Static task
static1
Behavioral task
behavioral1
Sample
39b5cc9110a8a3c59e26c3f4448185e305deb3ac96f7885b9f878afd6332058b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
39b5cc9110a8a3c59e26c3f4448185e305deb3ac96f7885b9f878afd6332058b.exe
Resource
win10v2004-20220812-en
General
-
Target
39b5cc9110a8a3c59e26c3f4448185e305deb3ac96f7885b9f878afd6332058b
-
Size
664KB
-
MD5
04054ece699d0997cfcb861e9ea2e2f0
-
SHA1
614d23c1e8bf3da3f6245798f7618c47e2eb665a
-
SHA256
39b5cc9110a8a3c59e26c3f4448185e305deb3ac96f7885b9f878afd6332058b
-
SHA512
d3b4d1ec661c3cde2256e73e6ccffbfb64f1aa84fda1da44c74a901564789321830c79eb9798ed360495e80fe8c2a133607c17cfacdff98d5aede53dd6fb3119
-
SSDEEP
12288:QjGz5pJRzISmlGaUVawb7zr4mhtDYK74ifAJ7L6B98:QKQGa21r4mhtDYKCJ7Ly98
Malware Config
Signatures
Files
-
39b5cc9110a8a3c59e26c3f4448185e305deb3ac96f7885b9f878afd6332058b.exe windows x86
96ac5b9238a49b51d8eed34cf61fb10e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
VirtualAlloc
GetVersion
GetModuleHandleA
EndUpdateResourceA
DeleteVolumeMountPointW
LoadLibraryA
SetConsoleMode
GetHandleInformation
GetProcessHeap
OpenEventW
VirtualUnlock
TransactNamedPipe
VerLanguageNameA
GetUserDefaultLCID
GetConsoleAliasExesLengthA
FindFirstFileExA
VerLanguageNameW
GetLocalTime
SetStdHandle
LockFileEx
GetSystemTime
GlobalMemoryStatus
EnumSystemCodePagesW
ReadFile
FreeLibrary
BackupRead
GetNamedPipeHandleStateA
IsValidLocale
SetSystemPowerState
version
VerQueryValueW
GetFileVersionInfoSizeA
VerFindFileA
VerFindFileW
VerInstallFileA
VerQueryValueA
GetFileVersionInfoSizeW
VerInstallFileW
GetFileVersionInfoA
opengl32
glLightModeliv
wglMakeCurrent
glEvalPoint2
glIndexub
glNewList
glDeleteTextures
wglDeleteContext
wglCreateContext
glShadeModel
glTexEnvfv
glRasterPos3dv
glColor4f
glColor3uiv
glGetMapdv
msvcrt
_unlink
fclose
setvbuf
fprintf
towupper
fwrite
__p___argc
sprintf
feof
fseek
_mbccpy
fsetpos
_mbsnbcat
fopen
ftell
fputc
fread
_spawnve
_onexit
fwprintf
cosh
memset
isleadbyte
_except_handler3
fputs
ferror
rename
printf
Sections
.text Size: 648KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE