Static task
static1
Behavioral task
behavioral1
Sample
128e9d27152464f683af7214c20084b00dbac1e061d82c3c0fd18e48e22dce19.exe
Resource
win7-20221111-en
General
-
Target
128e9d27152464f683af7214c20084b00dbac1e061d82c3c0fd18e48e22dce19
-
Size
102KB
-
MD5
d1954c30606871cf6ff67aa6ab40a828
-
SHA1
74111cdcf87c8d76e464d4fc59ba1844114034bb
-
SHA256
128e9d27152464f683af7214c20084b00dbac1e061d82c3c0fd18e48e22dce19
-
SHA512
d6c9ad78ea54a7e5f402c8b72ce6ab46f5445a87f5c28e25de6da5636bd59385b98a4dc56cae592bb03354de5ec5fd6ef8962dc63be9000cf1c299b389857c43
-
SSDEEP
3072:0FiV0ug1V8wYXyeWcCzC//c7MxNGvPOgUI:DWuEV/pcC8NxNh
Malware Config
Signatures
Files
-
128e9d27152464f683af7214c20084b00dbac1e061d82c3c0fd18e48e22dce19.exe windows x86
584d499d7672c0c168963618bd532c39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnableWindow
InvalidateRect
wsprintfW
ClientToScreen
IsWindowVisible
GetWindowLongW
TranslateMessage
DestroyWindow
PeekMessageW
GetDC
GetWindowRect
IsRectEmpty
IsWindow
GetDlgItem
SetDlgItemTextW
LoadCursorW
GetClientRect
CheckDlgButton
DefWindowProcW
CheckRadioButton
SendMessageW
GetDlgItemInt
MoveWindow
ReleaseDC
DispatchMessageW
GetAsyncKeyState
SetCursor
ShowWindow
SetDlgItemInt
CreateDialogParamW
GetDesktopWindow
LoadStringW
SetWindowLongW
gdi32
GetPaletteEntries
SelectObject
PatBlt
GetStockObject
GetTextExtentPoint32W
GetObjectW
kernel32
WaitForMultipleObjects
ReadFile
HeapAlloc
GlobalAlloc
GetTickCount
DeleteCriticalSection
IsBadWritePtr
SetFilePointer
VirtualFree
lstrlenA
GetSystemDefaultLangID
GetCurrentProcessId
ResetEvent
CreateFileW
lstrlenW
CreateIoCompletionPort
WriteFile
GetSystemInfo
GetCurrentThread
lstrcpynW
lstrcmpiW
InitializeCriticalSection
LoadLibraryW
CreateSemaphoreW
GetLastError
GetFullPathNameW
SetEvent
lstrcpyA
GetProcessHeap
HeapFree
SetUnhandledExceptionFilter
PostQueuedCompletionStatus
GetCurrentProcess
CreateThread
EnterCriticalSection
ReleaseSemaphore
CloseHandle
lstrcmpW
InterlockedIncrement
GetProfileIntA
MultiByteToWideChar
CreateEventW
MulDiv
GetACP
IsBadReadPtr
LeaveCriticalSection
IsBadCodePtr
WideCharToMultiByte
GetProcAddress
GetDiskFreeSpaceW
InterlockedDecrement
lstrcpyW
GetFileAttributesW
GetModuleFileNameA
GlobalUnlock
GlobalFree
GetStartupInfoA
GlobalLock
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetFileSize
SetThreadPriority
GlobalMemoryStatus
GetVersionExW
WaitForSingleObject
GetQueuedCompletionStatus
DeleteFileW
GetPrivateProfileStringW
FreeLibrary
SetEndOfFile
GetThreadPriority
GlobalHandle
InterlockedExchange
ole32
CoTaskMemAlloc
CoUninitialize
StringFromGUID2
CoInitialize
CoTaskMemFree
CoCreateInstance
CoFreeUnusedLibraries
winmm
mixerGetLineInfoW
mixerGetControlDetailsW
mixerGetID
CloseDriver
waveInOpen
waveInReset
OpenDriver
waveInPrepareHeader
waveInGetDevCapsW
mixerGetLineControlsW
waveInAddBuffer
mixerOpen
waveInStart
SendDriverMessage
waveInClose
mixerSetControlDetails
waveInStop
waveInUnprepareHeader
mixerClose
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
msvfw32
ICGetInfo
ICCompress
ICLocate
ICDecompress
ICSendMessage
ICClose
ICOpen
advapi32
RegSetValueW
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
RegDeleteKeyW
RegEnumKeyW
RegSetValueExW
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ