Static task
static1
Behavioral task
behavioral1
Sample
85b204829033535f0375c53bf7f02f1f9b622ce64cda722f23d086d7607d379e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
85b204829033535f0375c53bf7f02f1f9b622ce64cda722f23d086d7607d379e.exe
Resource
win10v2004-20221111-en
General
-
Target
85b204829033535f0375c53bf7f02f1f9b622ce64cda722f23d086d7607d379e
-
Size
92KB
-
MD5
2276b3f189e18e5b08f9f7c009bf71e0
-
SHA1
25a6ecd3c77d49316442d6f6c7f6724128c633c7
-
SHA256
85b204829033535f0375c53bf7f02f1f9b622ce64cda722f23d086d7607d379e
-
SHA512
50c6b1a1c38c6850a08fbc98dca8b074c0b74510e5ec5ad4c9fb684d45e01998e1663c43b35de4b1c987771b9c4622934f8a8f41d4b2751a3409cb0818157f44
-
SSDEEP
1536:Vjpr9rc9GMWIQnmQoyUkgNq8TmexLNnXigoOsGEN0NN7NNNNMNzNN7y6/mpHh1EJ:ZpBWGMfQmQoA2RLXzQ/wB13TYp7
Malware Config
Signatures
Files
-
85b204829033535f0375c53bf7f02f1f9b622ce64cda722f23d086d7607d379e.exe windows x86
d47398aa889ae7a1a235fc60da66ed72
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellAboutA
winmm
mixerSetControlDetails
auxGetNumDevs
mixerGetID
auxGetDevCapsA
midiOutGetNumDevs
midiOutGetDevCapsA
waveOutGetNumDevs
waveOutGetDevCapsA
mixerClose
mixerOpen
mixerGetLineControlsA
mixerGetControlDetailsA
mixerGetNumDevs
mixerGetDevCapsA
timeKillEvent
mixerMessage
mixerGetLineInfoA
timeSetEvent
ord2
user32
LoadIconA
LoadCursorA
GetCursorPos
DefDlgProcA
GetSystemMetrics
SetWindowPos
RegisterClassA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
IsDialogMessageA
GetMessageA
LoadAcceleratorsA
FindWindowA
PostQuitMessage
IsWindowEnabled
DefWindowProcA
DestroyWindow
GetMessagePos
IsDlgButtonChecked
CheckRadioButton
EndDialog
DialogBoxParamA
FillRect
GetSysColor
GetUpdateRect
InvalidateRect
SetWindowTextA
wsprintfA
MessageBoxA
GetWindowLongA
GetWindowTextA
SendMessageA
GetMenu
CheckMenuItem
IsWindow
PostMessageA
SetForegroundWindow
SetFocus
DrawEdge
BeginPaint
GetClientRect
SetTimer
EndPaint
GetWindow
GetDlgCtrlID
EnableWindow
KillTimer
ShowWindow
RemovePropA
IsIconic
ScreenToClient
GetWindowRect
MoveWindow
SetWindowLongA
CreateWindowExA
EnableMenuItem
CallWindowProcA
SetPropA
GetPropA
GetParent
GetDlgItem
MapWindowPoints
CreateDialogIndirectParamA
WinHelpA
LoadStringA
gdi32
DeleteDC
SelectObject
DeleteObject
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
CreateSolidBrush
kernel32
GetFileType
GetOEMCP
VirtualFree
VirtualAlloc
GetStdHandle
GetCPInfo
GetLastError
GetModuleFileNameA
ExitProcess
GetVersion
RtlUnwind
GetEnvironmentStrings
GetStartupInfoA
GetCommandLineA
lstrcmpA
lstrcpyA
GetModuleHandleA
LocalFree
LocalAlloc
lstrcpynA
FindResourceA
LoadResource
RtlMoveMemory
SizeofResource
GetProcAddress
LockResource
GlobalReAlloc
GlobalAlloc
RtlZeroMemory
GlobalHandle
GlobalUnlock
GlobalLock
GetACP
GlobalFree
UnhandledExceptionFilter
comctl32
ord17
ImageList_LoadImage
ImageList_Destroy
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 48.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE