Static task
static1
Behavioral task
behavioral1
Sample
effc969c0393ab2e20ab925bd271d92c07c40ef073c110e71238190d9eeaf98b.exe
Resource
win7-20220812-en
General
-
Target
effc969c0393ab2e20ab925bd271d92c07c40ef073c110e71238190d9eeaf98b
-
Size
103KB
-
MD5
4812567ead958fd8f32e897e1e4048ab
-
SHA1
827b534930c98a428e60c39c00c40548d0a83a10
-
SHA256
effc969c0393ab2e20ab925bd271d92c07c40ef073c110e71238190d9eeaf98b
-
SHA512
5a8995ed0902b02acaa0ed84bb314157969097ae3b49da565d3f52103eb992747093016bc842db2850b93c50452d9a2b1c37c40bb3147e29258c097fb22e131f
-
SSDEEP
3072:89xum94U/2iSf1cT5+BB1FYw1SBH+7g3t2O:8sm9xSfO4B1PcHN3
Malware Config
Signatures
Files
-
effc969c0393ab2e20ab925bd271d92c07c40ef073c110e71238190d9eeaf98b.exe windows x86
6e5d4ff44ed129108bb731327491eafd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
StringFromGUID2
CoFreeUnusedLibraries
CoCreateInstance
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
CoInitialize
kernel32
FreeLibrary
GetCurrentThread
SetEvent
GetModuleFileNameA
GetThreadPriority
GetPrivateProfileStringW
MulDiv
GetSystemTimeAsFileTime
lstrcmpiW
InitializeCriticalSection
WriteFile
MultiByteToWideChar
GetDiskFreeSpaceW
GetCurrentProcessId
GlobalUnlock
GetCurrentProcess
lstrcpyA
SetUnhandledExceptionFilter
HeapFree
GetFileSize
CloseHandle
GlobalHandle
EnterCriticalSection
lstrcpyW
InterlockedDecrement
InterlockedIncrement
GetSystemDefaultLangID
QueryPerformanceCounter
CreateIoCompletionPort
CreateEventW
PostQueuedCompletionStatus
GlobalMemoryStatus
GetQueuedCompletionStatus
SetThreadPriority
IsBadReadPtr
ResetEvent
lstrlenA
GetTickCount
GetVersionExW
DeleteCriticalSection
WideCharToMultiByte
LoadLibraryW
GlobalLock
GetProcessHeap
WaitForSingleObject
CreateSemaphoreW
LeaveCriticalSection
WaitForMultipleObjects
DeleteFileW
lstrcmpW
CreateFileW
GetFullPathNameW
IsBadCodePtr
SetEndOfFile
GlobalFree
GetFileAttributesW
GetLastError
GetSystemInfo
IsBadWritePtr
lstrlenW
GetStartupInfoA
VirtualFree
GetProfileIntA
GetEnvironmentStringsW
SetFilePointer
lstrcpynW
ReleaseSemaphore
HeapAlloc
ReadFile
InterlockedExchange
GlobalAlloc
CreateThread
user32
EnableWindow
GetWindowRect
DispatchMessageW
wsprintfW
SendMessageW
ShowWindow
IsRectEmpty
LoadCursorW
IsWindowVisible
DestroyWindow
SetWindowLongW
SetDlgItemInt
TranslateMessage
MoveWindow
CreateDialogParamW
GetWindowLongW
GetClientRect
CheckRadioButton
GetAsyncKeyState
LoadStringW
IsWindow
GetDC
CheckDlgButton
ClientToScreen
GetDlgItem
DefWindowProcW
SetDlgItemTextW
InvalidateRect
GetDesktopWindow
PeekMessageW
GetDlgItemInt
ReleaseDC
SetCursor
advapi32
RegSetValueW
RegQueryValueExW
RegOpenKeyW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegEnumKeyW
RegCreateKeyW
RegDeleteKeyW
RegCloseKey
winmm
mixerGetControlDetailsW
SendDriverMessage
mixerOpen
CloseDriver
mixerGetLineInfoW
mixerSetControlDetails
mixerGetID
mixerClose
waveInStop
waveInClose
waveInStart
waveInPrepareHeader
waveInUnprepareHeader
mixerGetLineControlsW
waveInAddBuffer
waveInGetDevCapsW
waveInOpen
OpenDriver
waveInReset
msvfw32
ICSendMessage
ICCompress
ICClose
ICOpen
ICDecompress
ICGetInfo
ICLocate
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
gdi32
GetObjectW
SelectObject
GetTextExtentPoint32W
GetPaletteEntries
PatBlt
GetStockObject
msvcrt
??3@YAXPAX@Z
_except_handler3
??2@YAPAXI@Z
_purecall
wcslen
_ftol
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ