Static task
static1
Behavioral task
behavioral1
Sample
d6055811cb648d5aab417e73db54950909c10a62cf8fd217641f5633a012c198.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d6055811cb648d5aab417e73db54950909c10a62cf8fd217641f5633a012c198.exe
Resource
win10v2004-20220901-en
General
-
Target
d6055811cb648d5aab417e73db54950909c10a62cf8fd217641f5633a012c198
-
Size
630KB
-
MD5
09a4882b5ff22678e6919b889cf40d9c
-
SHA1
b9cda41c1e56a9ea8dc5ec340b0f8c4288b866c3
-
SHA256
d6055811cb648d5aab417e73db54950909c10a62cf8fd217641f5633a012c198
-
SHA512
0906215f52e53403304a208ab22b0bd2c2d12c4d47ca6e8449d34469aa9bed7ba7753670f8b4dae939bb63d329e34a1b7899555f6511b72debec88603a40c514
-
SSDEEP
12288:37CnYz3auM0ahO8GmSXWej2HLruLsIM6wZOE1:GnXumSmegXuQIMkE1
Malware Config
Signatures
Files
-
d6055811cb648d5aab417e73db54950909c10a62cf8fd217641f5633a012c198.exe windows x86
82eb60a0c8cb9c41047fe7ee247eed96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetVersion
GetHandleInformation
DebugActiveProcess
GetConsoleCommandHistoryLengthA
EnumSystemCodePagesA
GetDiskFreeSpaceExA
FreeLibrary
LoadLibraryA
FindFirstVolumeMountPointA
GetOverlappedResult
WriteConsoleOutputW
CreateFileMappingW
GetStringTypeW
IsValidLocale
SetVolumeMountPointA
FlushViewOfFile
GetSystemTime
OpenFileMappingW
GetProcAddress
WriteConsoleInputA
GetModuleHandleA
CreateFileMappingA
GetLocalTime
user32
SetScrollPos
DrawIconEx
DispatchMessageW
shell32
SHGetSpecialFolderPathA
SHFileOperationA
StrRStrIW
SHLoadInProc
StrChrA
SHBrowseForFolderW
opengl32
wglDeleteContext
wglMakeCurrent
glTexCoord1iv
glMaterialfv
wglCreateContext
glPopAttrib
glVertex3s
glGenTextures
glTexCoord1fv
wglSwapLayerBuffers
glPixelZoom
msvcrt
fread
ftell
fprintf
fsetpos
_yn
_tell
ferror
fwprintf
_unlink
_isnan
fseek
_wfindfirsti64
memset
_ismbbpunct
fopen
printf
fclose
_ismbbalpha
_except_handler3
fputc
_ismbcalnum
sprintf
feof
_dstbias
fputs
fwrite
_winver
Sections
.text Size: 612KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE