Static task
static1
Behavioral task
behavioral1
Sample
02687ac421b9e634924bb12a8483714ec3dca0df5677fbaebf88c2ffdcf18527.exe
Resource
win7-20220812-en
General
-
Target
02687ac421b9e634924bb12a8483714ec3dca0df5677fbaebf88c2ffdcf18527
-
Size
100KB
-
MD5
248718ec5f967efd0fccd20e9e54cd6a
-
SHA1
5a3f1ccdaa6e1a645c9581d9bd1b7c011979db7b
-
SHA256
02687ac421b9e634924bb12a8483714ec3dca0df5677fbaebf88c2ffdcf18527
-
SHA512
104e0059502ca22bd92ce9a2a6f3d95f5e1c86e59cab562dd8d3b64cd358f46081629f7068d557942a05902799ada732de303128c104b1b0a291fa78f08e7827
-
SSDEEP
1536:PgCAwyaTQrgiGzOI8yuO5FMItdz6V4HuMD+dLGN5wOJSzfebrWG2P6vGw5qJG/:Pay0rUlJMItQPMD+1S5AWbrWGDvGwwU
Malware Config
Signatures
Files
-
02687ac421b9e634924bb12a8483714ec3dca0df5677fbaebf88c2ffdcf18527.exe windows x86
b1c5cb8ecb87b810d726e6b4e4acaf0d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
InitializeCriticalSection
GlobalMemoryStatus
lstrcpyW
ReadFile
IsBadHugeReadPtr
CreateFileW
lstrcpyA
GetSystemInfo
GetProfileIntA
FreeLibrary
lstrcmpiW
GlobalHandle
GetVersionExW
DeleteFileW
WaitForMultipleObjects
GetCPInfo
EnterCriticalSection
SetThreadPriority
MultiByteToWideChar
WriteFile
VirtualFree
SetEvent
IsBadCodePtr
GetSystemTimeAsFileTime
SetEndOfFile
SetFilePointer
GetCurrentThread
GetThreadPriority
GlobalAlloc
GetTickCount
DeleteCriticalSection
GetQueuedCompletionStatus
GetModuleFileNameA
GetDiskFreeSpaceW
lstrcmpW
GetProcessHeap
MulDiv
GetFileSize
WaitForSingleObject
GetLastError
GetFileAttributesW
IsBadReadPtr
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
CreateIoCompletionPort
lstrlenA
LoadLibraryW
ReleaseSemaphore
GetPrivateProfileStringW
GlobalUnlock
InterlockedIncrement
GetFullPathNameW
SetUnhandledExceptionFilter
IsBadWritePtr
GlobalFree
lstrcpynW
HeapAlloc
WideCharToMultiByte
GlobalLock
InterlockedExchange
CreateThread
OutputDebugStringA
PostQueuedCompletionStatus
CreateSemaphoreW
InterlockedDecrement
GetSystemDefaultLangID
GetStartupInfoA
lstrlenW
LeaveCriticalSection
GetCurrentProcess
HeapFree
CreateEventW
gdi32
PatBlt
GetStockObject
GetObjectW
GetPaletteEntries
SelectObject
GetTextExtentPoint32W
user32
GetWindowLongW
SetDlgItemTextW
TranslateMessage
IsRectEmpty
GetWindowRect
GetClientRect
wsprintfW
PeekMessageW
GetDlgItemInt
DispatchMessageW
SendMessageW
CheckDlgButton
SetDlgItemInt
LoadCursorW
InvalidateRect
GetDC
EnableWindow
IsWindow
ShowWindow
ClientToScreen
GetDlgItem
LoadStringW
SetCursor
CreateDialogParamW
MoveWindow
DefWindowProcW
CheckRadioButton
GetDesktopWindow
SetWindowLongW
DestroyWindow
ReleaseDC
IsWindowVisible
GetAsyncKeyState
msvfw32
ICDecompress
ICSendMessage
ICGetInfo
ICOpen
ICCompress
ICLocate
ICClose
winmm
waveInAddBuffer
mixerSetControlDetails
mixerClose
mixerGetControlDetailsW
waveInOpen
waveInClose
waveInStart
waveInReset
SendDriverMessage
OpenDriver
mixerGetID
waveInUnprepareHeader
waveInPrepareHeader
mixerOpen
waveInStop
CloseDriver
waveInGetDevCapsW
mixerGetLineControlsW
mixerGetLineInfoW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitialize
StringFromGUID2
CoFreeUnusedLibraries
CoCreateInstance
advapi32
RegOpenKeyW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyW
RegCloseKey
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
RegSetValueW
msvcrt
??2@YAPAXI@Z
_purecall
_except_handler3
wcslen
??3@YAXPAX@Z
_ftol
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ