Static task
static1
Behavioral task
behavioral1
Sample
d6120a145f0906b366830dc3cc3ffe031a38bbfca6a569aa056c5436e7a0d0d0.exe
Resource
win7-20220812-en
General
-
Target
d6120a145f0906b366830dc3cc3ffe031a38bbfca6a569aa056c5436e7a0d0d0
-
Size
104KB
-
MD5
ed5ec509b61f68a3ce6501596cbcaf6f
-
SHA1
63b11431c9d7ae275ce0c860195e8f7dc2f2e1c8
-
SHA256
d6120a145f0906b366830dc3cc3ffe031a38bbfca6a569aa056c5436e7a0d0d0
-
SHA512
c51577bd1c3817e4668e24a9ac66305404b9de659705c34bb8d00c35b40ad30fce4a53b63ac0918ff994c739e73d952665a9b02712397c9c4588e3db24cecd9b
-
SSDEEP
1536:KJ6rEjLMU93kxc/nJoIIlzZggULMflMy8j0/bNxTd4fpDZ7dpXPUTg4uOLdky2OR:t/UpLiggULvU/bOfpDjN6JuOhk4WI
Malware Config
Signatures
Files
-
d6120a145f0906b366830dc3cc3ffe031a38bbfca6a569aa056c5436e7a0d0d0.exe windows x86
6c65eacc980b971465fc87e6e5fed32b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
HeapAlloc
GetDiskFreeSpaceW
SetUnhandledExceptionFilter
GetCurrentProcessId
DeleteCriticalSection
lstrcpyW
GetCurrentThread
GetLastError
CloseHandle
GetSystemInfo
lstrcmpW
FreeLibrary
GetProcessHeap
WaitForMultipleObjects
lstrcpynW
lstrcmpiW
GetFileSize
IsBadWritePtr
SetEvent
SetEndOfFile
ResetEvent
MulDiv
GlobalMemoryStatus
GetCurrentProcess
CreateEventW
DeleteFileW
HeapFree
GlobalUnlock
WriteFile
GetSystemTimeAsFileTime
ReleaseSemaphore
LoadLibraryW
InitializeCriticalSection
SetFilePointer
CreateThread
GetPrivateProfileStringW
WaitForSingleObject
lstrlenA
LeaveCriticalSection
PostQueuedCompletionStatus
GlobalHandle
GetTickCount
CreateFileW
GetModuleFileNameA
GetProcAddress
GetFileAttributesW
GetFullPathNameW
GlobalAlloc
EnterCriticalSection
VirtualFree
IsBadReadPtr
lstrlenW
GlobalFree
InterlockedIncrement
GetProfileIntA
GetVersionExW
WideCharToMultiByte
ReadFile
SetLastError
SetThreadPriority
MultiByteToWideChar
CreateSemaphoreW
InterlockedExchange
QueryPerformanceCounter
CreateIoCompletionPort
InterlockedDecrement
GlobalLock
GetQueuedCompletionStatus
IsBadCodePtr
GetThreadPriority
GetACP
lstrcpyA
ole32
CoInitialize
CoUninitialize
StringFromGUID2
CoTaskMemFree
CoFreeUnusedLibraries
CoTaskMemAlloc
CoCreateInstance
user32
LoadStringW
GetWindowLongW
CheckRadioButton
wsprintfW
IsWindowVisible
PeekMessageW
IsWindow
GetClientRect
MoveWindow
SendMessageW
IsRectEmpty
CreateDialogParamW
GetDlgItemInt
GetWindowRect
ShowWindow
ReleaseDC
DestroyWindow
TranslateMessage
LoadCursorW
SetCursor
DefWindowProcW
SetDlgItemTextW
GetDC
GetDlgItem
SetDlgItemInt
SetWindowLongW
GetDesktopWindow
CheckDlgButton
DispatchMessageW
GetAsyncKeyState
EnableWindow
ClientToScreen
InvalidateRect
gdi32
PatBlt
GetPaletteEntries
GetObjectW
GetTextExtentPoint32W
GetStockObject
SelectObject
winmm
mixerGetID
waveInAddBuffer
waveInPrepareHeader
waveInStart
mixerSetControlDetails
mixerGetLineControlsW
waveInStop
waveInClose
waveInOpen
waveInUnprepareHeader
CloseDriver
mixerClose
waveInReset
mixerGetLineInfoW
OpenDriver
mixerOpen
SendDriverMessage
mixerGetControlDetailsW
waveInGetDevCapsW
advapi32
RegSetValueW
RegEnumKeyExW
RegQueryValueExW
RegEnumKeyW
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW
RegOpenKeyW
RegCreateKeyW
RegCloseKey
msvfw32
ICCompress
ICGetInfo
ICOpen
ICLocate
ICSendMessage
ICClose
ICDecompress
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ