Static task
static1
Behavioral task
behavioral1
Sample
StartupSoundChanger.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
StartupSoundChanger.exe
Resource
win10v2004-20221111-en
General
-
Target
StartupSoundChanger.exe
-
Size
318KB
-
MD5
9c727b81c30edbfcbaff616b04b7fee0
-
SHA1
c3a6fe5011c380178d3f299954bbf153ba23b95b
-
SHA256
be96d17a34bdc70048cfbacdb50ceadeecfff2a08bcf9cfd766ff93db80e449c
-
SHA512
6f34bc1a998da15e9822afc81dac7e025b0d45aeacd51956627b194408e5152bcac524f1e9b6d56c50876f420791627808309b64e59ee4be6b83b2a1810311f3
-
SSDEEP
6144:zA0SbaGgG0A0SbaGgGOYz3rIkkA0SbaGgGQ:gzbIk
Malware Config
Signatures
Files
-
StartupSoundChanger.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ