Static task
static1
Behavioral task
behavioral1
Sample
5039928c9396d7468f9654bb8bc8bcede0a526ec0069f454c3fef8e7492ed2a6.exe
Resource
win7-20221111-en
General
-
Target
5039928c9396d7468f9654bb8bc8bcede0a526ec0069f454c3fef8e7492ed2a6
-
Size
103KB
-
MD5
36861b4cfd65da6978e45a1ade0a1e93
-
SHA1
2f3a9fe8a94a7f8035ff508e634dd446597bf9d6
-
SHA256
5039928c9396d7468f9654bb8bc8bcede0a526ec0069f454c3fef8e7492ed2a6
-
SHA512
c89b0af93c30c568892ab4a87e6c751a49ee3486e3eb30fabbc738ffd15cfd3f8805b0ba70a1495a5e889cbb0854395e9ecbff54f91010cd0fca41d5f2b52b91
-
SSDEEP
3072:X4OS5gVDXKR3eUm6KSPpCdnYrrtX+GJimNYCnn:X1DlUm6KSkdngXImN
Malware Config
Signatures
Files
-
5039928c9396d7468f9654bb8bc8bcede0a526ec0069f454c3fef8e7492ed2a6.exe windows x86
55b22fa2322121f3b10f16861f662879
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
GlobalHandle
GetVersionExW
LeaveCriticalSection
GetProcAddress
CreateFileW
GlobalLock
GlobalAlloc
InterlockedExchange
DeleteFileW
CreateEventW
GetFileAttributesW
lstrcmpW
CloseHandle
CreateIoCompletionPort
GetDiskFreeSpaceW
SetThreadPriority
GetCurrentProcess
GetThreadPriority
GetACP
GlobalMemoryStatus
ReadFile
CreateThread
SetEvent
SetEndOfFile
GetProcessHeap
lstrlenA
IsBadWritePtr
SetFilePointer
WaitForSingleObject
QueryPerformanceCounter
InterlockedIncrement
WaitForMultipleObjects
GetFullPathNameW
GetCurrentProcessId
GlobalFree
lstrcpynW
GetSystemDefaultLangID
GetQueuedCompletionStatus
DeleteCriticalSection
ResetEvent
GetModuleFileNameA
EnterCriticalSection
MultiByteToWideChar
LoadLibraryW
SetUnhandledExceptionFilter
HeapAlloc
MulDiv
CreateSemaphoreW
GetStartupInfoA
GlobalUnlock
GetLastError
GetSystemInfo
WideCharToMultiByte
IsBadCodePtr
WriteFile
lstrlenW
IsBadReadPtr
GetTickCount
lstrcmpiW
InterlockedDecrement
GetFileSize
GetProfileIntA
VirtualFree
GetSystemTimeAsFileTime
lstrcpyW
lstrcpyA
GetCurrentThread
FreeLibrary
InitializeCriticalSection
PostQueuedCompletionStatus
GetPrivateProfileStringW
ReleaseSemaphore
ole32
StringFromGUID2
CoTaskMemAlloc
CoFreeUnusedLibraries
CoUninitialize
CoTaskMemFree
CoInitialize
CoCreateInstance
user32
TranslateMessage
SendMessageW
GetWindowRect
InvalidateRect
LoadCursorW
MoveWindow
GetDlgItemInt
GetAsyncKeyState
SetWindowLongW
GetWindowLongW
ReleaseDC
DispatchMessageW
ShowWindow
GetDC
SetDlgItemTextW
CheckDlgButton
DefWindowProcW
CheckRadioButton
GetClientRect
IsWindowVisible
IsWindow
CreateDialogParamW
LoadStringW
PeekMessageW
ClientToScreen
EnableWindow
SetDlgItemInt
GetDlgItem
GetDesktopWindow
DestroyWindow
IsRectEmpty
wsprintfW
SetCursor
advapi32
RegEnumKeyW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExW
RegSetValueW
RegEnumKeyExW
RegCreateKeyW
RegSetValueExW
winmm
waveInPrepareHeader
mixerGetLineControlsW
OpenDriver
waveInAddBuffer
waveInStop
waveInReset
SendDriverMessage
waveInUnprepareHeader
mixerSetControlDetails
waveInGetDevCapsW
CloseDriver
mixerGetControlDetailsW
mixerGetLineInfoW
waveInClose
mixerGetID
waveInOpen
mixerClose
waveInStart
mixerOpen
msvfw32
ICOpen
ICClose
ICDecompress
ICSendMessage
ICGetInfo
ICCompress
ICLocate
gdi32
GetPaletteEntries
GetObjectW
GetStockObject
GetTextExtentPoint32W
SelectObject
PatBlt
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ