Static task
static1
Behavioral task
behavioral1
Sample
a29d4a11cded7dccb2203c500e4f167e0db13f6a27fb24051f14f59a57dfb746.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a29d4a11cded7dccb2203c500e4f167e0db13f6a27fb24051f14f59a57dfb746.exe
Resource
win10v2004-20220812-en
General
-
Target
a29d4a11cded7dccb2203c500e4f167e0db13f6a27fb24051f14f59a57dfb746
-
Size
224KB
-
MD5
31d5d6d48e77ef9e69fb4fb7a3350d70
-
SHA1
e043a6296c66783ee20e05eba23920695204d2cb
-
SHA256
a29d4a11cded7dccb2203c500e4f167e0db13f6a27fb24051f14f59a57dfb746
-
SHA512
71464927780aaaa0f72259136053ced3b322e8987333092885fbfae3cb63a525ee5d377d05dc683e9d2498a1282c7f040178778aa49f8c26808ac216a47b34d8
-
SSDEEP
3072:KxiKks7Zy2mlIfcwh7KFrQFhk2PqECKelxc1/nz1RHum45MRrLX43ouQT49bDPoh:dYm6fhKFrQFTAc/z+5qHnT4NDgh
Malware Config
Signatures
Files
-
a29d4a11cded7dccb2203c500e4f167e0db13f6a27fb24051f14f59a57dfb746.exe windows x86
84dc6560f5ca33fcd766d1e9a77e8919
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceFrequency
Sleep
QueryPerformanceCounter
CloseHandle
CreateThread
CompareStringW
CompareStringA
DeleteCriticalSection
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
SetFilePointer
ReadFile
GetStdHandle
SetHandleCount
WriteFile
HeapReAlloc
VirtualAlloc
IsBadWritePtr
HeapCreate
HeapDestroy
VirtualFree
GetEnvironmentVariableA
GetModuleFileNameA
GetVersionExA
GetLastError
TlsGetValue
TlsAlloc
SetLastError
GetCurrentThreadId
GetProcAddress
TlsSetValue
GetCommandLineA
GetStartupInfoA
GetVersion
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
TerminateProcess
ExitProcess
GetCurrentProcess
HeapFree
GetLocalTime
HeapAlloc
GetTimeZoneInformation
RtlUnwind
GetSystemTime
CreateFileA
GetCPInfo
GetStringTypeW
GetOEMCP
LoadLibraryA
GetACP
LCMapStringA
LCMapStringW
SetEndOfFile
SetStdHandle
RaiseException
InitializeCriticalSection
GetFileType
SetEnvironmentVariableA
GetStringTypeA
WaitForSingleObject
user32
LoadIconA
TranslateMessage
DefWindowProcA
GetWindowLongA
DestroyWindow
ReleaseDC
GetDC
SetWindowLongA
CreateWindowExA
RegisterClassA
DispatchMessageA
ShowWindow
UpdateWindow
PostQuitMessage
GetClientRect
SetCapture
ScreenToClient
ReleaseCapture
PeekMessageA
LoadCursorA
gdi32
ChoosePixelFormat
SwapBuffers
SetPixelFormat
glu32
gluPerspective
gluPickMatrix
gluBuild2DMipmaps
gluLookAt
opengl32
glGenTextures
glColor4d
glColor3f
glTexParameterf
glTexImage2D
glDeleteTextures
wglCreateContext
glColorMask
glCallList
glStencilFunc
glOrtho
glFrontFace
glStencilOp
glSelectBuffer
glColor4f
glVertex3f
glInitNames
glGetIntegerv
glRenderMode
glPopName
glMatrixMode
glPushName
glNormal3d
glMaterialfv
glDepthFunc
glClearDepth
glClearColor
glClearStencil
glDepthMask
glLightfv
glPushAttrib
glListBase
glBlendFunc
glBindTexture
glGenLists
glCallLists
glPopAttrib
glNewList
glTexCoord2d
glVertex3d
glEndList
glBegin
glEnd
glScaled
glDeleteLists
glLoadIdentity
glTranslated
glDisable
glPushMatrix
glPopMatrix
glRotated
glColor3d
wglMakeCurrent
glEnable
glViewport
glClear
glGetFloatv
ws2_32
__WSAFDIsSet
accept
gethostbyaddr
ntohl
inet_addr
bind
listen
select
gethostbyname
socket
closesocket
recv
ntohs
htons
send
ioctlsocket
connect
WSAStartup
WSACleanup
Sections
.text Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE