Static task
static1
Behavioral task
behavioral1
Sample
74aef2f419e705ebd8139024a2715c97b72619502e804e6aabeaa7414cb766ca.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
74aef2f419e705ebd8139024a2715c97b72619502e804e6aabeaa7414cb766ca.exe
Resource
win10v2004-20221111-en
General
-
Target
74aef2f419e705ebd8139024a2715c97b72619502e804e6aabeaa7414cb766ca
-
Size
472KB
-
MD5
5460113722a8266a86734b3283991920
-
SHA1
741308a9ea26c5e14935e036a36225aa4f219132
-
SHA256
74aef2f419e705ebd8139024a2715c97b72619502e804e6aabeaa7414cb766ca
-
SHA512
d63690f0c896b9ab78153c96834bc375455bf16d8373bd72354173f7d535f2c5276f7481d8e70761bd9b2312f93553b582f707b85e769ffcbf6d10f846713a33
-
SSDEEP
12288:GmNQoc2wgN+SnjAkv1DpZeED4m7hoaiRsQ2pGgHx+i:Gm+otN+SnJVZXLhotszEgHx+i
Malware Config
Signatures
Files
-
74aef2f419e705ebd8139024a2715c97b72619502e804e6aabeaa7414cb766ca.exe windows x86
bb9aef6aaa0744a890e5b166d28357e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
wcslen
wcstombs
atoi
wcscpy
_strupr
_beginthreadex
memcpy
calloc
_CIacos
printf
_CIpow
__dllonexit
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
mbstowcs
_controlfp
vsprintf
exit
fopen
fwrite
fclose
strrchr
_except_handler3
free
strcmp
strcpy
malloc
memcmp
memset
strlen
_ftol
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
??1type_info@@UAE@XZ
_CxxThrowException
_access
rand
strncat
_chkesp
strcat
kernel32
GetModuleHandleA
lstrlenW
WideCharToMultiByte
GetStartupInfoA
LocalFree
GetExitCodeThread
TerminateThread
CreateThread
lstrlenA
MultiByteToWideChar
GetLastError
InterlockedDecrement
SetEvent
WaitForSingleObject
LoadLibraryA
GetProcAddress
CloseHandle
Sleep
CreateEventA
user32
IsWindow
SendMessageA
CreateWindowExA
PostThreadMessageA
GetMessageA
ws2_32
WSAStartup
setsockopt
connect
getsockname
gethostname
send
select
closesocket
recv
ntohs
socket
gethostbyname
htons
WSACleanup
msvcp60
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
ole32
OleRun
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
SysFreeString
SetErrorInfo
VariantChangeType
VariantInit
SysAllocString
CreateErrorInfo
GetErrorInfo
msvfw32
ICSendMessage
winmm
waveInPrepareHeader
waveInUnprepareHeader
waveInClose
waveOutPrepareHeader
waveOutWrite
waveInOpen
waveInReset
waveInStart
waveOutUnprepareHeader
waveOutOpen
waveInAddBuffer
waveOutClose
Sections
.text Size: 308KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sska Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE