Static task
static1
Behavioral task
behavioral1
Sample
4b2fa6c8dae9a2c49f2285d77d5fc93eef64ef9b93ca0f0764eea72af69f04bb.exe
Resource
win7-20221111-en
General
-
Target
4b2fa6c8dae9a2c49f2285d77d5fc93eef64ef9b93ca0f0764eea72af69f04bb
-
Size
102KB
-
MD5
44db55d456c07cda04b62a544c98c13f
-
SHA1
901e72e6776f9ac6fe3313f2b364c9b3d4ea8ebb
-
SHA256
4b2fa6c8dae9a2c49f2285d77d5fc93eef64ef9b93ca0f0764eea72af69f04bb
-
SHA512
bf5b2361697a7e2d7e13032645e194f6fd47dffeebf5551c0200af3fb1f92609e23e1e847b4223ba3f8feb9f7d8ab0ceca70cdafd70db153f6e5872c56715b7e
-
SSDEEP
3072:xlPsJJAleXOJhqMPaH+fMWL+Xb5dgG6sr6Fkz:rsJJ7XOJk8aH+kBdj
Malware Config
Signatures
Files
-
4b2fa6c8dae9a2c49f2285d77d5fc93eef64ef9b93ca0f0764eea72af69f04bb.exe windows x86
6aa59540c081a01d32c7e3c7ab9665b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
InterlockedDecrement
lstrcmpiW
GetPrivateProfileStringW
CreateSemaphoreW
lstrcpyA
GetACP
SetEvent
LoadLibraryW
SetThreadPriority
WaitForMultipleObjects
lstrcmpW
EnterCriticalSection
ReadFile
GetCurrentThread
WaitForSingleObject
QueryPerformanceCounter
GetFileSize
GetCurrentProcessId
lstrcpynW
GetProcAddress
GetStartupInfoA
lstrlenA
IsBadReadPtr
WideCharToMultiByte
SetFilePointer
GetVersionExW
GetCurrentProcess
GetSystemInfo
GetQueuedCompletionStatus
GetModuleFileNameA
PostQueuedCompletionStatus
lstrlenW
WriteFile
MultiByteToWideChar
GlobalUnlock
InterlockedExchange
CreateEventW
SetEndOfFile
GetFileAttributesW
InterlockedIncrement
GlobalAlloc
GlobalMemoryStatus
ReleaseSemaphore
GetTickCount
LeaveCriticalSection
CreateThread
lstrcpyW
CreateIoCompletionPort
GetDiskFreeSpaceW
MulDiv
DeleteCriticalSection
GetThreadPriority
VirtualFree
CloseHandle
IsBadCodePtr
GetLastError
GetProfileIntA
SetUnhandledExceptionFilter
GlobalHandle
HeapFree
GlobalLock
GlobalFree
CreateFileW
SetLastError
InitializeCriticalSection
ResetEvent
GetProcessHeap
HeapAlloc
GetFullPathNameW
GetSystemTimeAsFileTime
DeleteFileW
FreeLibrary
user32
GetDesktopWindow
PeekMessageW
DefWindowProcW
LoadStringW
CheckDlgButton
ReleaseDC
IsRectEmpty
GetDC
GetWindowRect
GetAsyncKeyState
CheckRadioButton
ShowWindow
GetWindowLongW
SetCursor
SetDlgItemTextW
wsprintfW
TranslateMessage
SetWindowLongW
EnableWindow
GetClientRect
SendMessageW
IsWindow
IsWindowVisible
GetDlgItemInt
DispatchMessageW
InvalidateRect
GetDlgItem
ClientToScreen
MoveWindow
DestroyWindow
LoadCursorW
SetDlgItemInt
CreateDialogParamW
winmm
waveInClose
mixerClose
mixerOpen
waveInStop
waveInStart
waveInPrepareHeader
waveInUnprepareHeader
SendDriverMessage
waveInOpen
waveInReset
mixerGetID
OpenDriver
waveInGetDevCapsW
waveInAddBuffer
CloseDriver
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetLineInfoW
advapi32
RegOpenKeyW
RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegEnumKeyW
RegDeleteKeyW
RegSetValueW
RegCreateKeyW
RegOpenKeyExW
RegSetValueExW
ole32
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoFreeUnusedLibraries
CoCreateInstance
CoUninitialize
CoInitialize
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
msvfw32
ICOpen
ICSendMessage
ICDecompress
ICLocate
ICCompress
ICClose
ICGetInfo
gdi32
PatBlt
GetPaletteEntries
GetObjectW
SelectObject
GetStockObject
GetTextExtentPoint32W
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ