Static task
static1
Behavioral task
behavioral1
Sample
1ec0384b6d127b5210440bb0185b19684d40bc4622f1ead41e75ed82e6b39a75.exe
Resource
win7-20220812-en
General
-
Target
1ec0384b6d127b5210440bb0185b19684d40bc4622f1ead41e75ed82e6b39a75
-
Size
101KB
-
MD5
31416d7a7ed1ae5f16bbc541f13048e3
-
SHA1
bc1ccfb86a015795bb285c72a3328218837bc844
-
SHA256
1ec0384b6d127b5210440bb0185b19684d40bc4622f1ead41e75ed82e6b39a75
-
SHA512
fa97257e10d1026714b1fc90a2a081f1dc570954d84f450276e84e687f75564d5512dd223e1e9d972e29153fd6f5349f649d516e69de5d5d19e0fe814971095e
-
SSDEEP
1536:tIhINEsWWalxTyubzYunDQn41DB47lSquuT/EH+V7BC8bEwGVx:tNcicG+W74uT/EH+V7Vy
Malware Config
Signatures
Files
-
1ec0384b6d127b5210440bb0185b19684d40bc4622f1ead41e75ed82e6b39a75.exe windows x86
fd0186542d793b2c21b589ff04819450
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
ICCompress
ICDecompress
ICSendMessage
ICLocate
ICClose
ICGetInfo
ICOpen
kernel32
LeaveCriticalSection
GetFileAttributesW
WideCharToMultiByte
GetSystemInfo
GetSystemTimeAsFileTime
GetFullPathNameW
SetEvent
lstrcmpW
CreateSemaphoreW
lstrcpyW
GetDiskFreeSpaceW
WriteFile
MultiByteToWideChar
GetSystemDefaultLangID
GetThreadPriority
CloseHandle
LoadLibraryW
GetPrivateProfileStringW
WaitForSingleObject
GlobalUnlock
GlobalMemoryStatus
GetCurrentProcess
GetCurrentThread
GetVersionExW
VirtualFree
SetEndOfFile
lstrlenW
InterlockedExchange
CreateIoCompletionPort
CreateThread
DeleteFileW
ReadFile
ReleaseSemaphore
lstrcmpiW
InitializeCriticalSection
GetTickCount
lstrcpyA
MulDiv
InterlockedIncrement
CreateEventW
HeapFree
GlobalFree
GetEnvironmentStringsW
FreeLibrary
SetUnhandledExceptionFilter
EnterCriticalSection
IsBadReadPtr
HeapAlloc
GetLastError
lstrlenA
IsBadWritePtr
GetProcessHeap
GetProfileIntA
IsBadCodePtr
InterlockedDecrement
GetStartupInfoA
lstrcpynW
SetFilePointer
GlobalLock
DeleteCriticalSection
WaitForMultipleObjects
SetThreadPriority
CreateFileW
ResetEvent
PostQueuedCompletionStatus
GetFileSize
GetQueuedCompletionStatus
GlobalHandle
GetModuleFileNameA
GlobalAlloc
QueryPerformanceCounter
GetCurrentProcessId
ole32
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CoUninitialize
winmm
SendDriverMessage
waveInClose
waveInAddBuffer
OpenDriver
mixerGetID
waveInStop
waveInGetDevCapsW
mixerSetControlDetails
waveInUnprepareHeader
mixerClose
waveInReset
mixerGetControlDetailsW
mixerGetLineInfoW
CloseDriver
mixerGetLineControlsW
waveInStart
waveInPrepareHeader
mixerOpen
waveInOpen
user32
ShowWindow
LoadCursorW
ReleaseDC
LoadStringW
SendMessageW
CheckDlgButton
GetDesktopWindow
IsWindowVisible
MoveWindow
SetCursor
CheckRadioButton
SetDlgItemInt
EnableWindow
DefWindowProcW
ClientToScreen
DispatchMessageW
GetWindowRect
GetClientRect
wsprintfW
GetWindowLongW
IsWindow
CreateDialogParamW
TranslateMessage
SetDlgItemTextW
IsRectEmpty
DestroyWindow
GetAsyncKeyState
GetDC
GetDlgItem
SetWindowLongW
GetDlgItemInt
PeekMessageW
InvalidateRect
advapi32
RegCloseKey
RegEnumKeyW
RegOpenKeyW
RegCreateKeyW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegSetValueW
RegSetValueExW
msvcrt
_ftol
wcslen
_purecall
??2@YAPAXI@Z
_except_handler3
??3@YAXPAX@Z
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
gdi32
SelectObject
GetPaletteEntries
GetObjectW
GetStockObject
PatBlt
GetTextExtentPoint32W
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ