Static task
static1
Behavioral task
behavioral1
Sample
ce65d1556529754fe82116788c46bec580a1800c0ea561d3d503a150c131d31e.exe
Resource
win7-20221111-en
General
-
Target
ce65d1556529754fe82116788c46bec580a1800c0ea561d3d503a150c131d31e
-
Size
102KB
-
MD5
4a85a5a8992f26def10db78f18470cb9
-
SHA1
bf029654b93c2a5ad7761fe7b190f4b5bf6ad0a4
-
SHA256
ce65d1556529754fe82116788c46bec580a1800c0ea561d3d503a150c131d31e
-
SHA512
07d53ad5bfb206d8bb10d074633df4bd9faef22619595f0dbbb116b0ef1bb2675c239409a2732376d631e5ebef5b9bdf471f6d06f589a2e9333a3523e24badfb
-
SSDEEP
1536:YMHAvk2QGCwrmTW93WSEodkuzubsNwjZqDoTtuniJa9x3Id55r:Y5vskCTW7VzaZqDquniJa9x3S
Malware Config
Signatures
Files
-
ce65d1556529754fe82116788c46bec580a1800c0ea561d3d503a150c131d31e.exe windows x86
bea2f0671e6d9ba1ab2137ea15d7b992
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
lstrcmpW
WideCharToMultiByte
InterlockedIncrement
GetProfileIntA
LeaveCriticalSection
lstrcpynW
GetSystemInfo
WaitForSingleObject
lstrlenW
lstrcmpiW
lstrcpyW
GetPrivateProfileStringW
GetLastError
QueryPerformanceCounter
CloseHandle
GlobalFree
PostQueuedCompletionStatus
ReleaseSemaphore
InterlockedDecrement
GetQueuedCompletionStatus
CreateFileW
CreateThread
GetProcessHeap
GetThreadPriority
InterlockedExchange
VirtualFree
IsBadWritePtr
EnterCriticalSection
ResetEvent
GetFileAttributesW
GlobalHandle
GetFullPathNameW
CreateIoCompletionPort
GetCurrentProcess
GlobalUnlock
CreateEventW
lstrcpyA
WaitForMultipleObjects
GetStartupInfoA
SetThreadPriority
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
GlobalLock
FreeLibrary
DeleteFileW
GetDiskFreeSpaceW
IsBadCodePtr
LoadLibraryW
HeapAlloc
GetCurrentThread
SetEvent
GetVersionExW
CreateSemaphoreW
GetCurrentProcessId
InitializeCriticalSection
GetEnvironmentStringsW
ReadFile
HeapFree
GlobalAlloc
GetFileSize
IsBadReadPtr
MulDiv
SetEndOfFile
WriteFile
SetUnhandledExceptionFilter
GetTickCount
GlobalMemoryStatus
SetFilePointer
GetSystemDefaultLangID
GetSystemTimeAsFileTime
user32
ClientToScreen
GetWindowRect
ReleaseDC
EnableWindow
TranslateMessage
GetWindowLongW
GetDlgItem
GetDC
CheckRadioButton
CreateDialogParamW
GetDlgItemInt
IsWindow
MoveWindow
IsRectEmpty
SetDlgItemTextW
SetWindowLongW
DefWindowProcW
GetAsyncKeyState
SendMessageW
CheckDlgButton
DispatchMessageW
SetDlgItemInt
IsWindowVisible
LoadCursorW
PeekMessageW
GetDesktopWindow
InvalidateRect
wsprintfW
SetCursor
ShowWindow
LoadStringW
GetClientRect
DestroyWindow
winmm
waveInAddBuffer
waveInOpen
waveInStart
waveInPrepareHeader
mixerSetControlDetails
mixerGetLineControlsW
mixerClose
waveInReset
OpenDriver
waveInGetDevCapsW
mixerGetID
CloseDriver
SendDriverMessage
waveInUnprepareHeader
waveInStop
waveInClose
mixerGetControlDetailsW
mixerOpen
mixerGetLineInfoW
ole32
CoTaskMemFree
CoCreateInstance
CoFreeUnusedLibraries
CoInitialize
StringFromGUID2
CoTaskMemAlloc
CoUninitialize
msvfw32
ICOpen
ICClose
ICGetInfo
ICCompress
ICSendMessage
ICLocate
ICDecompress
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
advapi32
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW
RegCloseKey
RegEnumKeyW
RegEnumKeyExW
RegOpenKeyW
RegQueryValueExW
RegCreateKeyW
RegSetValueW
msvcrt
??3@YAXPAX@Z
_except_handler3
wcslen
_purecall
_ftol
??2@YAPAXI@Z
gdi32
SelectObject
GetStockObject
GetPaletteEntries
GetTextExtentPoint32W
GetObjectW
PatBlt
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ