Static task
static1
Behavioral task
behavioral1
Sample
FlStudio20.9.2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
FlStudio20.9.2.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
bin.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
bin.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
file.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
file.dll
Resource
win10v2004-20220812-en
General
-
Target
FlStudio20.9.2.zip
-
Size
12.8MB
-
MD5
39f52837f2e255622483db242e1d2387
-
SHA1
3d1a6afd1ff080ea82e739e02a8e1fbe05ec892a
-
SHA256
19f69d5de7811b810305e1b5c5dd32bc3079a4d3a69771b3dacca34206398747
-
SHA512
27a6ae5aca2973e50427fceca42f46b385a4d42d947da1986fc9fdefb9c703cc8510d3bf493c06326aa668f67a1cd992d1867321c6ccdc158c53e2c67d976da8
-
SSDEEP
393216:7xIriTHJOJFy6McIVL5AdyrwdrGFLxLkXkRG/yc:79VOX0/LzwdkqAG/yc
Malware Config
Signatures
Files
-
FlStudio20.9.2.zip.zip
Password: 1515
-
Additional File/el.pak
-
Additional File/en-GB.pak
-
Additional File/en-US.pak
-
Additional File/es-419.pak
-
Additional File/es.pak
-
Additional File/et.pak
-
Additional File/fa.pak
-
Additional File/fi.pak
-
Additional File/fil.pak
-
Additional File/fr.pak
-
Additional File/gu.pak
-
Additional File/he.pak
-
Additional File/hi.pak
-
Additional File/hr.pak
-
Additional File/hu.pak
-
Additional File/id.pak
-
Additional File/it.pak
-
Additional File/ja.pak
-
Additional File/kn.pak
-
Additional File/ko.pak
-
Additional File/lt.pak
-
Additional File/lv.pak
-
Additional File/ml.pak
-
Additional File/mr.pak
-
Additional File/ms.pak
-
Additional File/nb.pak
-
Additional File/nl.pak
-
Additional File/pl.pak
-
Additional File/pt-BR.pak
-
Additional File/pt-PT.pak
-
Additional File/ro.pak
-
Additional File/ru.pak
-
Additional File/sk.pak
-
Additional File/sl.pak
-
Additional File/sr.pak
-
Additional File/sv.pak
-
Additional File/sw.pak
-
Additional File/ta.pak
-
Additional File/te.pak
-
Additional File/th.pak
-
Additional File/tr.pak
-
Additional File/uk.pak
-
Additional File/vi.pak
-
Additional File/zh-CN.pak
-
Additional File/zh-TW.pak
-
FlStudio20.9.2.exe.exe windows x86
Password: 1515
dec71b085dc5a08706fa389ac5f0718d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomW
DeleteCriticalSection
EnterCriticalSection
FreeConsole
FreeLibrary
GetCommandLineW
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
msvcrt
__getmainargs
__initenv
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_fpreset
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
Sections
.text Size: - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 288B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AFZ Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ZKi Size: 1024B - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.b6n Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
-
Locales/ca.pak
-
Locales/cs.pak
-
Locales/da.pak
-
Locales/de.pak
-
Locales/en-GB.pak
-
Locales/en-US.pak
-
Locales/es-419.pak
-
Locales/es.pak
-
Locales/et.pak
-
Locales/fi.pak
-
Locales/fil.pak
-
Locales/fr.pak
-
Locales/he.pak
-
Locales/hr.pak
-
Locales/hu.pak
-
Locales/id.pak
-
Locales/it.pak
-
Locales/ja.pak
-
Locales/ko.pak
-
Locales/lt.pak
-
Locales/lv.pak
-
Locales/ms.pak
-
Locales/nb.pak
-
Locales/nl.pak
-
Locales/pl.pak
-
Locales/pt-BR.pak
-
Locales/pt-PT.pak
-
Locales/ro.pak
-
Locales/sk.pak
-
Locales/sl.pak
-
Locales/sv.pak
-
Locales/sw.pak
-
Locales/tr.pak
-
Locales/vi.pak
-
Locales/zh-CN.pak
-
Locales/zh-TW.pak
-
New Text Document.txt
-
bin.dll
-
file.dll