Static task
static1
Behavioral task
behavioral1
Sample
a1b775b07811f268e06573445b236972c4f637f468c286a7e9a86120c77fba56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1b775b07811f268e06573445b236972c4f637f468c286a7e9a86120c77fba56.exe
Resource
win10v2004-20221111-en
General
-
Target
a1b775b07811f268e06573445b236972c4f637f468c286a7e9a86120c77fba56
-
Size
166KB
-
MD5
b173e118615a1a915f6bf80cdc039291
-
SHA1
db50c6652825bfc35fd9cc977b2523469a80fdd4
-
SHA256
a1b775b07811f268e06573445b236972c4f637f468c286a7e9a86120c77fba56
-
SHA512
daab4e5f9596535cda39327dc1cbf39fa36e152db8a8b069aa774b71eeffb0c8e8149c17066dab02043bc46f8c44669d3c512652804e09e109645af3b2e882fb
-
SSDEEP
3072:+pwsHhTSgbCrwltqBYmAhUp1WKCv2FpDD4+XZPLEOiSKyO/AFk0:6wIuf8kJzsd2FdDbpPIO9T6
Malware Config
Signatures
Files
-
a1b775b07811f268e06573445b236972c4f637f468c286a7e9a86120c77fba56.exe windows x86
7be0c8a55b1e073e44d8f0ee0b63c533
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
avifil32
AVIFileRelease
AVIStreamGetFrameOpen
AVIFileOpenA
AVIFileCreateStreamA
AVIStreamGetFrameClose
AVIFileGetStream
AVIFileInit
AVISaveOptions
AVIStreamWrite
AVIStreamGetFrame
AVIStreamRelease
AVIStreamInfoA
AVIStreamSetFormat
AVIMakeCompressedStream
msvfw32
ICOpen
ICDecompress
ICSendMessage
ICClose
user32
wsprintfA
DefWindowProcA
GetWindowLongA
GetClassLongA
InvalidateRect
GetClientRect
SetWindowLongA
CreateWindowExA
DispatchMessageA
ReleaseCapture
LoadIconA
MessageBoxA
GetWindowRect
ScreenToClient
SubtractRect
MoveWindow
OffsetRect
TranslateMessage
SetFocus
GetKeyState
SetWindowTextA
IsWindow
ShowWindow
EndPaint
GetMessageA
CallWindowProcA
DestroyWindow
UpdateWindow
SetCursor
GetFocus
RegisterClassA
wvsprintfA
PeekMessageA
LoadCursorA
SendMessageA
BeginPaint
SetCapture
gdi32
SelectObject
DeleteObject
FillRgn
CreateCompatibleDC
CreateDIBSection
BitBlt
GetCurrentObject
SetDIBitsToDevice
GetStockObject
GetObjectA
CombineRgn
StretchDIBits
DeleteDC
CreateRectRgn
SetDIBColorTable
SetStretchBltMode
StretchBlt
avicap32
capCreateCaptureWindowA
capGetDriverDescriptionA
kernel32
CreateFileA
CreateFileMappingA
QueryDosDeviceW
LocalFree
GetProcessId
ReadFile
lstrlenA
DisableThreadLibraryCalls
WriteFile
SetFilePointer
UnmapViewOfFile
Sleep
EnumResourceTypesA
GetFileSize
GlobalAlloc
ExitProcess
GlobalSize
MapViewOfFile
CloseHandle
ProcessIdToSessionId
LocalAlloc
GlobalFree
comctl32
CreateToolbarEx
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ