Static task
static1
Behavioral task
behavioral1
Sample
ee64491b2242cc4369834bfe8f1ba8a4068621e2639af1a6659e71a0ddffa9f3.exe
Resource
win7-20221111-en
General
-
Target
ee64491b2242cc4369834bfe8f1ba8a4068621e2639af1a6659e71a0ddffa9f3
-
Size
100KB
-
MD5
9d664c45ab89bf138c746a20e3c2c33d
-
SHA1
e5ccdc7efa29b3a8f92e6fea080a685e0e15fb9c
-
SHA256
ee64491b2242cc4369834bfe8f1ba8a4068621e2639af1a6659e71a0ddffa9f3
-
SHA512
bce7dc0f8c1910551c2bb4c2e702b0e5364dfe40dc81c5ef7affe6e6b221fb298c16c3c7a66000d387296d31ed3c3fc1ad46985c694391591026b9d1dd543264
-
SSDEEP
3072:MSwTZrqY6sDoOhwU3B/vDxF+m/6jyzjY:HWZWUDoO/3B/dxOyf
Malware Config
Signatures
Files
-
ee64491b2242cc4369834bfe8f1ba8a4068621e2639af1a6659e71a0ddffa9f3.exe windows x86
a0c689960084e84db0cdd07a5560cace
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveInAddBuffer
mixerSetControlDetails
OpenDriver
waveInStart
waveInPrepareHeader
waveInGetDevCapsW
mixerGetLineInfoW
waveInUnprepareHeader
SendDriverMessage
mixerClose
mixerOpen
mixerGetLineControlsW
CloseDriver
mixerGetID
waveInClose
waveInStop
waveInReset
waveInOpen
mixerGetControlDetailsW
kernel32
CreateSemaphoreW
ReleaseSemaphore
DeleteFileW
SetEndOfFile
LoadLibraryW
HeapAlloc
lstrcpyW
GetPrivateProfileStringW
CreateThread
SetEvent
lstrlenA
GetSystemInfo
lstrcpyA
GetStartupInfoA
GetCurrentProcessId
SetLastError
DeleteCriticalSection
CreateEventW
GlobalLock
WaitForSingleObject
GetVersionExW
VirtualFree
GetSystemTimeAsFileTime
GetQueuedCompletionStatus
HeapFree
lstrcmpW
GetProcAddress
InitializeCriticalSection
FreeLibrary
PostQueuedCompletionStatus
CreateIoCompletionPort
InterlockedIncrement
EnterCriticalSection
GetModuleFileNameA
WriteFile
GetDiskFreeSpaceW
GetFileAttributesW
LeaveCriticalSection
GetCurrentProcess
QueryPerformanceCounter
lstrlenW
SetThreadPriority
InterlockedDecrement
InterlockedExchange
SetUnhandledExceptionFilter
ReadFile
GetFullPathNameW
IsBadWritePtr
GetTickCount
lstrcmpiW
WaitForMultipleObjects
CloseHandle
lstrcpynW
GlobalAlloc
IsBadCodePtr
GetCurrentThread
GetThreadPriority
SetFilePointer
GlobalFree
GlobalUnlock
MultiByteToWideChar
MulDiv
CreateFileW
GetACP
GlobalHandle
ResetEvent
GetProfileIntA
GetProcessHeap
GlobalMemoryStatus
GetFileSize
WideCharToMultiByte
IsBadReadPtr
GetLastError
user32
GetWindowRect
wsprintfW
LoadStringW
SetDlgItemInt
SendMessageW
GetDlgItem
GetClientRect
CheckRadioButton
IsWindowVisible
InvalidateRect
GetAsyncKeyState
ReleaseDC
LoadCursorW
GetWindowLongW
TranslateMessage
PeekMessageW
GetDesktopWindow
DispatchMessageW
SetDlgItemTextW
IsRectEmpty
MoveWindow
DestroyWindow
SetCursor
EnableWindow
DefWindowProcW
ShowWindow
CreateDialogParamW
ClientToScreen
GetDlgItemInt
GetDC
SetWindowLongW
IsWindow
CheckDlgButton
ole32
CoFreeUnusedLibraries
CoUninitialize
CoTaskMemAlloc
StringFromGUID2
CoInitialize
CoTaskMemFree
CoCreateInstance
advapi32
RegCreateKeyW
RegQueryValueExW
RegEnumKeyExW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyW
RegOpenKeyW
RegSetValueW
RegCloseKey
msvfw32
ICCompress
ICGetInfo
ICSendMessage
ICDecompress
ICOpen
ICClose
ICLocate
gdi32
PatBlt
SelectObject
GetPaletteEntries
GetTextExtentPoint32W
GetStockObject
GetObjectW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ