Static task
static1
Behavioral task
behavioral1
Sample
a4bd6c49cb9404af4a97e000cecaf9e3d6af4bdb935146b2092fe6197ccd7529.exe
Resource
win7-20221111-en
General
-
Target
a4bd6c49cb9404af4a97e000cecaf9e3d6af4bdb935146b2092fe6197ccd7529
-
Size
104KB
-
MD5
9d7b0d92fd565cf6d742445abd6023c0
-
SHA1
0af558f2bd122b5ca45cc0b3f281f44e2354b65b
-
SHA256
a4bd6c49cb9404af4a97e000cecaf9e3d6af4bdb935146b2092fe6197ccd7529
-
SHA512
2f2f776beae6ec56b11e0b3c73f95e32bf2f073592c4062e3916b5ca7e77b75677a79e4cab3b54a7aad7d806e63803da2b8fa8e5ef15c1474920998cb799347f
-
SSDEEP
3072:pAI2KPvynPoLcD9LFE3JTJWAz84uFrXYDdk/L0fQZXbvmPt:pAI2FPmE9L4TJw4cX/pZiP
Malware Config
Signatures
Files
-
a4bd6c49cb9404af4a97e000cecaf9e3d6af4bdb935146b2092fe6197ccd7529.exe windows x86
e6f2545962903aa6a4508ee8151a4f50
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
ICOpen
ICLocate
ICClose
ICGetInfo
ICCompress
ICSendMessage
ICDecompress
kernel32
IsBadWritePtr
LeaveCriticalSection
GetTickCount
GetACP
lstrlenW
IsBadReadPtr
GetCurrentProcessId
SetEndOfFile
GetSystemInfo
FreeLibrary
MultiByteToWideChar
GetFullPathNameW
CreateIoCompletionPort
HeapAlloc
SetFilePointer
GetQueuedCompletionStatus
GetProfileIntA
SetLastError
GetModuleFileNameA
DeleteFileW
GlobalFree
lstrcmpW
IsBadCodePtr
CreateSemaphoreW
GetProcessHeap
SetEvent
GetThreadPriority
lstrcpyW
lstrcpynW
CreateFileW
CreateThread
GetCurrentProcess
lstrcmpiW
ReadFile
InterlockedExchange
lstrlenA
GetFileSize
EnterCriticalSection
GetProcAddress
ResetEvent
CreateEventW
GlobalLock
GlobalAlloc
lstrcpyA
HeapFree
SetThreadPriority
GetFileAttributesW
CloseHandle
WriteFile
LoadLibraryW
GetCurrentThread
VirtualFree
GetPrivateProfileStringW
GlobalUnlock
InitializeCriticalSection
GetStartupInfoA
GetSystemTimeAsFileTime
PostQueuedCompletionStatus
DeleteCriticalSection
WaitForSingleObject
WaitForMultipleObjects
GetVersionExW
WideCharToMultiByte
QueryPerformanceCounter
SetUnhandledExceptionFilter
ReleaseSemaphore
InterlockedDecrement
GlobalMemoryStatus
GetDiskFreeSpaceW
GetLastError
MulDiv
InterlockedIncrement
GlobalHandle
user32
CreateDialogParamW
SetWindowLongW
SetCursor
ShowWindow
CheckDlgButton
IsRectEmpty
DispatchMessageW
IsWindowVisible
InvalidateRect
GetClientRect
ReleaseDC
GetDesktopWindow
GetDlgItem
GetDlgItemInt
GetDC
GetWindowRect
SendMessageW
GetAsyncKeyState
PeekMessageW
GetWindowLongW
DefWindowProcW
LoadCursorW
MoveWindow
SetDlgItemInt
ClientToScreen
SetDlgItemTextW
CheckRadioButton
wsprintfW
LoadStringW
IsWindow
EnableWindow
DestroyWindow
TranslateMessage
winmm
waveInReset
mixerClose
mixerGetID
waveInUnprepareHeader
waveInStart
mixerGetLineControlsW
waveInGetDevCapsW
waveInClose
mixerGetControlDetailsW
mixerOpen
mixerSetControlDetails
waveInStop
OpenDriver
waveInOpen
CloseDriver
waveInPrepareHeader
SendDriverMessage
waveInAddBuffer
mixerGetLineInfoW
ole32
CoFreeUnusedLibraries
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
CoInitialize
gdi32
SelectObject
GetStockObject
GetTextExtentPoint32W
PatBlt
GetObjectW
GetPaletteEntries
advapi32
RegOpenKeyW
RegCreateKeyW
RegCloseKey
RegEnumKeyExW
RegEnumKeyW
RegSetValueExW
RegDeleteKeyW
RegSetValueW
RegOpenKeyExW
RegQueryValueExW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ