Static task
static1
Behavioral task
behavioral1
Sample
4471feb8583bf29e1b14501700645b3704573ce356e12d04d867db25a8b72e15.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4471feb8583bf29e1b14501700645b3704573ce356e12d04d867db25a8b72e15.exe
Resource
win10v2004-20220812-en
General
-
Target
4471feb8583bf29e1b14501700645b3704573ce356e12d04d867db25a8b72e15
-
Size
574KB
-
MD5
62c518c30fc9b2f9dc0a7371681b3730
-
SHA1
1780fb25f61f19248f03fd15a7a318a5d0ea5210
-
SHA256
4471feb8583bf29e1b14501700645b3704573ce356e12d04d867db25a8b72e15
-
SHA512
507b08579d81dbcde9382727d78a9d2e8603093f42d87069e7c098232186fca7ac5b1f6e205757e2168e87f3cd27d05066f7964c6b02be45a7805dfa7643a8fa
-
SSDEEP
6144:tUPOiOzczqzbzvz7zpu7Ku7WJgSbp1wLjvuCvkbLngJP9j0mFwBgK5P9x1C8uv4E:tC4WM/Lfpu7Ku7+YrJKioxg4jWW2xf
Malware Config
Signatures
Files
-
4471feb8583bf29e1b14501700645b3704573ce356e12d04d867db25a8b72e15.exe windows x86
804c85d23c7e4d67621bce961a1c9c83
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
wglDeleteContext
glDepthFunc
wglCreateContext
wglMakeCurrent
glClearColor
glClear
glLightModeli
glShadeModel
glCullFace
glDisable
glMatrixMode
glLoadIdentity
glTranslated
glMultMatrixf
glNormal3f
glVertex3f
glColor3f
glBegin
glVertex2f
glEnd
glMaterialfv
glMateriali
glLightfv
glEnable
glu32
gluPerspective
maxutil
?GetRegistryKeyBase@UtilityInterface@@YAPBDXZ
kernel32
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
IsDebuggerPresent
UnhandledExceptionFilter
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
CreateEventA
InitializeCriticalSection
GetCurrentDirectoryA
LoadLibraryW
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
SetCurrentDirectoryA
WideCharToMultiByte
MultiByteToWideChar
FindClose
FindNextFileA
WaitForSingleObject
FindFirstFileA
SetEvent
CreateThread
ResetEvent
GetDateFormatA
FileTimeToSystemTime
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoA
user32
GetClientRect
MoveWindow
GetWindowRect
PeekMessageA
SendMessageA
GetParent
EndDialog
SetTimer
InvalidateRect
SetCapture
ReleaseCapture
SetActiveWindow
GetWindowLongA
SetWindowLongA
SetCursor
SetWindowTextA
GetMenu
LoadIconA
DestroyWindow
MessageBoxA
ShowWindow
UpdateWindow
DialogBoxParamA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
LoadStringA
BeginPaint
GetSysColor
EndPaint
DefWindowProcA
PostQuitMessage
GetDlgItem
PostMessageA
SetFocus
LoadCursorA
CreateDialogParamA
CreateWindowExA
RegisterClassExA
EnableWindow
GetDC
ReleaseDC
SetWindowPos
WaitMessage
gdi32
LineTo
MoveToEx
GetStockObject
CreatePen
SwapBuffers
GetObjectA
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SelectObject
ChoosePixelFormat
SetPixelFormat
advapi32
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
shell32
SHBrowseForFolderA
DragAcceptFiles
DragFinish
DragQueryFileA
SHGetPathFromIDListA
ole32
StgOpenStorage
FreePropVariantArray
CoTaskMemFree
CoTaskMemAlloc
msvcr90
strtok
memset
??2@YAPAXI@Z
_strlwr
??3@YAXPAX@Z
_except_handler3
malloc
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
free
_cexit
__getmainargs
_amsg_exit
_CIasin
wcstombs
sprintf
_snprintf
__CxxFrameHandler3
strstr
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE