Static task
static1
Behavioral task
behavioral1
Sample
1543d1e3345ec62b63e3ee7033b66180379c6780bfdc64f97b7af54eb2a1059b.exe
Resource
win7-20221111-en
General
-
Target
1543d1e3345ec62b63e3ee7033b66180379c6780bfdc64f97b7af54eb2a1059b
-
Size
103KB
-
MD5
ff6af111365e00d76121bf521c0d01f4
-
SHA1
edd14abe9626c6ff02f9feec1771ccbeb2167b73
-
SHA256
1543d1e3345ec62b63e3ee7033b66180379c6780bfdc64f97b7af54eb2a1059b
-
SHA512
7bce72014502e935229364731b714de9af94738ae3e726250913775381ea41e6c5ea04a1ceb85c0b32c0c905bf1f54a05cb5f67925782ab5b5f11f89557b5410
-
SSDEEP
3072:2NI18Iypa4vnCEnNWzby1Zu4TGjqrfQLl:MVU4v5N3M42N
Malware Config
Signatures
Files
-
1543d1e3345ec62b63e3ee7033b66180379c6780bfdc64f97b7af54eb2a1059b.exe windows x86
3ad00ef2c811c7dbe69bd7b13e97fe44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
SendDriverMessage
waveInClose
mixerGetControlDetailsW
mixerClose
waveInUnprepareHeader
waveInStart
mixerGetLineControlsW
OpenDriver
mixerGetLineInfoW
mixerSetControlDetails
waveInGetDevCapsW
waveInStop
waveInOpen
waveInPrepareHeader
mixerGetID
waveInAddBuffer
waveInReset
mixerOpen
CloseDriver
kernel32
GetSystemDefaultLangID
SetEndOfFile
DeleteFileW
GetTickCount
IsBadWritePtr
lstrcmpW
GetLastError
CreateEventW
IsBadReadPtr
CloseHandle
lstrcpynW
lstrcmpiW
GetModuleFileNameA
ReleaseSemaphore
GlobalAlloc
CreateThread
ResetEvent
CreateIoCompletionPort
GetCurrentProcess
GlobalFree
PostQueuedCompletionStatus
GetProfileIntA
GetThreadPriority
GetProcessHeap
ReadFile
InterlockedExchange
FreeLibrary
GlobalLock
InitializeCriticalSection
GetCurrentThread
WideCharToMultiByte
DeleteCriticalSection
GlobalUnlock
InterlockedIncrement
MulDiv
GetStartupInfoA
WriteFile
lstrlenA
GetPrivateProfileStringW
GlobalMemoryStatus
GetCurrentProcessId
SetUnhandledExceptionFilter
GetACP
GetFileAttributesW
VirtualFree
IsBadCodePtr
lstrlenW
WaitForSingleObject
HeapAlloc
CreateSemaphoreW
GetDiskFreeSpaceW
QueryPerformanceCounter
GetFullPathNameW
lstrcpyA
GetSystemTimeAsFileTime
SetFilePointer
GetVersionExW
WaitForMultipleObjects
lstrcpyW
SetThreadPriority
LoadLibraryW
CreateFileW
LeaveCriticalSection
GetQueuedCompletionStatus
SetEvent
GlobalHandle
InterlockedDecrement
GetSystemInfo
HeapFree
GetProcAddress
EnterCriticalSection
GetFileSize
MultiByteToWideChar
user32
LoadCursorW
MoveWindow
SetWindowLongW
DestroyWindow
DispatchMessageW
ShowWindow
LoadStringW
SetDlgItemInt
GetWindowLongW
InvalidateRect
CheckRadioButton
PeekMessageW
IsWindowVisible
EnableWindow
IsRectEmpty
GetDesktopWindow
SetCursor
DefWindowProcW
wsprintfW
CreateDialogParamW
GetAsyncKeyState
CheckDlgButton
GetDlgItemInt
SetDlgItemTextW
GetWindowRect
ClientToScreen
ReleaseDC
TranslateMessage
SendMessageW
IsWindow
GetDlgItem
GetDC
GetClientRect
msvfw32
ICGetInfo
ICOpen
ICCompress
ICSendMessage
ICClose
ICLocate
ICDecompress
gdi32
PatBlt
SelectObject
GetTextExtentPoint32W
GetStockObject
GetObjectW
GetPaletteEntries
advapi32
RegCreateKeyW
RegSetValueW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegEnumKeyExW
ole32
CoInitialize
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoTaskMemFree
StringFromGUID2
CoFreeUnusedLibraries
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ