Static task
static1
Behavioral task
behavioral1
Sample
a220daefbb5e3fb347e44006882d548604e81f2700fbc44414bf401c5f5faeb9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a220daefbb5e3fb347e44006882d548604e81f2700fbc44414bf401c5f5faeb9.exe
Resource
win10v2004-20221111-en
General
-
Target
a220daefbb5e3fb347e44006882d548604e81f2700fbc44414bf401c5f5faeb9
-
Size
84KB
-
MD5
129fbc6532578033624bd0bc5c417b51
-
SHA1
873eae84c7b91872857ac4ec82b38af5d3b3adf7
-
SHA256
a220daefbb5e3fb347e44006882d548604e81f2700fbc44414bf401c5f5faeb9
-
SHA512
2aa3e0bf686913f1b3d622a906e0b769520b83a349caa93af5b7df4064da9ef6eb25cd796a150d1c67d34d5fa2a71f1def204eb44dc73e994703dbfd4f5408b7
-
SSDEEP
1536:qSmtm4ZpRZOXi0JJZp3PUvI9l4/I5IFE5xovrQNrBTTUxnIVM:qSV4TRU/ZRl9l4/IcKukxT+nu
Malware Config
Signatures
Files
-
a220daefbb5e3fb347e44006882d548604e81f2700fbc44414bf401c5f5faeb9.exe windows x86
d0c635836653d47eeb400c6e59fd5a6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
GetCurrentDirectoryW
GetDiskFreeSpaceExA
GetBinaryType
Heap32ListNext
GetDateFormatW
GetFileSize
GetLastError
HeapCreate
GetTimeZoneInformation
GetUserDefaultLangID
FindCloseChangeNotification
HeapDestroy
SetFileAttributesW
GetProcessHeap
SizeofResource
CloseHandle
CreateToolhelp32Snapshot
GetModuleHandleA
CopyFileExW
LoadResource
FreeEnvironmentStringsW
GetCurrencyFormatW
Heap32ListFirst
TlsGetValue
GetQueuedCompletionStatus
CreateMailslotA
msvcrt
__unDNameEx
_ismbchira
strerror
_global_unwind2
_getsystime
memcpy
_filbuf
iswdigit
winmm
midiStreamProperty
mmioSeek
mciGetErrorStringA
midiOutCachePatches
PlaySound
midiInAddBuffer
midiConnect
midiInStart
DrvGetModuleHandle
mciSendCommandW
mmTaskBlock
midiInOpen
joyReleaseCapture
mod32Message
mciGetDeviceIDA
midiInStop
mmioWrite
opengl32
glVertex4fv
glColor4uiv
glTexCoord4fv
wglCopyContext
glNormal3i
glVertex3f
glGenLists
glEvalCoord2dv
glTexCoord1f
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ