?GetRegistrationInformation@@YGXPAD@Z
Static task
static1
Behavioral task
behavioral1
Sample
cb2fb9ef215d70fe67fdd5a0d2fe8c89c5e38b016dd21c4ea3d1fa36ad2504b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb2fb9ef215d70fe67fdd5a0d2fe8c89c5e38b016dd21c4ea3d1fa36ad2504b1.exe
Resource
win10v2004-20221111-en
General
-
Target
cb2fb9ef215d70fe67fdd5a0d2fe8c89c5e38b016dd21c4ea3d1fa36ad2504b1
-
Size
1.9MB
-
MD5
fc63bb0616ed006ed40e004e14ea462f
-
SHA1
81283b83e8edbc7d9fa0486b513780fc120d3ca4
-
SHA256
cb2fb9ef215d70fe67fdd5a0d2fe8c89c5e38b016dd21c4ea3d1fa36ad2504b1
-
SHA512
753c517bb9eaf36879e48525fd9a23a1166640f45237585f7400358ed4722646040f8a7b9b111a0863071041a4ffd9689ff03478343d0807120f2b8a8d0638f9
-
SSDEEP
24576:nZdoFy+DWXt9P6nc4jqqOCcoZlkM3to5LifQaeWAp3X9hyxOmrBtYK+tkC7NXFbO:ZdoFyXScXChc0AZXiORZXy0Wh7fL
Malware Config
Signatures
Files
-
cb2fb9ef215d70fe67fdd5a0d2fe8c89c5e38b016dd21c4ea3d1fa36ad2504b1.exe windows x86
154ff730bd1c2a1469a0cf28cb3304c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadStringA
DispatchMessageA
GetCursorPos
ScreenToClient
GetDesktopWindow
TranslateMessage
PeekMessageA
GetWindowLongA
SetWindowLongA
IsIconic
SetCursor
PostQuitMessage
DefWindowProcA
PostMessageA
GetClientRect
MessageBoxA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetWindowRect
SetWindowPos
ShowWindow
UpdateWindow
ole32
CoCreateGuid
gdi32
GetStockObject
shell32
ShellExecuteA
winmm
timeGetTime
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
bass
BASS_SampleLoad
BASS_StreamGetLength
BASS_ChannelBytes2Seconds
BASS_ChannelGetInfo
BASS_ChannelIsActive
BASS_ChannelGetData
BASS_ChannelGetPosition
BASS_SamplePlay
BASS_SamplePlayEx
BASS_SampleGetInfo
BASS_SampleSetInfo
BASS_Init
BASS_Free
BASS_Start
BASS_Pause
BASS_ChannelStop
BASS_StreamCreateFile
BASS_StreamPlay
BASS_ChannelSetAttributes
BASS_StreamFree
kernel32
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
IsBadWritePtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
GetTimeZoneInformation
GetACP
GetOEMCP
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsBadReadPtr
GetCPInfo
GetPrivateProfileStringA
GetCurrentDirectoryA
WritePrivateProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
Sleep
DeleteFileA
CloseHandle
ReadFile
CreateFileA
WriteFile
IsProcessorFeaturePresent
GetVersionExA
GetModuleHandleA
GetFileSize
MapViewOfFile
CreateFileMappingA
CreateFileW
WideCharToMultiByte
UnmapViewOfFile
RtlUnwind
RaiseException
MoveFileA
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
CreateDirectoryA
RemoveDirectoryA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
HeapAlloc
SetFilePointer
SetUnhandledExceptionFilter
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
MultiByteToWideChar
LCMapStringA
LCMapStringW
FlushFileBuffers
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
Exports
Exports
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 56KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ