Static task
static1
Behavioral task
behavioral1
Sample
7de5c9fe0e2fdb7cee6cdcb0b54ae4fc9e8bb318ec3c38c3ab6ee9b2779dd277.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7de5c9fe0e2fdb7cee6cdcb0b54ae4fc9e8bb318ec3c38c3ab6ee9b2779dd277.exe
Resource
win10v2004-20221111-en
General
-
Target
7de5c9fe0e2fdb7cee6cdcb0b54ae4fc9e8bb318ec3c38c3ab6ee9b2779dd277
-
Size
359KB
-
MD5
1f71f9c7e25bdd41de2b8c20b13c3d4c
-
SHA1
aba521ba4769ea001740041dc26df80445176564
-
SHA256
7de5c9fe0e2fdb7cee6cdcb0b54ae4fc9e8bb318ec3c38c3ab6ee9b2779dd277
-
SHA512
d62e7527805d5b1882af54a4df77e56e5eb2853f0831c7ea7370d7535b91c5f5a9391669e97e2d947b81ecaf9137aaa7be266b08ddfe95ce73f14d178e44317e
-
SSDEEP
6144:CJyIceUFWbpjeG1AQejeS467XJniHovtVxE0esULGQ2XMGsTFdsOg6:BX+PAQaeS4mXViHkXuKZsTFJ
Malware Config
Signatures
Files
-
7de5c9fe0e2fdb7cee6cdcb0b54ae4fc9e8bb318ec3c38c3ab6ee9b2779dd277.exe windows x86
cf24979bb44983901b010e6fc05bf1fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateMutexW
CreateEventA
VerLanguageNameW
ReadConsoleOutputCharacterW
ExitProcess
EnumResourceNamesW
SetThreadContext
GetCompressedFileSizeA
MoveFileWithProgressW
GetCommProperties
GetVersionExA
SetFileAttributesA
EnumDateFormatsExA
GetEnvironmentStringsW
SetVolumeMountPointW
CreateMailslotA
CreateMailslotW
GetVersionExW
TlsSetValue
OutputDebugStringA
SetLastError
SetConsoleTitleA
MoveFileExW
IsDebuggerPresent
GetPrivateProfileSectionW
GetBinaryTypeA
GetTapePosition
SetThreadUILanguage
_lclose
GetDiskFreeSpaceW
GetShortPathNameA
LoadLibraryA
GetVolumePathNameA
GetProcessHeap
ExpungeConsoleCommandHistoryA
VirtualAlloc
EndUpdateResourceW
SetConsoleOutputCP
SetTapeParameters
InitializeCriticalSection
SetHandleCount
IsValidLocale
SetConsolePalette
GetPrivateProfileIntW
FillConsoleOutputAttribute
msasn1
ASN1BERDecObjectIdentifier2
ASN1BERDecChar32String
ASN1BERDecObjectIdentifier
ASN1utctime_cmp
ASN1open_cmp
ASN1BEREncZeroMultibyteString
ASN1BEREoid2DotVal
ASN1intx_setuint32
ASN1BERDecLength
ASN1CEREncBitString
ASN1charstring_cmp
ASN1BEREncChar32String
ASN1BERDecNotEndOfContents
ASN1BEREncU32
ASN1BERDecU16Val
ASN1charstring_free
ASN1BERDecFlush
ASN1BERDecChar16String
ASN1BERDecSkip
ASN1_CloseModule
ASN1BERDecSXVal
hhsetup
?SetExTitlePtr@CFolder@@QAEXPAVCExTitle@@@Z
?GetLangId@CCollection@@QAEGPBG@Z
?FindLocation@CCollection@@QAEPAVCLocation@@PBDPAI@Z
?Save@CCollection@@QAEKXZ
?SetNextFolder@CFolder@@QAEXPAV1@@Z
?SetPath@CLocation@@QAEXPBD@Z
?DeleteChildren@CCollection@@AAEXPAPAVCFolder@@@Z
?AddLocationHistory@CTitle@@QAEKKPBG00PBVCLocation@@00H@Z
?GetRefTitleCount@CCollection@@QAEKXZ
?GetVolume@CLocation@@QAEPADXZ
?SetLanguage@CTitle@@QAEXG@Z
?HandleTitle@CCollection@@AAEKPAVCParseXML@@PAD@Z
?GetCollectionFileName@CCollection@@QAEPBDXZ
?GetLangId@CCollection@@QAEGPBD@Z
?AddFolder@CCollection@@QAEPAVCFolder@@PBGKPAKG@Z
?bIsVisable@CFolder@@QAEHXZ
?AddLocation@CCollection@@QAEPAVCLocation@@PBD000PAK@Z
?GetId@CLocation@@QBEPADXZ
winmm
joySetThreshold
mmioStringToFOURCCA
waveOutPause
sndPlaySoundA
mmioStringToFOURCCW
auxGetVolume
midiInGetErrorTextA
auxGetNumDevs
waveOutReset
mciDriverYield
mixerGetControlDetailsA
mixerGetLineInfoA
midiStreamClose
WOW32ResolveMultiMediaHandle
mmGetCurrentTask
mixerGetNumDevs
midiOutCacheDrumPatches
mciSendCommandW
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 421KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ