Static task
static1
Behavioral task
behavioral1
Sample
9eb7fb95cfbda2b31e65ed23535bb9b83e23170713133dd4fcd2b629806a0265.exe
Resource
win7-20221111-en
General
-
Target
9eb7fb95cfbda2b31e65ed23535bb9b83e23170713133dd4fcd2b629806a0265
-
Size
100KB
-
MD5
aceaaca78479415463c25e3bc52e15a6
-
SHA1
a7072a6aa9831793e25da6a4b71b3e48ba592a82
-
SHA256
9eb7fb95cfbda2b31e65ed23535bb9b83e23170713133dd4fcd2b629806a0265
-
SHA512
71732f548fce85e0d5c6512ebe36684fc838edfa1a51c03333d3b161046af9138b2379152d009ab5f817c57d1e730e6d30e30e4f39f16da29ff467f26778c454
-
SSDEEP
1536:C+73bnj8AD7O45uie29Ya9zlSamii919vRu3gy74aP/ON/dFmjzDbhRP3M1jts:CA3H8AvO4je27LmlvwQQbkkDbhh3Y5
Malware Config
Signatures
Files
-
9eb7fb95cfbda2b31e65ed23535bb9b83e23170713133dd4fcd2b629806a0265.exe windows x86
5fa119a8666f5efafd45925772c930d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
OpenDriver
waveInClose
mixerGetLineInfoW
waveInStart
mixerSetControlDetails
waveInPrepareHeader
waveInGetDevCapsW
waveInAddBuffer
mixerGetLineControlsW
mixerOpen
waveInStop
waveInReset
mixerGetID
mixerGetControlDetailsW
SendDriverMessage
waveInOpen
mixerClose
CloseDriver
waveInUnprepareHeader
user32
GetDesktopWindow
IsWindow
SetCursor
GetWindowRect
SetDlgItemInt
SendMessageW
SetWindowLongW
InvalidateRect
wsprintfW
ReleaseDC
TranslateMessage
LoadStringW
IsWindowVisible
CreateDialogParamW
LoadCursorW
SetDlgItemTextW
GetClientRect
ShowWindow
GetDlgItemInt
GetDlgItem
CheckRadioButton
DispatchMessageW
CheckDlgButton
DestroyWindow
GetWindowLongW
PeekMessageW
IsRectEmpty
GetAsyncKeyState
DefWindowProcW
MoveWindow
EnableWindow
ClientToScreen
GetDC
kernel32
IsBadHugeReadPtr
WriteFile
GetCurrentProcess
IsBadReadPtr
lstrcpynW
GetStartupInfoA
CreateFileW
GlobalMemoryStatus
GetSystemTimeAsFileTime
GetLastError
PostQueuedCompletionStatus
WaitForMultipleObjects
SetFilePointer
ResetEvent
lstrcpyA
CreateEventW
GetThreadPriority
IsBadWritePtr
SetUnhandledExceptionFilter
GetPrivateProfileStringW
lstrlenW
GetCurrentProcessId
IsBadCodePtr
lstrcmpiW
CreateSemaphoreW
GetDiskFreeSpaceW
EnterCriticalSection
GetFileAttributesW
LeaveCriticalSection
GetProfileIntA
GetCurrentThread
LoadLibraryW
HeapAlloc
lstrcpyW
WideCharToMultiByte
GetEnvironmentStringsW
GlobalAlloc
GlobalUnlock
QueryPerformanceCounter
HeapFree
MultiByteToWideChar
SetThreadPriority
GlobalHandle
CreateIoCompletionPort
InterlockedDecrement
SetEvent
DeleteCriticalSection
GlobalLock
GetTickCount
GetSystemDefaultLangID
InitializeCriticalSection
CloseHandle
ReadFile
lstrlenA
VirtualFree
GetFileSize
InterlockedIncrement
ReleaseSemaphore
lstrcmpW
FreeLibrary
GetFullPathNameW
InterlockedExchange
GetModuleFileNameA
GetProcessHeap
GlobalFree
CreateThread
GetVersionExW
WaitForSingleObject
SetEndOfFile
GetQueuedCompletionStatus
MulDiv
DeleteFileW
GetSystemInfo
gdi32
GetStockObject
GetTextExtentPoint32W
GetObjectW
GetPaletteEntries
PatBlt
SelectObject
msvcrt
wcslen
??3@YAXPAX@Z
_ftol
_purecall
_except_handler3
??2@YAPAXI@Z
ole32
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
msvfw32
ICCompress
ICGetInfo
ICClose
ICDecompress
ICSendMessage
ICOpen
ICLocate
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
advapi32
RegEnumKeyW
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyW
RegSetValueW
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ