Static task
static1
Behavioral task
behavioral1
Sample
5851cc0b4e6ad12d99477073b63b763a46d290404cfe202032d3ff1bd506004c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5851cc0b4e6ad12d99477073b63b763a46d290404cfe202032d3ff1bd506004c.exe
Resource
win10v2004-20220901-en
General
-
Target
5851cc0b4e6ad12d99477073b63b763a46d290404cfe202032d3ff1bd506004c
-
Size
359KB
-
MD5
1d5d5b4d23fdd8dca157964bfe2cace5
-
SHA1
cb40192f674191a6e6f28861052acac4a2ad9292
-
SHA256
5851cc0b4e6ad12d99477073b63b763a46d290404cfe202032d3ff1bd506004c
-
SHA512
f2ad2c303d170d04774d94e8be63567b0c3f334a0e97938a50c78dc30a932468e9f3c5220178fe1f649bdc5d958993a0560e62fd4cbc1281f9df053cfcba0af4
-
SSDEEP
6144:CJyIceUFWbpjeG1AQejeS467XJniHovtVxE0esULGQ2XMGsTFdsOg:BX+PAQaeS4mXViHkXuKZsTF
Malware Config
Signatures
Files
-
5851cc0b4e6ad12d99477073b63b763a46d290404cfe202032d3ff1bd506004c.exe windows x86
cf24979bb44983901b010e6fc05bf1fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateMutexW
CreateEventA
VerLanguageNameW
ReadConsoleOutputCharacterW
ExitProcess
EnumResourceNamesW
SetThreadContext
GetCompressedFileSizeA
MoveFileWithProgressW
GetCommProperties
GetVersionExA
SetFileAttributesA
EnumDateFormatsExA
GetEnvironmentStringsW
SetVolumeMountPointW
CreateMailslotA
CreateMailslotW
GetVersionExW
TlsSetValue
OutputDebugStringA
SetLastError
SetConsoleTitleA
MoveFileExW
IsDebuggerPresent
GetPrivateProfileSectionW
GetBinaryTypeA
GetTapePosition
SetThreadUILanguage
_lclose
GetDiskFreeSpaceW
GetShortPathNameA
LoadLibraryA
GetVolumePathNameA
GetProcessHeap
ExpungeConsoleCommandHistoryA
VirtualAlloc
EndUpdateResourceW
SetConsoleOutputCP
SetTapeParameters
InitializeCriticalSection
SetHandleCount
IsValidLocale
SetConsolePalette
GetPrivateProfileIntW
FillConsoleOutputAttribute
msasn1
ASN1BERDecObjectIdentifier2
ASN1BERDecChar32String
ASN1BERDecObjectIdentifier
ASN1utctime_cmp
ASN1open_cmp
ASN1BEREncZeroMultibyteString
ASN1BEREoid2DotVal
ASN1intx_setuint32
ASN1BERDecLength
ASN1CEREncBitString
ASN1charstring_cmp
ASN1BEREncChar32String
ASN1BERDecNotEndOfContents
ASN1BEREncU32
ASN1BERDecU16Val
ASN1charstring_free
ASN1BERDecFlush
ASN1BERDecChar16String
ASN1BERDecSkip
ASN1_CloseModule
ASN1BERDecSXVal
hhsetup
?SetExTitlePtr@CFolder@@QAEXPAVCExTitle@@@Z
?GetLangId@CCollection@@QAEGPBG@Z
?FindLocation@CCollection@@QAEPAVCLocation@@PBDPAI@Z
?Save@CCollection@@QAEKXZ
?SetNextFolder@CFolder@@QAEXPAV1@@Z
?SetPath@CLocation@@QAEXPBD@Z
?DeleteChildren@CCollection@@AAEXPAPAVCFolder@@@Z
?AddLocationHistory@CTitle@@QAEKKPBG00PBVCLocation@@00H@Z
?GetRefTitleCount@CCollection@@QAEKXZ
?GetVolume@CLocation@@QAEPADXZ
?SetLanguage@CTitle@@QAEXG@Z
?HandleTitle@CCollection@@AAEKPAVCParseXML@@PAD@Z
?GetCollectionFileName@CCollection@@QAEPBDXZ
?GetLangId@CCollection@@QAEGPBD@Z
?AddFolder@CCollection@@QAEPAVCFolder@@PBGKPAKG@Z
?bIsVisable@CFolder@@QAEHXZ
?AddLocation@CCollection@@QAEPAVCLocation@@PBD000PAK@Z
?GetId@CLocation@@QBEPADXZ
winmm
joySetThreshold
mmioStringToFOURCCA
waveOutPause
sndPlaySoundA
mmioStringToFOURCCW
auxGetVolume
midiInGetErrorTextA
auxGetNumDevs
waveOutReset
mciDriverYield
mixerGetControlDetailsA
mixerGetLineInfoA
midiStreamClose
WOW32ResolveMultiMediaHandle
mmGetCurrentTask
mixerGetNumDevs
midiOutCacheDrumPatches
mciSendCommandW
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 421KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ