Static task
static1
Behavioral task
behavioral1
Sample
09a20f75c7d8aa8ee7a087352ed038c3478942af673d2b816636513b453b82ef.exe
Resource
win7-20221111-en
General
-
Target
09a20f75c7d8aa8ee7a087352ed038c3478942af673d2b816636513b453b82ef
-
Size
101KB
-
MD5
6a9a28883b6c04887dc64a3c02ed2377
-
SHA1
828831477a49fdff24129cdcd081d5796cf36e69
-
SHA256
09a20f75c7d8aa8ee7a087352ed038c3478942af673d2b816636513b453b82ef
-
SHA512
ae247b1a33f0ca71dd76ae88cde6eecc4c78ba7086ce683722f977cc4c3f560adcf3b4de07e232ae73fc4fe35c090bcdd09a067677d09497f31352ac6304186a
-
SSDEEP
1536:xsWoZ+xIFp2dPG0ix+uKI3T7tlX6xVcfqNQPLq2uNyXmUmX59+BVk3ZuEV9:bcyVG7xmI3Hj+VZQzq2ui22+3Zuc
Malware Config
Signatures
Files
-
09a20f75c7d8aa8ee7a087352ed038c3478942af673d2b816636513b453b82ef.exe windows x86
68e79d08898b8fbeb996f61039c0f1fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyW
RegSetValueExW
RegSetValueW
RegDeleteKeyW
RegCloseKey
RegCreateKeyW
ole32
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoTaskMemAlloc
StringFromGUID2
CoUninitialize
gdi32
GetPaletteEntries
SelectObject
GetStockObject
GetObjectW
PatBlt
GetTextExtentPoint32W
winmm
CloseDriver
waveInAddBuffer
OpenDriver
waveInReset
waveInOpen
mixerOpen
mixerSetControlDetails
waveInStop
mixerGetLineInfoW
mixerGetID
SendDriverMessage
waveInClose
waveInUnprepareHeader
mixerGetControlDetailsW
mixerClose
waveInPrepareHeader
mixerGetLineControlsW
waveInStart
waveInGetDevCapsW
kernel32
InterlockedDecrement
lstrcpynW
WideCharToMultiByte
CloseHandle
GetDiskFreeSpaceW
SetFilePointer
CreateThread
WaitForMultipleObjects
CreateEventW
LeaveCriticalSection
QueryPerformanceCounter
lstrcmpW
GlobalFree
GetProcAddress
GetLastError
PostQueuedCompletionStatus
SetEndOfFile
ReleaseSemaphore
HeapFree
lstrcpyA
lstrlenW
GetProfileIntA
SetEvent
GetCurrentProcess
VirtualFree
WriteFile
GetProcessHeap
InterlockedExchange
GetCurrentThread
FreeLibrary
GetQueuedCompletionStatus
GetSystemInfo
GlobalLock
GetStartupInfoA
GetSystemTimeAsFileTime
lstrlenA
InitializeCriticalSection
SetLastError
SetThreadPriority
GetThreadPriority
GlobalHandle
LoadLibraryW
CreateSemaphoreW
WaitForSingleObject
GlobalUnlock
GetVersionExW
GlobalAlloc
InterlockedIncrement
SetUnhandledExceptionFilter
HeapAlloc
MulDiv
DeleteCriticalSection
EnterCriticalSection
IsBadReadPtr
IsBadCodePtr
GetTickCount
GetFullPathNameW
CreateFileW
GlobalMemoryStatus
lstrcpyW
ResetEvent
GetFileSize
GetFileAttributesW
GetCurrentProcessId
DeleteFileW
IsBadWritePtr
ReadFile
GetModuleFileNameA
GetACP
lstrcmpiW
CreateIoCompletionPort
MultiByteToWideChar
GetPrivateProfileStringW
msvfw32
ICOpen
ICCompress
ICSendMessage
ICLocate
ICDecompress
ICClose
ICGetInfo
user32
PeekMessageW
SetDlgItemInt
SetWindowLongW
GetClientRect
IsWindow
GetDlgItemInt
SetDlgItemTextW
DestroyWindow
DispatchMessageW
SendMessageW
CheckRadioButton
GetDesktopWindow
CreateDialogParamW
ClientToScreen
GetWindowRect
LoadStringW
DefWindowProcW
MoveWindow
EnableWindow
GetAsyncKeyState
LoadCursorW
IsWindowVisible
IsRectEmpty
ShowWindow
GetWindowLongW
TranslateMessage
CheckDlgButton
SetCursor
ReleaseDC
wsprintfW
GetDlgItem
GetDC
InvalidateRect
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ