Static task
static1
Behavioral task
behavioral1
Sample
eb9518b2b44693d5e579177acf2f660b1e27e137451163d4629457c2572ddf52.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb9518b2b44693d5e579177acf2f660b1e27e137451163d4629457c2572ddf52.exe
Resource
win10v2004-20221111-en
General
-
Target
eb9518b2b44693d5e579177acf2f660b1e27e137451163d4629457c2572ddf52
-
Size
64KB
-
MD5
26a36e78857e347e2e3e2c7136db7461
-
SHA1
df8bc6672f8ebac69826634682c75ab3941db64f
-
SHA256
eb9518b2b44693d5e579177acf2f660b1e27e137451163d4629457c2572ddf52
-
SHA512
3f093e1d35e73375f1525db44b472ab7afe47f80c591697614516edc923c226951b6595001cf956e0c91e4f1a7fca7ae925d3964146a147ad42c9e41ff9e073a
-
SSDEEP
1536:jRK9tmSmiGIo/ClUoDryYc8FXPTSZXXD9v2ql:j64SmiPmeAaSZXXDn
Malware Config
Signatures
Files
-
eb9518b2b44693d5e579177acf2f660b1e27e137451163d4629457c2572ddf52.exe windows x86
e43ff28267b598631a4220b9dd1053fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowLongW
DispatchMessageW
TranslateMessage
LoadCursorW
ReleaseDC
GetWindowLongW
wsprintfW
LoadStringW
CreateDialogParamW
IsWindow
GetDlgItemInt
DefWindowProcW
EnableWindow
SetDlgItemInt
SendMessageW
SetCursor
GetWindowRect
ShowWindow
IsWindowVisible
GetDC
InvalidateRect
IsRectEmpty
CheckRadioButton
DestroyWindow
GetClientRect
GetAsyncKeyState
SetDlgItemTextW
PeekMessageW
GetDlgItem
MoveWindow
ClientToScreen
CheckDlgButton
GetDesktopWindow
winmm
waveInStop
waveInStart
waveInUnprepareHeader
waveInReset
waveInAddBuffer
mixerOpen
mixerGetID
waveInGetDevCapsW
mixerClose
mixerGetControlDetailsW
mixerGetLineControlsW
SendDriverMessage
mixerGetLineInfoW
waveInOpen
waveInClose
CloseDriver
waveInPrepareHeader
mixerSetControlDetails
OpenDriver
kernel32
WideCharToMultiByte
LoadLibraryW
lstrcpyW
GlobalFree
SetFilePointer
DeleteCriticalSection
CreateFileW
SetLastError
GetCurrentProcess
lstrcmpW
GetTickCount
SetUnhandledExceptionFilter
ResetEvent
HeapAlloc
CreateSemaphoreW
GetQueuedCompletionStatus
LeaveCriticalSection
IsBadCodePtr
MultiByteToWideChar
HeapFree
GetSystemTimeAsFileTime
lstrcpyA
GetSystemInfo
GetACP
GetStartupInfoA
InitializeCriticalSection
GetFileAttributesW
GlobalAlloc
InterlockedIncrement
lstrcpynW
lstrlenA
lstrcmpiW
InterlockedDecrement
EnterCriticalSection
FreeLibrary
DeleteFileW
WaitForMultipleObjects
GetProfileIntA
GlobalMemoryStatus
CreateThread
CloseHandle
SetEvent
GlobalHandle
QueryPerformanceCounter
CreateEventW
SetThreadPriority
GlobalLock
GetDiskFreeSpaceW
MulDiv
lstrlenW
ReadFile
IsBadReadPtr
GetCurrentProcessId
GetVersionExW
InterlockedExchange
SetEndOfFile
CreateIoCompletionPort
GetCurrentThread
GetProcAddress
PostQueuedCompletionStatus
IsBadWritePtr
GetModuleFileNameA
WriteFile
VirtualFree
GlobalUnlock
GetProcessHeap
GetFullPathNameW
GetLastError
ReleaseSemaphore
GetFileSize
WaitForSingleObject
GetThreadPriority
GetPrivateProfileStringW
advapi32
RegQueryValueExW
RegSetValueW
RegEnumKeyW
RegOpenKeyW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExW
RegCloseKey
RegCreateKeyW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
msvfw32
ICOpen
ICSendMessage
ICClose
ICGetInfo
ICCompress
ICLocate
ICDecompress
ole32
CoUninitialize
CoFreeUnusedLibraries
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoInitialize
gdi32
GetPaletteEntries
PatBlt
SelectObject
GetObjectW
GetTextExtentPoint32W
GetStockObject
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ