Static task
static1
Behavioral task
behavioral1
Sample
6555a4091ee24bf8b6288badd75917734335a791c009dec5ca2d5927c5348b19.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6555a4091ee24bf8b6288badd75917734335a791c009dec5ca2d5927c5348b19.exe
Resource
win10v2004-20220901-en
General
-
Target
6555a4091ee24bf8b6288badd75917734335a791c009dec5ca2d5927c5348b19
-
Size
384KB
-
MD5
660be71c7ade31cbb1ad0e5e4119ac80
-
SHA1
3d90e4eb451e8e4f21fa7e2afd8b24872d790b9b
-
SHA256
6555a4091ee24bf8b6288badd75917734335a791c009dec5ca2d5927c5348b19
-
SHA512
2dd760d6e0cec0daaa822417b7b490ed695f7d1a6ba234dc6cc9dbf459bfaa10581c91d8b49693d4181c2728f0ab7ea511cfd1704f577c66f2c0db81a693f265
-
SSDEEP
6144:PBN5PmGrw6IgKNiwKbeTvYCIpP3iJ3WzNyOdbJL:PBNVmGs5TNiwKjJS32yOd9L
Malware Config
Signatures
Files
-
6555a4091ee24bf8b6288badd75917734335a791c009dec5ca2d5927c5348b19.exe windows x86
a5382cd2976ce7f0788f1d5d8eee5755
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
vxmath
??0XString@@QAE@PBDH@Z
??1XString@@QAE@XZ
ck2
?SetAsWaitingForMessages@CKBeObject@@QAEXH@Z
?Play@CKContext@@QAEJXZ
?Reset@CKContext@@QAEJXZ
?DeleteCKObjectArray@@YAXPAVCKObjectArray@@@Z
?LaunchScene@CKLevel@@QAEJPAVCKScene@@W4CK_SCENEOBJECTACTIVITY_FLAGS@@W4CK_SCENEOBJECTRESET_FLAGS@@@Z
?GetObjectA@CKContext@@QAEPAVCKObject@@K@Z
?GetObjectsListByClassID@CKContext@@QAEPAKJ@Z
?AddRenderContext@CKLevel@@QAEXPAVCKRenderContext@@H@Z
?GetCurrentLevel@CKContext@@QAEPAVCKLevel@@XZ
?Load@CKContext@@QAEJPADPAVCKObjectArray@@W4CK_LOAD_FLAGS@@PAUCKGUID@@@Z
?CreateCKObjectArray@@YAPAVCKObjectArray@@XZ
?AddPath@CKPathManager@@QAEHHAAVXString@@@Z
?GetPathManager@CKContext@@QAEPAVCKPathManager@@XZ
?CKCloseContext@@YAJPAVCKContext@@@Z
?GetRenderManager@CKContext@@QAEPAVCKRenderManager@@XZ
?GetTimeManager@CKContext@@QAEPAVCKTimeManager@@XZ
?GetMessageManager@CKContext@@QAEPAVCKMessageManager@@XZ
?CKCreateContext@@YAJPAPAVCKContext@@PAXHK@Z
?CKShutdown@@YAJXZ
?GetPluginCount@CKPluginManager@@QAEHH@Z
?ParsePlugins@CKPluginManager@@QAEHPAD@Z
?CKGetPluginManager@@YAPAVCKPluginManager@@XZ
?CKStartUp@@YAJXZ
?GetParameter@CKMessage@@QAEPAVCKParameter@@H@Z
?GetMessageTypeName@CKMessageManager@@QAEPADH@Z
?GetLastFrameMessage@CKBeObject@@QAEPAVCKMessage@@H@Z
?GetLastFrameMessageCount@CKBeObject@@QAEHXZ
?Process@CKContext@@QAEJXZ
?ResetChronos@CKTimeManager@@QAEXHH@Z
?GetTimeToWaitForLimits@CKTimeManager@@QAEXAAM0@Z
?IsPlaying@CKContext@@QAEHXZ
?ClearAll@CKContext@@QAEJXZ
?Pause@CKContext@@QAEJXZ
kernel32
CreateMutexA
GetLastError
CreateFileA
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
SetFilePointer
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetOEMCP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
CloseHandle
HeapFree
GetProcAddress
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetStdHandle
MultiByteToWideChar
GetCPInfo
LCMapStringW
SetEndOfFile
GetACP
ReadFile
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
RtlUnwind
GetModuleHandleA
user32
GetMessageA
GetWindowLongA
RegisterClassA
SendDlgItemMessageA
EndDialog
GetClientRect
PostQuitMessage
DefWindowProcA
SetFocus
DialogBoxParamA
SetWindowLongA
SetWindowPlacement
DestroyWindow
PostMessageA
LoadStringA
CreateDialogParamA
GetWindowRect
ShowWindow
UpdateWindow
LoadIconA
RegisterClassExA
CreateWindowExA
SendMessageA
SetCursor
LoadAcceleratorsA
PeekMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
MessageBoxA
SetRect
AdjustWindowRect
GetSystemMetrics
SetWindowPos
GetWindowPlacement
gdi32
PatBlt
advapi32
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.srdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE