Static task
static1
Behavioral task
behavioral1
Sample
efa5b419e003055802c0bc6e028345dd3052486aedfd009c094a5cdde22ebf19.exe
Resource
win7-20220812-en
General
-
Target
efa5b419e003055802c0bc6e028345dd3052486aedfd009c094a5cdde22ebf19
-
Size
100KB
-
MD5
55abd0bf7962ce44f543e563536f0a5f
-
SHA1
435d16c5372b7ae2466c3fabb5f1f16b9b8557f2
-
SHA256
efa5b419e003055802c0bc6e028345dd3052486aedfd009c094a5cdde22ebf19
-
SHA512
5d26c4da381516a9b80fcb34d40db8cd732413191bf774bf6ff14180641912de35cd7359474e0c810178baf296fd3337b936ae31a213ce100cb5d53b84b8ea93
-
SSDEEP
1536:VI6S0Ia1AuR/0rmHS1u5EDwBVVuC6C717sgPJPODpFurEugDhXcvKvlRf2:VICb0Ju5EwsM71ogcDWr5gDhXcvclh
Malware Config
Signatures
Files
-
efa5b419e003055802c0bc6e028345dd3052486aedfd009c094a5cdde22ebf19.exe windows x86
a923c4d9b22304e172b9d2764ef8bc6d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
user32
MoveWindow
DispatchMessageW
GetDC
CheckDlgButton
ShowWindow
LoadStringW
SetCursor
GetDlgItem
TranslateMessage
wsprintfW
EnableWindow
IsRectEmpty
GetDesktopWindow
GetWindowRect
SetWindowLongW
CreateDialogParamW
DestroyWindow
DefWindowProcW
IsWindow
LoadCursorW
SetDlgItemTextW
CheckRadioButton
GetAsyncKeyState
ClientToScreen
SendMessageW
SetDlgItemInt
GetDlgItemInt
GetWindowLongW
InvalidateRect
IsWindowVisible
GetClientRect
PeekMessageW
ReleaseDC
kernel32
InterlockedDecrement
WaitForSingleObject
GetLastError
HeapFree
CreateFileW
GetPrivateProfileStringW
lstrlenW
GetCurrentProcess
SetEvent
DeleteFileW
GlobalLock
VirtualFree
GetSystemDefaultLangID
lstrcpyA
GetFileSize
ReadFile
DeleteCriticalSection
IsBadWritePtr
GetFileAttributesW
GetSystemTimeAsFileTime
InterlockedExchange
SetFilePointer
lstrcmpW
WriteFile
GetProcessHeap
FreeLibrary
SetThreadPriority
ResetEvent
GetStartupInfoA
GlobalMemoryStatus
WaitForMultipleObjects
HeapAlloc
CloseHandle
GlobalUnlock
GlobalAlloc
GlobalHandle
CreateThread
CreateSemaphoreW
ReleaseSemaphore
GetQueuedCompletionStatus
GetTickCount
GetSystemInfo
lstrcpynW
IsBadReadPtr
GetProfileIntA
GetDiskFreeSpaceW
lstrlenA
GetEnvironmentStringsW
LoadLibraryW
GetCurrentProcessId
IsBadCodePtr
SetUnhandledExceptionFilter
PostQueuedCompletionStatus
InterlockedIncrement
SetEndOfFile
GetThreadPriority
GlobalFree
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
MulDiv
InitializeCriticalSection
GetModuleFileNameA
lstrcmpiW
MultiByteToWideChar
lstrcpyW
CreateIoCompletionPort
CreateEventW
GetFullPathNameW
GetCurrentThread
WideCharToMultiByte
GetVersionExW
winmm
mixerSetControlDetails
waveInStart
mixerClose
mixerGetControlDetailsW
SendDriverMessage
waveInReset
waveInStop
waveInClose
mixerGetLineControlsW
waveInAddBuffer
CloseDriver
mixerGetLineInfoW
waveInOpen
OpenDriver
waveInUnprepareHeader
waveInGetDevCapsW
mixerOpen
waveInPrepareHeader
mixerGetID
ole32
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoTaskMemFree
gdi32
GetStockObject
PatBlt
GetObjectW
GetPaletteEntries
SelectObject
GetTextExtentPoint32W
msvcrt
??2@YAPAXI@Z
_except_handler3
??3@YAXPAX@Z
_ftol
wcslen
_purecall
advapi32
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyExW
RegSetValueW
RegCreateKeyW
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyW
RegSetValueExW
RegCloseKey
msvfw32
ICGetInfo
ICSendMessage
ICClose
ICDecompress
ICLocate
ICCompress
ICOpen
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ