Static task
static1
Behavioral task
behavioral1
Sample
e848c683d92663c49b5e2329ba1df4a27e3df56a0d845ffa2d2257503c687cf0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e848c683d92663c49b5e2329ba1df4a27e3df56a0d845ffa2d2257503c687cf0.exe
Resource
win10v2004-20220812-en
General
-
Target
e848c683d92663c49b5e2329ba1df4a27e3df56a0d845ffa2d2257503c687cf0
-
Size
588KB
-
MD5
288d44ed02c42ddc74bed1a2c1fea8e0
-
SHA1
e0b012d3e220b0b87dbe1f6cf186abbea16d0933
-
SHA256
e848c683d92663c49b5e2329ba1df4a27e3df56a0d845ffa2d2257503c687cf0
-
SHA512
553856ec8148c5a2a51106fa97646b12a1ba34fa3b34f9bc08387665d1d95aeec8210c321d5d46c24f7526193fb79042cbe4fe9e78aa3fa3287273bdb2d85324
-
SSDEEP
12288:/dhX/npSI0RKUz3U6ilyL02hYSkns7Ti3Jrb9iH3wn/tWF6j+:/HX/gICKn6il80Zs7TApbe4sYS
Malware Config
Signatures
Files
-
e848c683d92663c49b5e2329ba1df4a27e3df56a0d845ffa2d2257503c687cf0.exe windows x86
0d3e32bc4aeae605703a7fd764d4e62c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetVersion
GetHandleInformation
GetLocalTime
DeleteVolumeMountPointW
WriteConsoleInputVDMA
EnumDateFormatsA
FreeLibrary
GetFileSizeEx
GetConsoleAliasW
ReadConsoleInputA
FatalExit
GetSystemTime
ReadConsoleOutputA
WriteConsoleOutputW
EnumSystemLocalesW
IsValidLocale
GetThreadLocale
GetStartupInfoA
opengl32
glPassThrough
glIndexiv
glRasterPos3d
glGetString
glEdgeFlagv
glVertex4sv
wglMakeCurrent
wglDeleteContext
glDrawPixels
glLoadMatrixd
wglGetDefaultProcAddress
glTexImage1D
glTexCoord4fv
glColor4f
glMaterialf
glMapGrid2f
glRasterPos3sv
glNormal3d
glMap1d
wglCreateContext
glEnd
glColor3b
glFogfv
glIndexubv
glColor3fv
glPixelMapusv
glStencilMask
glLightModeli
glIsEnabled
glEndList
msvcrt
ftell
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_mbsset
fwrite
feof
ferror
_heapset
fopen
fputs
_adj_fprem
fwprintf
signal
fputc
sprintf
_seterrormode
_amsg_exit
_spawnlpe
fprintf
fclose
fsetpos
memset
_lseek
_commit
memchr
_wspawnvp
_onexit
fread
_wcsupr
_unlink
_Getmonths
fseek
_strnicoll
_spawnvpe
printf
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 540KB - Virtual size: 539KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE