Static task
static1
Behavioral task
behavioral1
Sample
a7cf82efc2378ba73a53e94772e72459b84600a59b9ad8ad1c1e98cdb43ce77d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7cf82efc2378ba73a53e94772e72459b84600a59b9ad8ad1c1e98cdb43ce77d.exe
Resource
win10v2004-20220812-en
General
-
Target
a7cf82efc2378ba73a53e94772e72459b84600a59b9ad8ad1c1e98cdb43ce77d
-
Size
137KB
-
MD5
5020213d32364202721e276b76cd311d
-
SHA1
3979690970130bed58f476905a11b2ac8e10a9ba
-
SHA256
a7cf82efc2378ba73a53e94772e72459b84600a59b9ad8ad1c1e98cdb43ce77d
-
SHA512
035066c98149229925ea65f316318e70a1d2a9bb1665ec6de130c8c2f42a21cbb7270126b36ff21f535c11074172af3df07cbcd71b6753d55061e0bebd492dac
-
SSDEEP
3072:sigaeOtxFyKg1HUaSAMrqA/tmNlyz0CiLOHp0rDJLaZ1i:+aeOt8HD9gHNiOWr5
Malware Config
Signatures
Files
-
a7cf82efc2378ba73a53e94772e72459b84600a59b9ad8ad1c1e98cdb43ce77d.exe windows x86
c0b205ed67b179e7d411159c228cf5ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2help
WahOpenHandleHelper
WahDestroyHandleContextTable
WahCloseNotificationHandleHelper
WahOpenNotificationHandleHelper
WahCloseThread
WahCloseHandleHelper
WahCompleteRequest
WahDisableNonIFSHandleSupport
WahRemoveHandleContext
WahOpenApcHelper
WahCreateSocketHandle
WahReferenceContextByHandle
WahNotifyAllProcesses
WahQueueUserApc
WahCloseSocketHandle
WahInsertHandleContext
WahCloseApcHelper
WahOpenCurrentThread
WahEnableNonIFSHandleSupport
WahEnumerateHandleContexts
winmm
midiOutGetDevCapsW
midiInGetDevCapsA
waveInMessage
timeGetSystemTime
midiStreamRestart
midiOutGetDevCapsA
mixerSetControlDetails
mciSendStringW
mmTaskYield
mciGetErrorStringW
midiStreamProperty
mciSendCommandA
joySetThreshold
waveInGetDevCapsA
WOW32DriverCallback
joySetCapture
waveInClose
waveOutBreakLoop
crtdll
_ismbstrail
_mbsnbset
wcscpy
gmtime
setbuf
wcsncmp
_CIcosh
_vsnprintf
fgetwc
_mbscat
_ismbslead
_stricmp
isgraph
_wcsupr
_get_osfhandle
strncmp
strchr
calloc
__mb_cur_max_dll
_open_osfhandle
kernel32
VirtualAlloc
CmdBatNotification
CallNamedPipeW
RtlZeroMemory
GetCurrentThread
EnumLanguageGroupLocalesA
lstrcmpW
DeleteCriticalSection
CreateActCtxW
EnumResourceTypesA
_lopen
RegisterWaitForSingleObjectEx
InitializeCriticalSection
LoadLibraryA
GetSystemTimeAsFileTime
TermsrvAppInstallMode
QueueUserWorkItem
GetModuleHandleW
SetFileShortNameA
SetConsoleNlsMode
CreateProcessInternalA
gdi32
GetRandomRgn
DdEntry19
GdiRealizationInfo
EqualRgn
DdEntry42
ScaleViewportExtEx
CreateMetaFileW
EngFindResource
GdiEntry12
DdEntry40
GdiCreateLocalMetaFilePict
EndPage
DdEntry1
HT_Get8BPPFormatPalette
CreateBitmapIndirect
GetCharWidthW
DdEntry23
EnumFontFamiliesExA
CreateMetaFileA
UpdateColors
msi
MsiAdvertiseProductA
MsiSummaryInfoGetPropertyA
MsiViewClose
MsiPreviewBillboardW
MsiQueryProductStateA
MsiSetTargetPathW
MsiSetInternalUI
MsiPreviewDialogA
MsiProvideQualifiedComponentExW
MsiDoActionA
MsiLocateComponentW
MsiGetFileVersionW
MsiEnableUIPreview
MsiGetSourcePathW
MsiGetProductCodeFromPackageCodeW
MsiDeleteUserDataW
MsiDoActionW
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ