Static task
static1
Behavioral task
behavioral1
Sample
9bab83b791b6fd32204f910332a5caefaf39c72005c1690109b9bc2c701a556b.exe
Resource
win7-20220901-en
General
-
Target
9bab83b791b6fd32204f910332a5caefaf39c72005c1690109b9bc2c701a556b
-
Size
101KB
-
MD5
835ab7e696584fd7920476e32e0262fb
-
SHA1
e0201af1e70e2b3218d9d092e3e5aa76235b2779
-
SHA256
9bab83b791b6fd32204f910332a5caefaf39c72005c1690109b9bc2c701a556b
-
SHA512
6d433f918c15b22d973909dfe601b64f89a325256dbd6f7cbfaebe2ad09c743ce638663cf85264b3c44ad923d067f49f21f3cefaf038426adb5b0752daf33cc8
-
SSDEEP
1536:BI1EeTvaD9SduyNbxVUcPR3v21gH1EbjcoEbC2cAWH1qTIXtZyGGVjhSpfQY:ybT5NtJf2Y146CGIdZyG8cpl
Malware Config
Signatures
Files
-
9bab83b791b6fd32204f910332a5caefaf39c72005c1690109b9bc2c701a556b.exe windows x86
f0a7d31281275511093419d4a84aebf6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
lstrcmpW
GetProfileIntA
LoadLibraryW
IsBadWritePtr
GetTickCount
GetQueuedCompletionStatus
GetStartupInfoA
SetUnhandledExceptionFilter
GetVersionExW
CloseHandle
GetSystemTimeAsFileTime
VirtualFree
FreeLibrary
GetPrivateProfileStringW
lstrlenA
DeleteCriticalSection
lstrcpyA
SetThreadPriority
GetSystemDefaultLangID
lstrcpynW
GlobalAlloc
GetFileSize
GetProcAddress
GetCurrentThread
GetLastError
GetSystemInfo
DeleteFileW
lstrcmpiW
MulDiv
CreateFileW
SetEndOfFile
IsBadCodePtr
InterlockedExchange
InitializeCriticalSection
SetFilePointer
GlobalMemoryStatus
IsBadReadPtr
GetCurrentProcessId
HeapAlloc
WriteFile
InterlockedDecrement
GlobalHandle
lstrlenW
HeapFree
ReleaseSemaphore
GetCurrentProcess
GetModuleFileNameA
GetACP
WaitForSingleObject
lstrcpyW
GlobalLock
InterlockedIncrement
CreateIoCompletionPort
MultiByteToWideChar
LeaveCriticalSection
GetFullPathNameW
SetEvent
CreateSemaphoreW
ResetEvent
WideCharToMultiByte
PostQueuedCompletionStatus
GetThreadPriority
WaitForMultipleObjects
CreateThread
QueryPerformanceCounter
GetDiskFreeSpaceW
GetFileAttributesW
CreateEventW
GlobalFree
GlobalUnlock
EnterCriticalSection
GetProcessHeap
user32
LoadCursorW
SetCursor
SetDlgItemTextW
GetDC
GetWindowRect
GetDesktopWindow
CheckRadioButton
TranslateMessage
EnableWindow
InvalidateRect
CreateDialogParamW
GetDlgItemInt
GetWindowLongW
CheckDlgButton
IsWindowVisible
DefWindowProcW
SetWindowLongW
DestroyWindow
SetDlgItemInt
GetClientRect
SendMessageW
ClientToScreen
wsprintfW
GetDlgItem
ShowWindow
GetAsyncKeyState
PeekMessageW
DispatchMessageW
ReleaseDC
IsWindow
LoadStringW
IsRectEmpty
MoveWindow
advapi32
RegEnumKeyExW
RegOpenKeyW
RegQueryValueExW
RegSetValueW
RegCloseKey
RegDeleteKeyW
RegEnumKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyW
winmm
CloseDriver
waveInReset
waveInUnprepareHeader
mixerSetControlDetails
waveInAddBuffer
waveInPrepareHeader
mixerClose
mixerGetControlDetailsW
waveInStop
SendDriverMessage
waveInGetDevCapsW
mixerGetLineInfoW
waveInStart
mixerOpen
OpenDriver
waveInOpen
mixerGetID
mixerGetLineControlsW
waveInClose
gdi32
GetTextExtentPoint32W
GetObjectW
PatBlt
SelectObject
GetPaletteEntries
GetStockObject
ole32
CoFreeUnusedLibraries
StringFromGUID2
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
msvfw32
ICClose
ICSendMessage
ICGetInfo
ICLocate
ICOpen
ICDecompress
ICCompress
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ