Static task
static1
Behavioral task
behavioral1
Sample
0ffd822ec579b25e03adf7879d988fb81f58553d59f567714db0ea7ebc57e227.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ffd822ec579b25e03adf7879d988fb81f58553d59f567714db0ea7ebc57e227.exe
Resource
win10v2004-20220812-en
General
-
Target
0ffd822ec579b25e03adf7879d988fb81f58553d59f567714db0ea7ebc57e227
-
Size
1.3MB
-
MD5
6888de8bc7f15ef1e35ff92c5e2150f0
-
SHA1
be0054cc96678db45032293676f9a2cd3035c769
-
SHA256
0ffd822ec579b25e03adf7879d988fb81f58553d59f567714db0ea7ebc57e227
-
SHA512
804a2bf01759d83c4b55927f216b5538be8d5514f731974c493a7f8d8f6cc30745dd51dea9cf5856a93a51157c1453d54c790093c716b8610d8f87b2804869ef
-
SSDEEP
24576:IGNZD+c4PcXLFk4zo9rgGEdZAxngxzIDH9N:IGGARk48rZEdZAZgxzI
Malware Config
Signatures
Files
-
0ffd822ec579b25e03adf7879d988fb81f58553d59f567714db0ea7ebc57e227.exe windows x86
5fbc08251fd234d9ec9e8cbf93dc47ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glMultMatrixf
glNormal3fv
glColor3fv
glDeleteTextures
glTexParameterf
glReadPixels
glGenTextures
glBindTexture
glVertex2f
glGetIntegerv
glGetDoublev
glLineWidth
glCullFace
glLightfv
glMaterialfv
glMaterialf
glDepthMask
glVertex2fv
glPointSize
glPolygonOffset
glShadeModel
glVertex3fv
glRasterPos2f
glGenLists
wglUseFontBitmapsA
glTexCoord2f
glHint
glPushAttrib
glListBase
glCallLists
glPopAttrib
wglCreateContext
glClearDepth
glDepthFunc
glOrtho
wglDeleteContext
glMatrixMode
glLoadIdentity
glViewport
glClearColor
glPushMatrix
glRotatef
glVertex3f
glPopMatrix
glEnable
glBlendFunc
glColor4ub
glDisable
glColor3ub
glVertex3i
wglMakeCurrent
glBegin
glVertex2i
glEnd
glTranslatef
glClear
glPolygonMode
glTexParameteri
glu32
gluPerspective
gluBuild2DMipmaps
gluUnProject
kernel32
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
GetVolumeInformationA
GetShortPathNameA
CreateFileA
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
lstrcmpiA
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
GetModuleHandleW
FileTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileSizeEx
FindResourceExA
SetErrorMode
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapAlloc
HeapFree
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
VirtualAlloc
HeapReAlloc
HeapSize
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
VirtualFree
HeapCreate
UnlockFile
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
GetThreadLocale
GetStringTypeExA
DeleteFileA
MoveFileA
InterlockedDecrement
GetModuleFileNameW
VirtualProtect
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetCurrentProcessId
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
CloseHandle
FormatMessageA
LocalFree
MulDiv
lstrlenA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
LockFile
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
GetLastError
SetLastError
MultiByteToWideChar
lstrcmpW
GetModuleHandleA
GetVersionExA
FreeResource
GetTickCount
LoadLibraryA
FreeLibrary
FindFirstFileA
GetProcAddress
FindNextFileA
SetCurrentDirectoryA
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree
GetCurrentDirectoryA
GetModuleFileNameA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
SetFilePointer
WriteFile
ReadFile
GlobalHandle
user32
GetMenuItemInfoA
DestroyCursor
InflateRect
IsZoomed
UnpackDDElParam
ReuseDDElParam
DestroyMenu
InsertMenuItemA
SetRectEmpty
BringWindowToTop
MapDialogRect
GetAsyncKeyState
ShowOwnedPopups
PostQuitMessage
WindowFromPoint
InvalidateRect
SetRect
GetWindowThreadProcessId
GetMessageA
TranslateMessage
ValidateRect
EndPaint
BeginPaint
ReleaseDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetMenuStringA
ShowWindow
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
SetParent
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
TrackPopupMenu
GetKeyState
SetMenu
SetScrollPos
GetScrollPos
SetForegroundWindow
IsWindowVisible
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
EnableWindow
SendMessageA
RedrawWindow
PtInRect
DeferWindowPos
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
IsRectEmpty
DeleteMenu
GetSystemMenu
LockWindowUpdate
GetDCEx
GetSystemMetrics
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
UnregisterClassA
GetSysColorBrush
CharUpperA
GetPropA
GetWindowRect
GetClientRect
ClientToScreen
GetCapture
SetCapture
ReleaseCapture
UpdateWindow
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
MessageBoxA
GetClipboardData
CreatePopupMenu
AppendMenuA
GetSubMenu
InsertMenuA
ModifyMenuA
LoadMenuA
DrawMenuBar
GetDC
SetWindowTextA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindowDC
TranslateAcceleratorA
GetMenu
SetCursor
LoadAcceleratorsA
GetParent
GetMenuItemCount
DestroyIcon
LoadImageA
LoadCursorA
CheckMenuItem
EnableMenuItem
GetMenuItemID
ScreenToClient
SetTimer
KillTimer
GetFocus
ShowCursor
GetCursorInfo
SetCursorPos
GetCursorPos
MapWindowPoints
gdi32
SelectClipRgn
CreateRectRgn
SetBkMode
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
MoveToEx
ScaleViewportExtEx
RestoreDC
SaveDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreatePen
CreateFontA
SelectObject
ChoosePixelFormat
SetPixelFormat
SetPixel
DeleteObject
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetViewportExtEx
GetDeviceCaps
EnumFontFamiliesExA
CombineRgn
SetRectRgn
StretchDIBits
GetCharWidthA
CreateRectRgnIndirect
CreateFontIndirectA
PatBlt
GetTextExtentPoint32A
GetTextMetricsA
GetBkColor
CreateSolidBrush
GetStockObject
CreatePatternBrush
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
SwapBuffers
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegCloseKey
SetFileSecurityA
GetFileSecurityA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegSetValueA
shell32
DragAcceptFiles
DragFinish
DragQueryFileA
SHGetFileInfoA
ExtractIconA
ShellExecuteA
comctl32
ImageList_ReplaceIcon
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
shlwapi
PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW
PathIsUNCA
lib3ds
lib3ds_vector_copy
lib3ds_vector_transform
lib3ds_matrix_mult
lib3ds_matrix_inv
lib3ds_matrix_translate
lib3ds_matrix_copy
lib3ds_file_mesh_for_node
lib3ds_file_free
lib3ds_file_eval
lib3ds_file_create_nodes_for_meshes
lib3ds_file_open
lib3ds_file_save
lib3ds_file_append_node
lib3ds_node_new_mesh_instance
lib3ds_mesh_resize_faces
lib3ds_file_new
lib3ds_material_new
lib3ds_file_insert_material
lib3ds_mesh_new
lib3ds_file_insert_mesh
lib3ds_mesh_resize_vertices
devil
ilGetInteger
ilCopyPixels
ilGenImages
ilBindImage
ilEnable
ilSaveImage
ilInit
ilLoadImage
ilGetError
ilShutDown
ilOriginFunc
ilut
ilutGLScreen
ole32
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoCreateInstance
oleaut32
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
Sections
.text Size: 776KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 345KB - Virtual size: 346KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
shfhvve Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE