Static task
static1
Behavioral task
behavioral1
Sample
d76be5d8b5a5c705bc3fd1a2c2fc6328d2500ee8b9b4f943bf0c20bf9a95c96a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d76be5d8b5a5c705bc3fd1a2c2fc6328d2500ee8b9b4f943bf0c20bf9a95c96a.exe
Resource
win10v2004-20220901-en
General
-
Target
d76be5d8b5a5c705bc3fd1a2c2fc6328d2500ee8b9b4f943bf0c20bf9a95c96a
-
Size
357KB
-
MD5
e6e5306cc79d18add87e73389d5fa88e
-
SHA1
4953bb7dc5809eeca4bd9f6f54108bce88ecce30
-
SHA256
d76be5d8b5a5c705bc3fd1a2c2fc6328d2500ee8b9b4f943bf0c20bf9a95c96a
-
SHA512
cb9b6bee1d8a5addc0546fce15878f159b6c4c38dc06b82d16fd962eb4669966682f5c553c5c78b9ae37fd2429c9ea0caaddad3ec893522d91c7f904c208cb70
-
SSDEEP
6144:yuqgnRhPLs6r8YiMMCMjysQhYCG7L5Z4zytbLq:yuvReyEyL2734zkG
Malware Config
Signatures
Files
-
d76be5d8b5a5c705bc3fd1a2c2fc6328d2500ee8b9b4f943bf0c20bf9a95c96a.exe windows x86
c1bb84fb62ecffa3b7d9bba458b7f096
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dplayx
ord4
ddraw
DirectDrawCreate
dsound
ord1
dinput
DirectInputCreateA
comctl32
ord17
kernel32
lstrcpyA
GlobalLock
GetComputerNameA
LocalFree
LocalAlloc
GlobalUnlock
GlobalHandle
GetTickCount
GlobalFree
GetDriveTypeA
InterlockedExchange
WaitForSingleObject
SetEvent
ExitThread
WaitForMultipleObjects
_lopen
_lread
_lclose
OutputDebugStringA
GetModuleHandleA
FindResourceA
LoadResource
GetDiskFreeSpaceA
CreateThread
WriteFile
ReadFile
CreateFileA
CloseHandle
CreateEventA
GetLastError
LockResource
GetSystemDefaultLCID
GlobalAlloc
HeapSize
GetProcAddress
HeapAlloc
HeapFree
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
GetFullPathNameA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
HeapReAlloc
GetEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetACP
GetOEMCP
GetCPInfo
HeapCreate
VirtualFree
HeapDestroy
SetStdHandle
VirtualAlloc
RtlUnwind
LCMapStringW
GetFileAttributesA
LCMapStringA
CreateProcessA
GetStringTypeA
GetExitCodeProcess
RaiseException
FlushFileBuffers
LoadLibraryA
GetStringTypeW
user32
DeferWindowPos
EndDeferWindowPos
ShowWindow
PeekMessageA
ClientToScreen
SetDlgItemInt
SendMessageA
DispatchMessageA
FindWindowA
EnableWindow
SendDlgItemMessageA
DestroyWindow
GetParent
GetMessageA
SetDlgItemTextA
KillTimer
SetTimer
EndDialog
PostMessageA
DialogBoxParamA
LoadImageA
TranslateMessage
BeginDeferWindowPos
SystemParametersInfoA
LoadIconA
UpdateWindow
CreateWindowExA
SetWindowLongA
GetMenu
LoadCursorA
PostQuitMessage
CheckMenuItem
AdjustWindowRectEx
SetWindowPos
DefWindowProcA
EnableMenuItem
DrawMenuBar
GetSubMenu
TrackPopupMenu
SetMenuItemInfoA
BeginPaint
EndPaint
SetCursorPos
GetCursorPos
GetKeyState
GetWindowLongA
SetCursor
GetDC
OffsetRect
SetRect
CopyRect
GetDlgItemInt
IsDlgButtonChecked
CheckDlgButton
wsprintfA
LoadBitmapA
GetDlgItemTextA
IsWindowEnabled
CreateDialogParamA
GetClientRect
GetDlgItem
LoadMenuA
RegisterClassA
gdi32
DeleteDC
GetObjectA
SelectObject
CreateCompatibleDC
SetPixel
GetPixel
GetTextExtentPoint32A
GetStockObject
DeleteObject
StretchBlt
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
GetUserNameA
RegCreateKeyExA
RegSetValueExA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
winmm
mmioDescend
auxGetVolume
waveOutGetVolume
waveOutSetVolume
auxSetVolume
waveOutGetNumDevs
waveOutGetDevCapsA
auxGetNumDevs
auxGetDevCapsA
timeGetTime
timeKillEvent
timeSetEvent
mmioOpenA
mmioRead
mmioAscend
mmioSeek
mmioClose
mciSendCommandA
Sections
.text Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ