Static task
static1
Behavioral task
behavioral1
Sample
d067e9cb743511a7b550d25b41547b31eb22f2a01997ba04f87b050cced6a9f2.exe
Resource
win7-20220812-en
General
-
Target
d067e9cb743511a7b550d25b41547b31eb22f2a01997ba04f87b050cced6a9f2
-
Size
101KB
-
MD5
64ee47dda3f776a034fa3b577f7387d2
-
SHA1
5632312a78405641fe4f408d04edffd8e4ae71b8
-
SHA256
d067e9cb743511a7b550d25b41547b31eb22f2a01997ba04f87b050cced6a9f2
-
SHA512
01113ee5fef04feb698f21feedd63a9b73ffb8947163f256eb552387f95e73c7a25127e65cbca70c61d0d90259814a1fdc74dcd5281576be86111cb895957680
-
SSDEEP
3072:H4olXYMjA82VTHfbz0Yu+7VvXH09e/FeQ:p7cbVnz37VvXHFE
Malware Config
Signatures
Files
-
d067e9cb743511a7b550d25b41547b31eb22f2a01997ba04f87b050cced6a9f2.exe windows x86
0d200cf6c4df0eac536ab875d487a225
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GlobalMemoryStatus
lstrlenA
LoadLibraryW
CreateThread
QueryPerformanceCounter
GetFullPathNameW
PostQueuedCompletionStatus
ReleaseSemaphore
HeapFree
lstrcpyA
lstrcmpW
GetTickCount
lstrcpyW
GetACP
SetThreadPriority
GetVersionExW
GetProcessHeap
InterlockedExchange
GetCurrentProcessId
IsBadReadPtr
CreateSemaphoreW
GlobalLock
MultiByteToWideChar
SetFilePointer
IsBadWritePtr
lstrcmpiW
ResetEvent
CreateEventW
CreateIoCompletionPort
GetProfileIntA
GetSystemInfo
GlobalAlloc
GlobalHandle
GetThreadPriority
CreateFileW
lstrcpynW
GetStartupInfoA
WaitForMultipleObjects
lstrlenW
InterlockedDecrement
WaitForSingleObject
GetCurrentProcess
GetFileSize
DeleteCriticalSection
SetLastError
VirtualFree
GetModuleFileNameA
SetEvent
SetEndOfFile
GetSystemTimeAsFileTime
GetFileAttributesW
GetCurrentThread
GetPrivateProfileStringW
HeapAlloc
MulDiv
GetProcAddress
CloseHandle
LeaveCriticalSection
FreeLibrary
GetQueuedCompletionStatus
GetLastError
GlobalFree
WideCharToMultiByte
ReadFile
GlobalUnlock
IsBadCodePtr
SetUnhandledExceptionFilter
GetDiskFreeSpaceW
DeleteFileW
EnterCriticalSection
InterlockedIncrement
InitializeCriticalSection
msvfw32
ICDecompress
ICCompress
ICLocate
ICSendMessage
ICGetInfo
ICOpen
ICClose
user32
SetCursor
DestroyWindow
IsWindow
GetDesktopWindow
CheckRadioButton
TranslateMessage
SetDlgItemTextW
GetWindowRect
CreateDialogParamW
GetDlgItemInt
wsprintfW
SetDlgItemInt
LoadStringW
DefWindowProcW
ClientToScreen
ReleaseDC
GetDC
IsWindowVisible
DispatchMessageW
GetDlgItem
SetWindowLongW
MoveWindow
SendMessageW
GetClientRect
PeekMessageW
ShowWindow
InvalidateRect
LoadCursorW
IsRectEmpty
GetWindowLongW
CheckDlgButton
GetAsyncKeyState
EnableWindow
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
winmm
mixerClose
waveInGetDevCapsW
OpenDriver
waveInPrepareHeader
mixerGetLineInfoW
waveInClose
mixerSetControlDetails
mixerGetID
mixerOpen
waveInStart
mixerGetControlDetailsW
mixerGetLineControlsW
waveInStop
waveInOpen
waveInUnprepareHeader
CloseDriver
waveInAddBuffer
SendDriverMessage
waveInReset
ole32
CoUninitialize
CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
gdi32
GetObjectW
SelectObject
GetStockObject
PatBlt
GetTextExtentPoint32W
GetPaletteEntries
advapi32
RegQueryValueExW
RegSetValueW
RegDeleteKeyW
RegEnumKeyExW
RegEnumKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyW
RegOpenKeyW
RegCloseKey
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ