Static task
static1
Behavioral task
behavioral1
Sample
993e7541f13c0dd284a52baae523a084f6f1a7944c9f65aee5829fac6b44d336.exe
Resource
win7-20221111-en
General
-
Target
993e7541f13c0dd284a52baae523a084f6f1a7944c9f65aee5829fac6b44d336
-
Size
101KB
-
MD5
70c487bb404aceb0ab24b538ee7bcf69
-
SHA1
fcbc55207ec6b806feb0988c005ef249c3d4c5e2
-
SHA256
993e7541f13c0dd284a52baae523a084f6f1a7944c9f65aee5829fac6b44d336
-
SHA512
c6edd23001645ec0d88413f2ae0bfbf2dcc2a0f3ae4b92aac09fa366fdc023239e34c5aa1a95fa057939de1f9a92dafa357af486f8d11cbb928d4184d26a9e44
-
SSDEEP
1536:iWZ9IBfq7g4hWDZhA0JmuthF8X8nh3St551SDQQwnXRRw2W:iWZ9mCs4H0JhtHVQt55wDQQOhR
Malware Config
Signatures
Files
-
993e7541f13c0dd284a52baae523a084f6f1a7944c9f65aee5829fac6b44d336.exe windows x86
d6371d9e4b7eb97853479740180857a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
lstrcmpW
GlobalMemoryStatus
EnterCriticalSection
DeleteFileW
QueryPerformanceCounter
ReadFile
GlobalHandle
MultiByteToWideChar
InterlockedDecrement
SetEvent
CreateEventW
GetPrivateProfileStringW
GetEnvironmentStringsW
PostQueuedCompletionStatus
WideCharToMultiByte
DeleteCriticalSection
GetProcessHeap
SetThreadPriority
HeapAlloc
lstrcpyA
lstrcpyW
GetSystemDefaultLangID
CloseHandle
VirtualFree
FreeLibrary
GetSystemInfo
GlobalUnlock
GetDiskFreeSpaceW
LeaveCriticalSection
CreateFileW
GetFileAttributesW
GetQueuedCompletionStatus
GetFileSize
IsBadReadPtr
SetEndOfFile
GetCurrentProcess
IsBadWritePtr
WriteFile
GlobalFree
GetVersionExW
lstrlenW
lstrcpynW
SetFilePointer
SetUnhandledExceptionFilter
GlobalAlloc
CreateIoCompletionPort
GetProfileIntA
IsBadCodePtr
GetStartupInfoA
GlobalLock
HeapFree
GetLastError
GetCurrentThread
GetSystemTimeAsFileTime
GetFullPathNameW
CreateThread
InitializeCriticalSection
InterlockedIncrement
lstrcmpiW
InterlockedExchange
GetModuleFileNameA
LoadLibraryW
WaitForSingleObject
GetTickCount
lstrlenA
WaitForMultipleObjects
CreateSemaphoreW
GetCurrentProcessId
ResetEvent
GetThreadPriority
MulDiv
ReleaseSemaphore
winmm
mixerGetLineControlsW
OpenDriver
mixerGetControlDetailsW
mixerOpen
mixerGetLineInfoW
waveInPrepareHeader
waveInReset
SendDriverMessage
mixerClose
waveInOpen
waveInStop
mixerSetControlDetails
CloseDriver
waveInGetDevCapsW
waveInUnprepareHeader
waveInAddBuffer
waveInClose
waveInStart
mixerGetID
gdi32
SelectObject
GetObjectW
GetTextExtentPoint32W
GetPaletteEntries
GetStockObject
PatBlt
user32
IsWindowVisible
ClientToScreen
GetWindowRect
GetDC
SetWindowLongW
LoadCursorW
SetDlgItemInt
GetDlgItemInt
wsprintfW
EnableWindow
GetDlgItem
CheckRadioButton
IsRectEmpty
SendMessageW
SetCursor
DispatchMessageW
TranslateMessage
LoadStringW
CheckDlgButton
SetDlgItemTextW
PeekMessageW
InvalidateRect
IsWindow
GetDesktopWindow
GetAsyncKeyState
DefWindowProcW
MoveWindow
GetClientRect
CreateDialogParamW
ReleaseDC
DestroyWindow
ShowWindow
GetWindowLongW
advapi32
RegEnumKeyW
RegCreateKeyW
RegOpenKeyExW
RegSetValueW
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyW
RegCloseKey
RegSetValueExW
ole32
StringFromGUID2
CoTaskMemFree
CoInitialize
CoFreeUnusedLibraries
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
msvfw32
ICOpen
ICGetInfo
ICClose
ICSendMessage
ICCompress
ICLocate
ICDecompress
msvcrt
_ftol
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
wcslen
_except_handler3
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ