Static task
static1
Behavioral task
behavioral1
Sample
8770117d4628e01d0417bca30a2074515dd553d37a9ffbd8d3bc409e133ad478.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8770117d4628e01d0417bca30a2074515dd553d37a9ffbd8d3bc409e133ad478.exe
Resource
win10v2004-20220812-en
General
-
Target
8770117d4628e01d0417bca30a2074515dd553d37a9ffbd8d3bc409e133ad478
-
Size
344KB
-
MD5
07ff630aa9044483290407b5e731cdc0
-
SHA1
30ae4471a2cda23497f65d7a1e92b4bba4887dc9
-
SHA256
8770117d4628e01d0417bca30a2074515dd553d37a9ffbd8d3bc409e133ad478
-
SHA512
b3e000eaee0fb299a4c91ded2077f4c53a175bca2b3fbcb8574603affffae0fb7cc1705be4e1274ce0aadd558b9dbecd277070c7c3881d5ea3a87c99c4708975
-
SSDEEP
6144:JWeSHcuqdqYOqE0mdJaf3iHueQfrYdDqTVlXfJ1ppPiO11TUZclWlYZkaPKECw:Jxb5EYpE0mdJOfYDKlXxXpjVka
Malware Config
Signatures
Files
-
8770117d4628e01d0417bca30a2074515dd553d37a9ffbd8d3bc409e133ad478.exe windows x86
e13e019ddde66ec5c1271c4422da6955
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
ddraw
DirectDrawEnumerateA
DirectDrawCreate
dsound
ord1
dinput
DirectInputCreateA
winmm
timeGetTime
kernel32
FindFirstFileA
GetFullPathNameA
GetCurrentProcess
CreateDirectoryA
UnhandledExceptionFilter
GetDriveTypeA
GetCurrentDirectoryA
HeapSize
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
TerminateProcess
CloseHandle
WriteFile
ReadFile
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetProcAddress
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
DeleteFileA
GetLastError
RtlUnwind
RaiseException
HeapFree
HeapAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
CreateFileA
FlushFileBuffers
SetStdHandle
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
QueryPerformanceCounter
LoadLibraryA
LCMapStringA
GetModuleFileNameA
Sleep
GetCommandLineA
SetPriorityClass
LCMapStringW
SetEndOfFile
QueryPerformanceFrequency
FindClose
user32
GetAsyncKeyState
SendDlgItemMessageA
GetDlgItemTextA
EndDialog
ScreenToClient
CreateWindowExA
EnableWindow
SendMessageA
LoadIconA
LoadCursorA
CheckDlgButton
RegisterClassExA
LoadAcceleratorsA
GetCursorPos
GetDlgItem
ShowWindow
UpdateWindow
SetFocus
TranslateAcceleratorA
GetMessageA
PostQuitMessage
DefWindowProcA
BeginPaint
EndPaint
PostMessageA
SetMenuItemInfoA
KillTimer
SetCursor
SetForegroundWindow
GetSystemMetrics
SetRect
GetWindowLongA
AdjustWindowRectEx
SetWindowLongA
SetMenu
SetWindowPos
GetWindowRect
SetTimer
DialogBoxParamA
MessageBoxA
PeekMessageA
TranslateMessage
DispatchMessageA
GetSystemMenu
EnableMenuItem
DeleteMenu
AppendMenuA
DrawMenuBar
GetMenu
GetSubMenu
CheckMenuRadioItem
GetMenuItemCount
GetMenuStringA
GetClientRect
GetDC
ReleaseDC
GetForegroundWindow
SetWindowTextA
GetWindowTextA
GetParent
SetCursorPos
ClientToScreen
IsDlgButtonChecked
gdi32
CreatePalette
GetStockObject
CreateCompatibleDC
CreateDIBSection
BitBlt
SetDIBColorTable
AnimatePalette
SetPaletteEntries
RealizePalette
DeleteObject
SelectObject
DeleteDC
SelectPalette
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegCloseKey
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
shell32
DragQueryFileA
DragAcceptFiles
ShellExecuteA
wsock32
accept
connect
WSAGetLastError
socket
htonl
bind
WSAStartup
WSACleanup
WSAAsyncSelect
recv
shutdown
closesocket
ioctlsocket
listen
send
Sections
.text Size: 288KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ