Static task
static1
Behavioral task
behavioral1
Sample
9c65b43e542175db2cf8caa6777557148f7af073e4a20ded4a4c79644666497a.exe
Resource
win7-20220901-en
General
-
Target
9c65b43e542175db2cf8caa6777557148f7af073e4a20ded4a4c79644666497a
-
Size
99KB
-
MD5
1d3deaaeafdc2d414dbed9c65b4e6d2f
-
SHA1
7ba31d51001b779d362e790fc15af9644ee495a1
-
SHA256
9c65b43e542175db2cf8caa6777557148f7af073e4a20ded4a4c79644666497a
-
SHA512
9ba8332e5a7fa303a8e1ee161e8ed2f6a28bd44165c37dcf31b27246eceffb075e3914c4c5a02ba3b0f3c4f58c4678c82c06b96115983f6669bfcd3bc3f679f5
-
SSDEEP
3072:P0X3DmPJ9J16cnnZ+F+LzuAr/LTtPx0zfMDCmW7sh:PkmPDznZTuqhYbma0
Malware Config
Signatures
Files
-
9c65b43e542175db2cf8caa6777557148f7af073e4a20ded4a4c79644666497a.exe windows x86
d4431fb298a10ea0b2733dedd5feeeb6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
ICGetInfo
ICCompress
ICOpen
ICDecompress
ICSendMessage
ICLocate
ICClose
kernel32
GlobalFree
GetQueuedCompletionStatus
HeapFree
FreeLibrary
GlobalAlloc
lstrcpyW
LoadLibraryW
GetSystemInfo
SetFilePointer
GetSystemTimeAsFileTime
LeaveCriticalSection
IsBadHugeReadPtr
ReleaseSemaphore
GlobalMemoryStatus
SetThreadPriority
PostQueuedCompletionStatus
CreateThread
GetModuleFileNameA
CreateFileW
MultiByteToWideChar
lstrlenA
CreateSemaphoreW
GetTickCount
GlobalLock
CreateEventW
lstrcpynW
GetPrivateProfileStringW
GetCurrentProcess
OutputDebugStringA
SetEndOfFile
IsBadCodePtr
lstrcmpiW
CreateIoCompletionPort
CloseHandle
ReadFile
GetThreadPriority
ResetEvent
GetFileSize
HeapAlloc
EnterCriticalSection
GetCurrentThread
IsBadReadPtr
MulDiv
GetCPInfo
GetFullPathNameW
GetLastError
GlobalHandle
GetStartupInfoA
WideCharToMultiByte
IsBadWritePtr
DeleteCriticalSection
lstrlenW
SetEvent
WaitForSingleObject
GetProcessHeap
GetSystemDefaultLangID
GetDiskFreeSpaceW
GetVersionExW
SetUnhandledExceptionFilter
GlobalUnlock
QueryPerformanceCounter
InterlockedIncrement
WriteFile
VirtualFree
InitializeCriticalSection
InterlockedDecrement
GetFileAttributesW
InterlockedExchange
GetProfileIntA
GetEnvironmentStringsW
DeleteFileW
lstrcmpW
WaitForMultipleObjects
lstrcpyA
GetCurrentProcessId
gdi32
GetObjectW
PatBlt
GetStockObject
GetTextExtentPoint32W
SelectObject
GetPaletteEntries
winmm
waveInGetDevCapsW
waveInStop
mixerClose
waveInReset
waveInStart
waveInAddBuffer
SendDriverMessage
mixerGetID
mixerGetControlDetailsW
mixerSetControlDetails
mixerGetLineInfoW
waveInOpen
mixerGetLineControlsW
OpenDriver
mixerOpen
CloseDriver
waveInPrepareHeader
waveInUnprepareHeader
waveInClose
user32
GetDlgItem
InvalidateRect
DefWindowProcW
MoveWindow
ReleaseDC
CheckRadioButton
LoadCursorW
SetDlgItemTextW
ShowWindow
ClientToScreen
IsRectEmpty
LoadStringW
GetAsyncKeyState
DispatchMessageW
GetDlgItemInt
SetDlgItemInt
PeekMessageW
IsWindow
SetCursor
DestroyWindow
GetDesktopWindow
EnableWindow
CreateDialogParamW
GetDC
SendMessageW
TranslateMessage
wsprintfW
CheckDlgButton
GetWindowRect
SetWindowLongW
GetClientRect
GetWindowLongW
IsWindowVisible
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
advapi32
RegEnumKeyExW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueExW
RegOpenKeyExW
RegSetValueW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegOpenKeyW
msvcrt
wcslen
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
_purecall
_ftol
ole32
CoTaskMemFree
CoInitialize
CoCreateInstance
CoTaskMemAlloc
StringFromGUID2
CoFreeUnusedLibraries
CoUninitialize
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ