Static task
static1
Behavioral task
behavioral1
Sample
ac4d4d4cdae53305e5c52d6b761f04d96b2176263a1db337df1cf40ef2c4cf4a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ac4d4d4cdae53305e5c52d6b761f04d96b2176263a1db337df1cf40ef2c4cf4a.exe
Resource
win10v2004-20220812-en
General
-
Target
ac4d4d4cdae53305e5c52d6b761f04d96b2176263a1db337df1cf40ef2c4cf4a
-
Size
148KB
-
MD5
c857d344472d1b6d77215becf510b9c9
-
SHA1
3427ab85aa0640791689efffc70f7c4653857c2d
-
SHA256
ac4d4d4cdae53305e5c52d6b761f04d96b2176263a1db337df1cf40ef2c4cf4a
-
SHA512
ce65a3b21c149918dd1cf65efdefc7a59721e2c83bb810948362dc763c0bb05f783078f145ff5bb4ab872d2298eb3f5d0759cbe53f79b7b776eb610c80dd3b22
-
SSDEEP
3072:OjV7pDQpBfM6RQGpzDUoFLQsbSFHTimqwIfMVp5:OZadShrIfMVn
Malware Config
Signatures
Files
-
ac4d4d4cdae53305e5c52d6b761f04d96b2176263a1db337df1cf40ef2c4cf4a.exe windows x86
81c548ba8359e5bd8e7ea6ae82d19278
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetTempPathA
WritePrivateProfileStringA
GetVersion
lstrcpyA
TerminateThread
LockResource
FreeResource
GetPrivateProfileStringA
GetACP
GetPrivateProfileIntA
lstrlenA
LoadLibraryA
CreateThread
CloseHandle
lstrcpynA
Sleep
GetModuleFileNameA
LocalAlloc
GetProcAddress
LocalFree
FindResourceA
DeleteFileA
LoadResource
lstrcatA
lstrcmpiA
FreeLibrary
GetCPInfo
GetStringTypeW
GetStringTypeA
LCMapStringA
LCMapStringW
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapAlloc
HeapReAlloc
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapFree
HeapSize
GetCurrentProcess
TerminateProcess
GetOEMCP
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetFileType
MultiByteToWideChar
user32
IsDlgButtonChecked
LoadBitmapA
SendMessageA
LoadImageA
GetClientRect
GetDC
ReleaseDC
wsprintfA
LoadStringA
MessageBoxA
LoadMenuA
GetSubMenu
DialogBoxParamA
DestroyMenu
SetDlgItemTextA
EnableWindow
CheckDlgButton
CreateWindowExA
SetWindowPos
MapWindowPoints
LoadIconA
SetDlgItemInt
TrackPopupMenu
EnableMenuItem
GetCursorPos
SetFocus
GetDlgItemTextA
GetDlgItemInt
SetTimer
InvalidateRect
KillTimer
FillRect
CheckMenuItem
SetWindowLongA
GetWindowLongA
GetWindowRect
CallWindowProcA
EndPaint
BeginPaint
EndDialog
GetDlgItem
gdi32
SetTextColor
TextOutA
DeleteObject
GetObjectA
CreateSolidBrush
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
DeleteDC
StretchDIBits
StretchBlt
SetStretchBltMode
GetTextExtentPoint32A
comdlg32
GetOpenFileNameA
advapi32
RegEnumKeyA
RegOpenKeyExA
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
avifil32
AVIStreamTimeToSample
AVIFileInit
AVIFileExit
AVIStreamRead
AVIStreamStart
AVIStreamLength
AVIFileOpenA
AVIStreamReadFormat
AVIStreamInfoA
AVIStreamGetFrame
AVIStreamGetFrameOpen
AVIFileGetStream
AVIFileInfoA
AVIFileRelease
AVIStreamGetFrameClose
AVIStreamSampleToTime
comctl32
ord17
CreateToolbarEx
msacm32
acmStreamConvert
acmStreamClose
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
winmm
mciSendStringA
encmpa
ord9
ord3
ord2
ord8
ord1
ord7
ord4
ord6
ord5
encodem1v
ord2
ord3
ord1
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ