Static task
static1
Behavioral task
behavioral1
Sample
1c3d8f4e74a3931858b178baa09e1d5ff5144fa47e390885c160cf9388bec02f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1c3d8f4e74a3931858b178baa09e1d5ff5144fa47e390885c160cf9388bec02f.exe
Resource
win10v2004-20220812-en
General
-
Target
1c3d8f4e74a3931858b178baa09e1d5ff5144fa47e390885c160cf9388bec02f
-
Size
418KB
-
MD5
a17d32b6b8d99eb25259eb91ab626290
-
SHA1
9f57ea7a0241fee330e5512f48b84c2ac4503aca
-
SHA256
1c3d8f4e74a3931858b178baa09e1d5ff5144fa47e390885c160cf9388bec02f
-
SHA512
445db660bb0ff833572f554b4594be2a7175bcdc922f2a8ac393b6dcc1d839eabb203bd11a185886ab258f8a14ef7ea1dbee2dd91c019494a02e1392b76769dd
-
SSDEEP
6144:gHQHi/cbTGuahCQp92mp7ULmdButqfMsoCHYMVsE:gA8rrN6L9MlH0E
Malware Config
Signatures
Files
-
1c3d8f4e74a3931858b178baa09e1d5ff5144fa47e390885c160cf9388bec02f.exe windows x86
33af7357d3612b85f466da7b173395f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
msasn1
ASN1utf8string_free
ASN1BEREncExplicitTag
ASN1BERDecZeroChar32String
ASN1open_cmp
ASN1BERDecOpenType2
ASN1BEREncLength
ASN1CEREncUTCTime
ASN1charstring_free
ASN1BEREncGeneralizedTime
ASN1BEREoid_free
ASN1CEREncNewBlkElement
ASN1uint32_uoctets
ASN1BERDecObjectIdentifier
ASN1BERDecExplicitTag
ASN1Free
ASN1BERDecPeekTag
ASN1BEREncTag
ASN1CEREncBeginBlk
ASN1_Decode
ASN1_FreeDecoded
ASN1BERDecFlush
ASN1BEREncUTCTime
ASN1charstring_cmp
ASN1objectidentifier_cmp
rsaenh
CPGenKey
CPExportKey
CPSetKeyParam
msvcrt
??9type_info@@QBEHABV0@@Z
__p__fmode
difftime
__set_app_type
iswspace
_wstat
__dllonexit
_fstat
_safe_fprem1
__p__commode
malloc
__pioinfo
_unlink
_findfirst
_wctime64
fsetpos
_spawnl
free
wcsxfrm
__p__daylight
??_U@YAPAXI@Z
_mbsncpy
_wcreat
_ismbbpunct
kernel32
lstrcpyW
WaitForMultipleObjects
AddConsoleAliasA
GetModuleHandleA
VirtualAlloc
AddAtomA
GetACP
AddConsoleAliasW
user32
IsChild
EndTask
LoadCursorFromFileW
CloseDesktop
FindWindowW
DrawAnimatedRects
GetWindowRect
DeleteMenu
GetMenu
FindWindowA
DrawEdge
GetClientRect
GetSysColorBrush
ResolveDesktopForWOW
wvsprintfW
AdjustWindowRectEx
GetForegroundWindow
ScreenToClient
GetUserObjectSecurity
CharPrevW
EnumThreadWindows
GetDesktopWindow
GetWindowTextA
GetProcessDefaultLayout
glu32
gluPwlCurve
gluTessBeginPolygon
gluGetTessProperty
gluErrorString
gluTessEndPolygon
gluNurbsSurface
gluCylinder
gluProject
gluNewTess
gluEndPolygon
gluPartialDisk
gluBeginSurface
gluGetString
gluGetNurbsProperty
gluLookAt
gluBeginCurve
gluQuadricDrawStyle
gluUnProject
gluNurbsProperty
gluNewQuadric
gluBuild1DMipmaps
gluNurbsCallback
gluEndTrim
glmf32
glsGetLayerf
glsDataPointer
glsEndCapture
glsGLRCLayer
glsGenContext
glsEnumString
glsDisplayMapfv
glsGetStreamAttrib
glsUTF8toUCS1z
glsNumf
icmp
IcmpSendEcho2
IcmpCloseHandle
register_icmp
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 335KB - Virtual size: 335KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ