Static task
static1
Behavioral task
behavioral1
Sample
bc572218bbd698050b054e4012e4e980deb5be7fc16446715890ba87798da277.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bc572218bbd698050b054e4012e4e980deb5be7fc16446715890ba87798da277.exe
Resource
win10v2004-20220901-en
General
-
Target
bc572218bbd698050b054e4012e4e980deb5be7fc16446715890ba87798da277
-
Size
52KB
-
MD5
7c8d41dc21cd3b6b6ddba51bb97fcfd3
-
SHA1
467e8a1d299a59c498e9e72fe674011ea5dcda63
-
SHA256
bc572218bbd698050b054e4012e4e980deb5be7fc16446715890ba87798da277
-
SHA512
c46ea2a2c12f667f597dfb10f948a37da9a70cc68d01c14471cf4bddced01944c9d512d1f1487686ec8bc3addfaa4c3e98b55f3e93b0df8321bf0d600a3b7470
-
SSDEEP
768:TmwYk3wrQEcyV3Xmtor697eEvlHvVKddbzmBH0tHRsOQzVnGGPD:6atjyhO7tvFVKjbyBUtKOGND
Malware Config
Signatures
Files
-
bc572218bbd698050b054e4012e4e980deb5be7fc16446715890ba87798da277.exe windows x86
723788eb2487d7f72a1f4dab26a3a2b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glTexCoord2f
glTexParameterf
glGetMapfv
glTexCoord4f
glPixelTransferf
glTexCoord4iv
glTexEnvi
glTexImage2D
glTexEnvfv
glGetMaterialfv
glGetTexParameterfv
glRasterPos3fv
glIsTexture
glu32
gluNewQuadric
gluProject
gluQuadricOrientation
gluScaleImage
gluTessCallback
gluPerspective
gluQuadricCallback
gluPartialDisk
gluQuadricDrawStyle
gluDeleteNurbsRenderer
gluOrtho2D
gluBuild1DMipmaps
gluSphere
gluBeginTrim
ole32
StgOpenPropStg
CoMarshalHresult
StgOpenStorageEx
CoIsHandlerConnected
StgSetTimes
PropVariantClear
OleRun
CoGetMarshalSizeMax
CoReleaseMarshalData
OleLoadFromStream
StgCreatePropStg
kernel32
LocalLock
VirtualFreeEx
HeapReAlloc
SetEvent
HeapFree
GetThreadLocale
GetStringTypeW
GlobalSize
HeapDestroy
VirtualQuery
VirtualProtectEx
DeleteCriticalSection
GetCPInfo
IsBadReadPtr
GetModuleHandleA
GetProcAddress
PulseEvent
TlsGetValue
VirtualAlloc
GetExitCodeThread
GetHandleInformation
GetCurrentProcessId
CreateSemaphoreA
OpenMutexA
SetHandleInformation
CloseHandle
GetCommandLineA
GetCurrentThreadId
GetCurrentProcess
GetStartupInfoA
usp10
ScriptGetLogicalWidths
ScriptApplyLogicalWidth
ScriptJustify
ScriptShape
ScriptStringXtoCP
ScriptString_pLogAttr
ScriptGetGlyphABCWidth
ScriptIsComplex
ScriptXtoCP
ScriptItemize
ScriptGetCMap
ScriptBreak
ScriptTextOut
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ