Static task
static1
Behavioral task
behavioral1
Sample
Audacity lnstallSetup.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Audacity lnstallSetup.exe
Resource
win10v2004-20221111-en
General
-
Target
Audacity lnstallSetup.zip
-
Size
1.2MB
-
MD5
2329b9407dcec82b60ac0da8ac0fa1f1
-
SHA1
053ab11286f81019cb38b0849f7488b4fe513d64
-
SHA256
a130810e663458a3c4037ec1fff7fc151d1974cda568574346fe9834f858153a
-
SHA512
60384657abd87edd84e704d1db1510c18d52e4537070e21288ce76c364d984867a72c936073f8ae1ca759b10b4b7dd0cc6bd19d077d2d87cefd33cba6205f065
-
SSDEEP
3072:DdA+F/cXEobEn20Xgcm3VWzvrJlkQJEmzJGNNvbO9HN5yVRhUYPVb3MBswgR5/:xAocBIntvpbJAvC9t5krUYB3WI5/
Malware Config
Signatures
Files
-
Audacity lnstallSetup.zip.zip
-
Audacity lnstallSetup.exe.exe windows x86
ab41656c48706f1fda9fa72f84547ff3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
GetQueuedCompletionStatus
GetLastError
CloseHandle
IsBadStringPtrA
IsBadCodePtr
VirtualQuery
InterlockedIncrement
FlushFileBuffers
HeapSize
WriteConsoleW
SetStdHandle
RtlUnwind
GetSystemInfo
CreateIoCompletionPort
HeapDestroy
GetProcessHeap
HeapCreate
ExitProcess
GetTickCount
HeapFree
lstrlenA
HeapReAlloc
HeapAlloc
GetModuleHandleA
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
LCMapStringEx
GetStringTypeW
GetCommandLineA
IsDebuggerPresent
EncodePointer
DecodePointer
IsProcessorFeaturePresent
SetLastError
InterlockedDecrement
GetCurrentThreadId
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
GetModuleHandleExW
GetProcAddress
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
SetFilePointerEx
Sleep
CreateFileW
user32
DispatchMessageW
DrawTextW
TranslateMessage
GetMessageW
gdi32
CreateRectRgn
CreateCompatibleDC
DeleteDC
CreatePen
CreateCompatibleBitmap
CreateBitmap
BitBlt
DeleteObject
advapi32
IsTextUnicode
GetUserNameW
ReportEventW
shell32
SHGetSpecialFolderPathW
SHGetFolderPathW
Shell_NotifyIconW
CommandLineToArgvW
ole32
CoInitialize
CoUninitialize
CoCreateInstance
shlwapi
PathMakeSystemFolderW
PathCompactPathExW
winmm
waveOutGetNumDevs
PlaySoundW
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ