Static task
static1
Behavioral task
behavioral1
Sample
a18b6830a80b3f5c20edf6b79a6fdc1294f7af8d212de8216712634b88d16649.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a18b6830a80b3f5c20edf6b79a6fdc1294f7af8d212de8216712634b88d16649.exe
Resource
win10v2004-20221111-en
General
-
Target
a18b6830a80b3f5c20edf6b79a6fdc1294f7af8d212de8216712634b88d16649
-
Size
175KB
-
MD5
ad9158fe50329e8fb4bd8a13d5a83791
-
SHA1
c24b433a4bd72516c70724f5e97139ef410ba84d
-
SHA256
a18b6830a80b3f5c20edf6b79a6fdc1294f7af8d212de8216712634b88d16649
-
SHA512
cc4357476cd4de78c54d09ae5aced7f0791bb9627424cc95b3667504db384cba5346205c22b71134b497a2ee849cf3157f1c8beb8a4410a905994c7e71da50eb
-
SSDEEP
3072:f9+RSGOXy4unZYnjVAJROokegabcXUuHD6658/GJeLBszSfM4pHIxdAMQPhEZZ:ihBZEV7pbkuHe6jJGBsuE4poxlyEv
Malware Config
Signatures
Files
-
a18b6830a80b3f5c20edf6b79a6fdc1294f7af8d212de8216712634b88d16649.exe windows x86
83ca40ad454b0588899271e3380005c6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mciSendCommandW
sndPlaySoundW
kernel32
GetProcessHeap
AddAtomW
TlsGetValue
FlushFileBuffers
GetTempPathW
GetModuleHandleW
TlsSetValue
GetProcAddress
GetConsoleMode
GetVersionExW
UnmapViewOfFile
InterlockedDecrement
CreateFileW
CreateFileMappingA
WriteConsoleW
CreateFileA
GetEnvironmentVariableW
EnumResourceNamesA
GetConsoleCP
GetVersionExA
ExitProcess
TlsAlloc
LoadLibraryExW
TlsFree
IsBadStringPtrW
GetModuleHandleA
HeapFree
MapViewOfFile
GetLastError
InterlockedIncrement
HeapAlloc
SetLastError
Sleep
shlwapi
PathAddBackslashW
setupapi
CM_Get_Depth_Ex
SetupDiGetDeviceRegistryPropertyA
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ