Static task
static1
Behavioral task
behavioral1
Sample
c021ef157955f1d10db03315aff8be76f4786d621e878a371610b0fe51ebc5a9.exe
Resource
win7-20220812-en
General
-
Target
c021ef157955f1d10db03315aff8be76f4786d621e878a371610b0fe51ebc5a9
-
Size
101KB
-
MD5
b19090317e680beb25543ad613394049
-
SHA1
ccb8ba75904862c8ebb8c11f1743af14a1e1bc20
-
SHA256
c021ef157955f1d10db03315aff8be76f4786d621e878a371610b0fe51ebc5a9
-
SHA512
103b64f876e705bc63320c552118fd464dca1f074cad5f305319b72bfefb456100f3e37ef4d6ff370a2d59e4bf0da46ca1610e80923324a9ff41b7df22b67164
-
SSDEEP
3072:0UtY0bXdQovpXRrgFbfECNHsVUEX7Bl+Ku:0UtY0bXdQovpXE8CqVUEL
Malware Config
Signatures
Files
-
c021ef157955f1d10db03315aff8be76f4786d621e878a371610b0fe51ebc5a9.exe windows x86
8bf155237bc173806536cafdb27d74ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
WaitForSingleObject
ReleaseSemaphore
GetCurrentProcess
GetFullPathNameW
SetThreadPriority
GetCurrentProcessId
GlobalFree
GetTickCount
InterlockedDecrement
QueryPerformanceCounter
lstrcpynW
GetStartupInfoA
FreeLibrary
lstrcmpW
SetEndOfFile
MultiByteToWideChar
GetModuleFileNameA
ResetEvent
lstrcpyA
GlobalLock
GetLastError
CreateSemaphoreW
GetSystemDefaultLangID
CreateThread
GetFileAttributesW
GlobalMemoryStatus
LoadLibraryW
InterlockedIncrement
GetCurrentThread
SetFilePointer
GetFileSize
VirtualFree
WriteFile
lstrlenW
lstrcmpiW
GetThreadPriority
GlobalAlloc
CreateFileW
LeaveCriticalSection
CreateEventW
WideCharToMultiByte
IsBadReadPtr
InitializeCriticalSection
GetEnvironmentStringsW
lstrlenA
HeapFree
GetProcessHeap
MulDiv
IsBadWritePtr
EnterCriticalSection
GlobalUnlock
CloseHandle
GetDiskFreeSpaceW
GetQueuedCompletionStatus
GetProfileIntA
IsBadCodePtr
HeapAlloc
DeleteFileW
DeleteCriticalSection
PostQueuedCompletionStatus
CreateIoCompletionPort
GlobalHandle
GetSystemTimeAsFileTime
WaitForMultipleObjects
ReadFile
GetPrivateProfileStringW
GetSystemInfo
SetUnhandledExceptionFilter
lstrcpyW
SetEvent
GetVersionExW
user32
IsRectEmpty
GetWindowLongW
LoadStringW
GetDC
wsprintfW
PeekMessageW
TranslateMessage
SetDlgItemTextW
ShowWindow
DestroyWindow
ClientToScreen
SetDlgItemInt
GetDlgItem
LoadCursorW
GetDesktopWindow
IsWindowVisible
ReleaseDC
CheckRadioButton
CheckDlgButton
DefWindowProcW
SetWindowLongW
SendMessageW
DispatchMessageW
GetDlgItemInt
GetAsyncKeyState
SetCursor
InvalidateRect
IsWindow
CreateDialogParamW
GetWindowRect
MoveWindow
GetClientRect
EnableWindow
msvfw32
ICGetInfo
ICDecompress
ICOpen
ICCompress
ICLocate
ICSendMessage
ICClose
winmm
mixerGetControlDetailsW
waveInOpen
waveInPrepareHeader
waveInGetDevCapsW
OpenDriver
mixerGetLineInfoW
waveInAddBuffer
mixerGetID
mixerSetControlDetails
waveInClose
waveInUnprepareHeader
SendDriverMessage
mixerClose
waveInStop
mixerGetLineControlsW
CloseDriver
waveInReset
mixerOpen
waveInStart
advapi32
RegSetValueW
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyW
RegEnumKeyExW
RegCloseKey
RegOpenKeyW
ole32
CoUninitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
CoInitialize
StringFromGUID2
CoTaskMemFree
CoCreateInstance
gdi32
GetTextExtentPoint32W
GetStockObject
SelectObject
GetPaletteEntries
GetObjectW
PatBlt
msvcrt
??2@YAPAXI@Z
??3@YAXPAX@Z
wcslen
_ftol
_purecall
_except_handler3
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ