Static task
static1
Behavioral task
behavioral1
Sample
5363cee0556f86ab14172740a0704b7046713dc94e9912dc4e3124231f9082fc.exe
Resource
win7-20220812-en
General
-
Target
5363cee0556f86ab14172740a0704b7046713dc94e9912dc4e3124231f9082fc
-
Size
100KB
-
MD5
f6bef7eb92867a7923eee5cd15883357
-
SHA1
6a0548075ea416d8d37b58deb95a47255f9f911a
-
SHA256
5363cee0556f86ab14172740a0704b7046713dc94e9912dc4e3124231f9082fc
-
SHA512
8a62692e663c19d5adf1c702f98fc38ec9685173cff4d9211a04f9e365b25f52c5877d087058262339d370bb1bee1d36aa2703439ed0ec444499cd7dbba5365f
-
SSDEEP
3072:jniRy+oEGONEb27Bk2yOlaKv9Gsi7A/BeFDW1Zi3:zYP7GONflI1si8/BeEP
Malware Config
Signatures
Files
-
5363cee0556f86ab14172740a0704b7046713dc94e9912dc4e3124231f9082fc.exe windows x86
975bafa28207fc4157708009d9f7883c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetLastError
FreeLibrary
IsBadReadPtr
CreateThread
lstrlenW
LoadLibraryW
lstrcpyW
GetFileAttributesW
GlobalLock
GetThreadPriority
CreateFileW
MultiByteToWideChar
GlobalHandle
OutputDebugStringA
ReleaseSemaphore
CloseHandle
GetTickCount
LeaveCriticalSection
SetEndOfFile
SetEvent
EnterCriticalSection
IsBadHugeReadPtr
GetProcessHeap
lstrcpyA
lstrcmpW
InterlockedExchange
lstrlenA
PostQueuedCompletionStatus
GlobalAlloc
WriteFile
GetCurrentProcess
HeapAlloc
WaitForSingleObject
IsBadCodePtr
GlobalUnlock
GetVersionExW
QueryPerformanceCounter
GetFullPathNameW
lstrcpynW
CreateSemaphoreW
GetCurrentProcessId
InterlockedIncrement
GetQueuedCompletionStatus
GlobalMemoryStatus
GetSystemTimeAsFileTime
ResetEvent
CreateEventW
VirtualFree
InitializeCriticalSection
SetThreadPriority
SetFilePointer
GetPrivateProfileStringW
GetFileSize
WaitForMultipleObjects
IsBadWritePtr
SetUnhandledExceptionFilter
DeleteFileW
GetSystemInfo
GetDiskFreeSpaceW
ReadFile
MulDiv
GetCPInfo
DeleteCriticalSection
CreateIoCompletionPort
GetSystemDefaultLangID
GlobalFree
HeapFree
GetProfileIntA
WideCharToMultiByte
lstrcmpiW
GetEnvironmentStringsW
GetStartupInfoA
GetModuleFileNameA
InterlockedDecrement
msvcrt
_purecall
wcslen
??2@YAPAXI@Z
_except_handler3
_ftol
??3@YAXPAX@Z
advapi32
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyW
RegCloseKey
RegSetValueW
RegEnumKeyW
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
winmm
waveInPrepareHeader
mixerGetLineInfoW
waveInStart
mixerClose
mixerOpen
mixerGetID
waveInOpen
waveInClose
mixerGetControlDetailsW
waveInReset
SendDriverMessage
OpenDriver
waveInUnprepareHeader
waveInStop
waveInGetDevCapsW
CloseDriver
waveInAddBuffer
mixerSetControlDetails
mixerGetLineControlsW
user32
GetDlgItemInt
CheckDlgButton
DispatchMessageW
CreateDialogParamW
EnableWindow
GetClientRect
GetWindowLongW
GetWindowRect
DefWindowProcW
SetDlgItemInt
ShowWindow
SetDlgItemTextW
ReleaseDC
GetDlgItem
GetAsyncKeyState
GetDesktopWindow
TranslateMessage
CheckRadioButton
SendMessageW
IsWindow
IsRectEmpty
wsprintfW
LoadStringW
InvalidateRect
ClientToScreen
DestroyWindow
SetCursor
GetDC
SetWindowLongW
IsWindowVisible
MoveWindow
LoadCursorW
PeekMessageW
ole32
CoCreateInstance
CoTaskMemFree
CoInitialize
StringFromGUID2
CoFreeUnusedLibraries
CoUninitialize
CoTaskMemAlloc
gdi32
GetTextExtentPoint32W
GetObjectW
PatBlt
GetPaletteEntries
SelectObject
GetStockObject
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
msvfw32
ICLocate
ICDecompress
ICOpen
ICSendMessage
ICClose
ICGetInfo
ICCompress
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ