Static task
static1
Behavioral task
behavioral1
Sample
5bd567fbf431c0af5e3ebc22697dd8cb0c51240c4c1df69079f69b98ea91335c.exe
Resource
win7-20220812-en
General
-
Target
5bd567fbf431c0af5e3ebc22697dd8cb0c51240c4c1df69079f69b98ea91335c
-
Size
102KB
-
MD5
68428233a18749232acb69f3bab069f0
-
SHA1
ee1e3c57235c5b3d0b73d69e70251ab9e0e21449
-
SHA256
5bd567fbf431c0af5e3ebc22697dd8cb0c51240c4c1df69079f69b98ea91335c
-
SHA512
cd561c626ae3016c88a7d3646a23c6e6a00838904cce539cb9cb802735620814b44f27c6614479dee90460cf0e6604e2ff2f86d59d35da24f1b3ca41c5540b57
-
SSDEEP
3072:eS2Zzu5QJPhmvwpFYFiRdpir97EEIL77hDxFtCDF:EMYFY4MnA77FIF
Malware Config
Signatures
Files
-
5bd567fbf431c0af5e3ebc22697dd8cb0c51240c4c1df69079f69b98ea91335c.exe windows x86
c63c2f84b05474735f28a933cc8369b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
ICClose
ICGetInfo
ICOpen
ICLocate
ICDecompress
ICSendMessage
ICCompress
winmm
OpenDriver
mixerGetLineControlsW
mixerClose
waveInOpen
waveInPrepareHeader
mixerSetControlDetails
SendDriverMessage
mixerGetControlDetailsW
waveInStart
waveInStop
waveInReset
mixerGetID
waveInUnprepareHeader
waveInClose
waveInGetDevCapsW
waveInAddBuffer
mixerOpen
CloseDriver
mixerGetLineInfoW
kernel32
WriteFile
lstrcpyA
GetCurrentProcess
GetModuleFileNameA
LeaveCriticalSection
lstrlenA
SetFilePointer
GetProcessHeap
SetThreadPriority
GlobalAlloc
HeapFree
GetThreadPriority
LoadLibraryW
HeapAlloc
CreateThread
CreateSemaphoreW
ReadFile
GetPrivateProfileStringW
GetSystemDefaultLangID
GetFileSize
lstrcpyW
VirtualFree
GlobalUnlock
SetEvent
SetUnhandledExceptionFilter
GetCurrentProcessId
CreateEventW
EnterCriticalSection
DeleteCriticalSection
InterlockedIncrement
WideCharToMultiByte
IsBadCodePtr
InterlockedDecrement
GlobalFree
GlobalLock
SetEndOfFile
GetLastError
lstrcpynW
IsBadHugeReadPtr
GlobalHandle
lstrlenW
GetEnvironmentStringsW
GetStartupInfoA
InterlockedExchange
IsBadWritePtr
GetProfileIntA
MulDiv
GetCPInfo
PostQueuedCompletionStatus
lstrcmpiW
IsBadReadPtr
GetSystemTimeAsFileTime
ReleaseSemaphore
FreeLibrary
lstrcmpW
CloseHandle
GetFullPathNameW
GetQueuedCompletionStatus
MultiByteToWideChar
GetFileAttributesW
GlobalMemoryStatus
WaitForSingleObject
GetSystemInfo
QueryPerformanceCounter
OutputDebugStringA
GetCurrentThread
GetTickCount
CreateIoCompletionPort
ResetEvent
InitializeCriticalSection
GetDiskFreeSpaceW
GetVersionExW
DeleteFileW
WaitForMultipleObjects
CreateFileW
user32
PeekMessageW
TranslateMessage
CreateDialogParamW
GetWindowLongW
IsWindowVisible
ShowWindow
IsRectEmpty
LoadStringW
SetDlgItemTextW
GetDlgItem
SetDlgItemInt
ClientToScreen
LoadCursorW
InvalidateRect
GetAsyncKeyState
wsprintfW
MoveWindow
DefWindowProcW
GetWindowRect
CheckRadioButton
SendMessageW
GetDlgItemInt
CheckDlgButton
IsWindow
GetDesktopWindow
GetClientRect
DestroyWindow
EnableWindow
GetDC
SetWindowLongW
DispatchMessageW
SetCursor
ReleaseDC
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
advapi32
RegEnumKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueW
RegCreateKeyW
RegEnumKeyExW
RegOpenKeyW
RegSetValueExW
RegDeleteKeyW
ole32
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoUninitialize
msvcrt
_except_handler3
wcslen
??3@YAXPAX@Z
_ftol
??2@YAPAXI@Z
_purecall
gdi32
GetStockObject
GetObjectW
SelectObject
GetPaletteEntries
PatBlt
GetTextExtentPoint32W
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ