Static task
static1
Behavioral task
behavioral1
Sample
6061ab1f0a20da410c866d9dfd1d65975d6b5f52d6c2c851e7405aad7a117335.exe
Resource
win7-20221111-en
General
-
Target
6061ab1f0a20da410c866d9dfd1d65975d6b5f52d6c2c851e7405aad7a117335
-
Size
101KB
-
MD5
3b8cb635d4fe925b08e87da4fa01e0bb
-
SHA1
1bbd10c78eb263adf3a956a513c18ac84accd4a9
-
SHA256
6061ab1f0a20da410c866d9dfd1d65975d6b5f52d6c2c851e7405aad7a117335
-
SHA512
ff1fdd7a404db8bb4f4c8a517f0d3946fd73e18620cfab441c9e8777982f23184e972df5b3d0ea59b16a0a0096fd6433ace7692a5a0c7ae450881085d360ca4f
-
SSDEEP
1536:xKayXsNQShQ90y3O70psf6Q0+vaJ5u6m3CdM3IZDdYILFk6:xKseSHfGiaJ5uhMM3IZdLF
Malware Config
Signatures
Files
-
6061ab1f0a20da410c866d9dfd1d65975d6b5f52d6c2c851e7405aad7a117335.exe windows x86
9d9e1150608ae6e0c95e6f1ba2339906
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
QueryPerformanceCounter
HeapFree
MulDiv
InterlockedIncrement
GetDiskFreeSpaceW
WaitForSingleObject
IsBadReadPtr
GetSystemDefaultLangID
GlobalHandle
GetModuleFileNameA
GetFullPathNameW
GetSystemTimeAsFileTime
InitializeCriticalSection
GetStartupInfoA
DeleteFileW
ReadFile
GetProfileIntA
CreateSemaphoreW
CreateThread
InterlockedExchange
GetCurrentThread
ResetEvent
GetCurrentProcessId
WaitForMultipleObjects
ReleaseSemaphore
lstrlenA
DeleteCriticalSection
lstrcmpiW
SetUnhandledExceptionFilter
InterlockedDecrement
WriteFile
FreeLibrary
lstrcpynW
GetQueuedCompletionStatus
lstrcpyA
lstrcmpW
SetEndOfFile
EnterCriticalSection
GlobalUnlock
IsBadWritePtr
GlobalLock
GetProcessHeap
MultiByteToWideChar
GlobalMemoryStatus
GetSystemInfo
VirtualFree
CreateIoCompletionPort
CreateEventW
SetFilePointer
GetPrivateProfileStringW
GlobalFree
GetTickCount
WideCharToMultiByte
lstrcpyW
GetCurrentProcess
lstrlenW
GlobalAlloc
GetThreadPriority
GetProcAddress
LoadLibraryW
CreateFileW
GetVersionExW
HeapAlloc
LeaveCriticalSection
GetFileAttributesW
SetThreadPriority
CloseHandle
GetFileSize
GetLastError
PostQueuedCompletionStatus
SetEvent
IsBadCodePtr
ole32
CoTaskMemFree
CoFreeUnusedLibraries
CoTaskMemAlloc
CoUninitialize
CoInitialize
StringFromGUID2
CoCreateInstance
user32
CheckDlgButton
LoadStringW
IsRectEmpty
InvalidateRect
SetCursor
TranslateMessage
wsprintfW
ClientToScreen
LoadCursorW
GetAsyncKeyState
SetDlgItemTextW
EnableWindow
ReleaseDC
GetWindowRect
SetWindowLongW
MoveWindow
GetWindowLongW
GetDlgItem
CreateDialogParamW
GetDlgItemInt
DestroyWindow
PeekMessageW
SendMessageW
CheckRadioButton
SetDlgItemInt
DefWindowProcW
GetDC
DispatchMessageW
GetClientRect
IsWindowVisible
IsWindow
ShowWindow
GetDesktopWindow
msvfw32
ICLocate
ICCompress
ICDecompress
ICOpen
ICSendMessage
ICClose
ICGetInfo
winmm
waveInGetDevCapsW
waveInAddBuffer
mixerGetLineInfoW
waveInReset
SendDriverMessage
mixerGetLineControlsW
mixerOpen
waveInUnprepareHeader
waveInOpen
mixerGetControlDetailsW
waveInStart
waveInStop
waveInPrepareHeader
mixerSetControlDetails
mixerGetID
mixerClose
OpenDriver
waveInClose
CloseDriver
advapi32
RegSetValueW
RegOpenKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyW
RegCreateKeyW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
gdi32
SelectObject
PatBlt
GetObjectW
GetPaletteEntries
GetTextExtentPoint32W
GetStockObject
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ