GetVersionExA
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
HeapSize
UnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
GetTempFileNameW
GetTempPathW
GetSystemTimeAsFileTime
SetFileTime
DeleteFileW
CreateFileW
ReleaseMutex
GetStringTypeA
GetStringTypeW
IsBadCodePtr
GetOEMCP
GetCPInfo
SetStdHandle
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
CreateMutexW
SetEvent
HeapDestroy
CreateEventW
lstrcmpW
ResumeThread
CompareStringA
GetExitCodeThread
CloseHandle
WaitForSingleObject
lstrcpynA
lstrlenA
HeapFree
GetCurrentDirectoryW
SetErrorMode
GetFileAttributesW
lstrcpynW
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetLastError
GetModuleFileNameW
GetModuleHandleW
lstrcpyW
InterlockedIncrement
GetCurrentThreadId
lstrlenW
InterlockedDecrement
GetProcessHeap
HeapAlloc
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetEnvironmentVariableA
VirtualProtect
HeapCreate
user32
GetDC
FrameRect
SetCursor
GetNextDlgTabItem
GetFocus
IsChild
EndPaint
IsWindowEnabled
DrawEdge
GetSystemMetrics
DrawFocusRect
BeginPaint
ClientToScreen
ReleaseCapture
SetCapture
GetDlgCtrlID
GetCapture
ReleaseDC
SetTimer
DrawTextW
IsRectEmpty
wsprintfW
EnableWindow
IsWindowVisible
InvalidateRect
GetClassNameW
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExW
ScrollDC
UpdateWindow
ScreenToClient
RemoveMenu
PtInRect
MonitorFromPoint
GetMonitorInfoW
TrackPopupMenuEx
CreatePopupMenu
GetMenuItemCount
AppendMenuW
OffsetRect
IntersectRect
CopyRect
EqualRect
UnionRect
MessageBoxA
KillTimer
GetMenuItemInfoW
DestroyMenu
MessageBeep
LoadStringA
SetFocus
PostQuitMessage
GetActiveWindow
SendMessageW
CharLowerW
CallWindowProcW
GetParent
GetWindow
GetWindowRect
SystemParametersInfoW
MapWindowPoints
AdjustWindowRectEx
GetClientRect
SetWindowPos
SetMenu
GetMenu
SetWindowTextW
PostMessageW
GetWindowLongW
TranslateAcceleratorW
IsWindow
MessageBoxW
DefWindowProcW
CharNextW
LoadMenuW
LoadAcceleratorsW
CreateWindowExW
GetClassInfoExW
LoadCursorW
LoadImageW
RegisterClassExW
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
LoadStringW
ShowWindow
SetWindowLongW
wvsprintfW
InflateRect
GetDlgItem
gdi32
CreateSolidBrush
SelectClipRgn
ExcludeClipRect
IntersectClipRect
Ellipse
Rectangle
PatBlt
SetPixel
SetDIBColorTable
SetStretchBltMode
StretchBlt
SetTextCharacterExtra
MoveToEx
LineTo
SetBrushOrgEx
GdiFlush
CreateDIBSection
RectVisible
GetTextExtentPoint32W
GetObjectW
GetStockObject
CreateFontIndirectW
SelectObject
SetBkColor
SetBkMode
SetTextColor
DeleteObject
SetViewportOrgEx
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
BitBlt
CreatePen
SetMapMode
ExtTextOutW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumKeyExW
shell32
SHCreateDirectoryExW
SHGetDesktopFolder
SHBindToParent
ShellExecuteW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
OleUninitialize
OleInitialize
CreateBindCtx
StringFromCLSID
oleaut32
VarUI4FromStr
shlwapi
PathRenameExtensionW
PathCanonicalizeW
PathIsRelativeW
PathIsDirectoryW
StrRetToStrW
comctl32
ImageList_LoadImageW
ImageList_Destroy
_TrackMouseEvent
ImageList_Draw
InitCommonControlsEx
ImageList_GetIconSize
libmpg123-0
mpg123_scan
mpg123_length
mpg123_new
mpg123_open
mpg123_getformat
mpg123_delete
mpg123_exit
mpg123_format
mpg123_seek
mpg123_init
mpg123_format_none
mpg123_read
mpg123_close
mpg123_outblock
Sections
.text Size: 500KB - Virtual size: 499KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 828KB - Virtual size: 826KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ