Static task
static1
Behavioral task
behavioral1
Sample
a568911ff164840623560d1a36a012b925636714231eb771572a9074689f74d3.exe
Resource
win7-20220812-en
General
-
Target
a568911ff164840623560d1a36a012b925636714231eb771572a9074689f74d3
-
Size
100KB
-
MD5
2d383d9a67131709f755f1268119d428
-
SHA1
312adb06b358a5e893fb69ff6737f86dd6ef909c
-
SHA256
a568911ff164840623560d1a36a012b925636714231eb771572a9074689f74d3
-
SHA512
74b21305947321ca10a08c68fa8107b416decd9c3b352125fcd03d6753d594c3aac4707c9f29a4b64f9060508659c423fda375daf3c78cc071a95dc5d109df2b
-
SSDEEP
3072:YACnoUKWTX9GxGWMVtMYDOuZ5p9boqR1g:YAzWT4XMVtM3uZ5pNng
Malware Config
Signatures
Files
-
a568911ff164840623560d1a36a012b925636714231eb771572a9074689f74d3.exe windows x86
58a2d784c7dbed64855933c8cdf3b02e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
DeleteCriticalSection
GetSystemInfo
OutputDebugStringA
CloseHandle
GetProfileIntA
ResetEvent
SetFilePointer
GetDiskFreeSpaceW
GetPrivateProfileStringW
CreateEventW
VirtualFree
GlobalAlloc
GetSystemDefaultLangID
WaitForSingleObject
GlobalHandle
GetCPInfo
GetFullPathNameW
GetProcessHeap
HeapAlloc
CreateThread
GetVersionExW
lstrlenW
InterlockedDecrement
IsBadCodePtr
InitializeCriticalSection
GetSystemTimeAsFileTime
InterlockedExchange
GetCurrentProcess
GetCurrentThread
SetUnhandledExceptionFilter
GetLastError
GetEnvironmentStringsW
GetFileSize
IsBadWritePtr
WaitForMultipleObjects
FreeLibrary
lstrcpyA
QueryPerformanceCounter
lstrlenA
EnterCriticalSection
InterlockedIncrement
GetTickCount
PostQueuedCompletionStatus
GetStartupInfoA
GetCurrentProcessId
SetEvent
IsBadReadPtr
WriteFile
CreateFileW
GlobalFree
lstrcmpiW
GlobalMemoryStatus
GetQueuedCompletionStatus
CreateSemaphoreW
IsBadHugeReadPtr
CreateIoCompletionPort
DeleteFileW
HeapFree
ReadFile
GlobalUnlock
ReleaseSemaphore
SetThreadPriority
WideCharToMultiByte
lstrcpyW
MulDiv
LeaveCriticalSection
GetFileAttributesW
LoadLibraryW
lstrcmpW
lstrcpynW
GetModuleFileNameA
MultiByteToWideChar
SetEndOfFile
GetThreadPriority
msvfw32
ICClose
ICCompress
ICOpen
ICDecompress
ICGetInfo
ICLocate
ICSendMessage
user32
GetClientRect
ShowWindow
InvalidateRect
LoadStringW
IsRectEmpty
LoadCursorW
SetCursor
wsprintfW
SetDlgItemTextW
CreateDialogParamW
DefWindowProcW
SendMessageW
GetDC
GetWindowRect
GetWindowLongW
DispatchMessageW
SetDlgItemInt
IsWindowVisible
GetAsyncKeyState
TranslateMessage
ReleaseDC
MoveWindow
IsWindow
CheckDlgButton
EnableWindow
GetDlgItemInt
SetWindowLongW
DestroyWindow
GetDesktopWindow
CheckRadioButton
PeekMessageW
GetDlgItem
ClientToScreen
winmm
waveInUnprepareHeader
mixerGetID
mixerGetLineControlsW
CloseDriver
mixerSetControlDetails
waveInClose
waveInReset
waveInAddBuffer
waveInGetDevCapsW
mixerGetLineInfoW
mixerClose
SendDriverMessage
waveInOpen
waveInPrepareHeader
OpenDriver
waveInStart
mixerGetControlDetailsW
mixerOpen
waveInStop
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
_ftol
_except_handler3
_purecall
wcslen
advapi32
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyW
RegEnumKeyExW
RegCreateKeyW
RegEnumKeyW
RegSetValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
ole32
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoInitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
CoUninitialize
gdi32
PatBlt
SelectObject
GetPaletteEntries
GetTextExtentPoint32W
GetObjectW
GetStockObject
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ