Static task
static1
Behavioral task
behavioral1
Sample
1a243f152fb48ea07c9747159a6bb889ed5435b479cfb4b465beba757b6cf32b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1a243f152fb48ea07c9747159a6bb889ed5435b479cfb4b465beba757b6cf32b.exe
Resource
win10v2004-20220812-en
General
-
Target
1a243f152fb48ea07c9747159a6bb889ed5435b479cfb4b465beba757b6cf32b
-
Size
232KB
-
MD5
96835a92c5e0fad5e4e9d42b3ce0ad80
-
SHA1
8950f4f17810979848827d1a413fa5720ce1d574
-
SHA256
1a243f152fb48ea07c9747159a6bb889ed5435b479cfb4b465beba757b6cf32b
-
SHA512
4871e3a9945b0e6cc71880b8d49f5d928cca997e64cdb8f163c3421e0403ad8eb7acdb9e9e389aed2db57f16371d7cbc14407a4d984b66b66c970e984c11a858
-
SSDEEP
6144:3mJ9rlYSWnf6Ejpv0EruEzjJwZEDw0Dn79+E0NC4:3mPwCEtvxCEzKEDHB+TNB
Malware Config
Signatures
Files
-
1a243f152fb48ea07c9747159a6bb889ed5435b479cfb4b465beba757b6cf32b.exe windows x86
b610ac3f18df4d80a71ada1773584196
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glTexSubImage2D
glColor4ub
glVertex3fv
glMapGrid1d
glGetMaterialfv
glFogfv
glGetMapfv
glColor3s
glTexCoord3s
glLightModeliv
glEnable
glColorMaterial
glPixelZoom
glRasterPos2iv
glIndexs
glEvalCoord1d
glGetClipPlane
glRasterPos3fv
glLightModelfv
glEvalCoord2d
glStencilFunc
wglSwapMultipleBuffers
glVertex2i
glTexCoord3f
glGetTexEnvfv
wglUseFontBitmapsA
glVertex2sv
glTexCoord1iv
glCopyTexSubImage2D
certcli
CASetCertTypeProperty
CAUpdateCertType
CACloseCertType
CAFindByName
CAOIDDelete
CASetCAProperty
CAEnumCertTypes
CAGetCACertificate
CACountCertTypes
CAOIDCreateNew
CAGetCAExpiration
CAFindByCertType
CAGetCertTypeKeySpec
CAGetCertTypeExtensionsEx
CAFreeCertTypeProperty
CAFindByIssuerDN
GetProxyDllInfo
CARemoveCACertificateType
DllCanUnloadNow
CACreateCertType
CAGetCertTypeFlagsEx
CACountCAs
CAEnumCertTypesEx
CACertTypeSetSecurity
CAUpdateCA
CASetCertTypeFlags
CAGetCertTypeExpiration
CAOIDFreeProperty
CAOIDFreeLdapURL
cmutil
?GetPrimaryFile@CIniW@@QBEPBGXZ
?SetICSDataPath@CIniW@@QAEXPBG@Z
?Clear@CmLogFile@@QAEXH@Z
?SetEntry@CIniA@@QAEXPBD@Z
CmMoveMemory
?IsEnabled@CmLogFile@@QAEHXZ
CmAtolA
?GetFile@CIniA@@QBEPBDXZ
CmIsDigitW
?GPPS@CIniW@@QBEPAGPBG00@Z
CmFmtMsgA
?GPPS@CIniA@@QBEPADPBD00@Z
CmLoadSmallIconA
CmEndOfStrW
??0CRandom@@QAE@XZ
CmStrStrW
?GetSection@CIniA@@QBEPBDXZ
GetOSMajorVersion
?GetHInst@CIniW@@QBEPAUHINSTANCE__@@XZ
?GetRegPath@CIniW@@QBEPBGXZ
CmStrCpyAllocA
??0CIniW@@QAE@PAUHINSTANCE__@@PBG111@Z
CmStrtokW
??4CIniA@@QAEAAV0@ABV0@@Z
?LoadEntry@CIniW@@IBEPAGPBG@Z
CmIsSpaceW
?GPPB@CIniW@@QBEHPBG0H@Z
??1CmLogFile@@QAE@XZ
CmRealloc
?GetPrimaryFile@CIniA@@QBEPBDXZ
sqlsrv32
BCP_writefmt
SQLColAttributeW
SQLParamOptions
SQLPutData
BCP_setcolfmt
SQLMoreResults
SQLExtendedFetch
ConfigDriverW
SQLBindCol
SQLSetCursorNameW
BCP_colptr
SQLGetDiagRecW
SQLExecDirectW
BCP_getcolfmt
SQLSetStmtAttrW
BCP_bind
BCP_exec
mprapi
MprAdminUserServerDisconnect
MprAdminInterfaceGetHandle
MprAdminMIBEntryGetNext
MprConfigTransportEnum
MprAdminIsDomainRasServer
MprAdminBufferFree
MprAdminUserGetInfo
MprAdminPortReset
MprAdminInterfaceDeviceSetInfo
MprAdminConnectionGetInfo
MprAdminMIBServerConnect
MprConfigServerBackup
MprConfigTransportDelete
MprAdminInterfaceGetCredentials
MprAdminInterfaceGetInfo
MprConfigInterfaceGetInfo
MprConfigServerInstall
MprInfoBlockSet
MprConfigInterfaceGetHandle
MprAdminUpgradeUsers
MprAdminUserServerConnect
kernel32
SetCriticalSectionSpinCount
GetTimeZoneInformation
SetLastError
FillConsoleOutputCharacterW
CompareStringW
QueryInformationJobObject
HeapFree
LoadLibraryW
GetTickCount
GetPrivateProfileSectionNamesW
GlobalAddAtomA
FormatMessageW
GetVersionExW
crtdll
_mbclen
iswascii
strncpy
_mbsncat
_lrotl
ldexp
_wtol
__toascii
_strninc
_winminor_dll
_execlpe
_fgetwchar
_creat
_mbscmp
_fcloseall
wcscspn
_ltow
floor
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ