Static task
static1
Behavioral task
behavioral1
Sample
2f13c8e5597691ae5d5e02c28b12555f51a0fe93db71e5874fad0da55a8c7010.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f13c8e5597691ae5d5e02c28b12555f51a0fe93db71e5874fad0da55a8c7010.exe
Resource
win10v2004-20220901-en
General
-
Target
2f13c8e5597691ae5d5e02c28b12555f51a0fe93db71e5874fad0da55a8c7010
-
Size
3.6MB
-
MD5
3d7a88931520c441bb33ae60b804bcdd
-
SHA1
ca89b7c10bd7c6247ba27851e1ab639054cb3619
-
SHA256
2f13c8e5597691ae5d5e02c28b12555f51a0fe93db71e5874fad0da55a8c7010
-
SHA512
c3fa1ced59965f5fac29906f3c1b070b4cacdd7e2f7c5b3a278037a4908ccc99a0fb557401ac21fd44e7f1416974cd73d066f512e6f9961e194c96f0cb8605d0
-
SSDEEP
98304:rTLY5Bd75XyFR05UiOPwmJykA2vG6I5ONHJ:vLY5Bd75CFq5OwAykA2v3oO
Malware Config
Signatures
Files
-
2f13c8e5597691ae5d5e02c28b12555f51a0fe93db71e5874fad0da55a8c7010.exe windows x86
4a0e5c3722e3589ccf37884f93e9832a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
CreateProcessA
GetExitCodeProcess
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
ReadProcessMemory
GetCurrentProcessId
GetLastError
FindFirstFileA
FindNextFileA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetStdHandle
HeapSize
SetLastError
TlsFree
GetCurrentProcess
TlsAlloc
TlsGetValue
GetStringTypeW
LCMapStringW
LCMapStringA
GetCPInfo
ExitProcess
GetModuleHandleW
GetFileType
GetCurrentThreadId
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
CreateThread
ResumeThread
ExitThread
GetFileAttributesA
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
InterlockedExchange
InterlockedCompareExchange
IsProcessorFeaturePresent
InterlockedDecrement
GetProcessHeap
HeapValidate
InterlockedIncrement
QueryPerformanceCounter
ReadFile
WriteFile
SetFilePointer
SetUnhandledExceptionFilter
GetCurrentThread
GetCurrentDirectoryW
GetTickCount
MoveFileA
GetPrivateProfileStringA
lstrlenA
GetCurrentDirectoryA
DeleteFileA
CreateMutexA
ReleaseMutex
GlobalFree
GetModuleFileNameA
FindClose
MultiByteToWideChar
SetFileAttributesA
InitializeCriticalSection
CreateEventA
SetThreadPriority
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
DeleteCriticalSection
SetEvent
GetSystemInfo
CreateToolhelp32Snapshot
Process32First
OpenProcess
Module32First
WinExec
CreateFileA
GetFileSize
UnmapViewOfFile
CreateFileMappingA
OutputDebugStringA
MapViewOfFile
GlobalAlloc
CreateDirectoryA
ReleaseSemaphore
lstrlenW
GlobalLock
GlobalUnlock
GetVersionExA
GetSystemDirectoryA
GetLocaleInfoA
FreeLibrary
LoadLibraryA
GetProcAddress
CompareStringA
WideCharToMultiByte
GetModuleHandleA
Sleep
Module32Next
CloseHandle
TlsSetValue
Process32Next
user32
ChangeDisplaySettingsA
GetCapture
GetSystemMetrics
EndPaint
ReleaseCapture
BeginPaint
UnregisterClassA
RegisterClassExA
UpdateWindow
SetFocus
CharNextW
OpenClipboard
GetClipboardData
CloseClipboard
GetKeyboardLayout
GetKeyboardLayoutNameA
CreateWindowExA
SetWindowLongA
LoadCursorA
RegisterClassA
GetMenu
AdjustWindowRectEx
MoveWindow
IsWindow
DestroyWindow
SetCapture
ClientToScreen
SetCursorPos
SetCursor
ShowCursor
DestroyCursor
LoadImageA
GetKeyState
FindWindowA
LoadIconA
SetWindowPos
SystemParametersInfoA
GetCursorPos
ScreenToClient
GetAsyncKeyState
PostQuitMessage
GetWindowLongA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
CharPrevExA
CharNextExA
InvalidateRect
ReleaseDC
FillRect
GetDC
PeekMessageA
OffsetRect
GetClientRect
SetRect
LoadStringA
MessageBoxA
ShowWindow
gdi32
SelectObject
GetStockObject
TextOutW
GetCharABCWidthsFloatW
GetTextExtentPoint32W
SetBkColor
SetTextColor
DeleteDC
CreateDIBSection
CreateCompatibleDC
SetBkMode
EnumFontFamiliesExA
PatBlt
CreateSolidBrush
StretchBlt
GetTextExtentPoint32A
CreateFontIndirectA
DeleteObject
TextOutA
ole32
CoUninitialize
CoInitialize
OleInitialize
CoGetClassObject
OleSetContainedObject
CoInitializeEx
OleUninitialize
CoCreateInstance
winmm
timeGetTime
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
d3d8
Direct3DCreate8
python22
PyString_InternFromString
Py_BuildValue
PyModule_AddIntConstant
Py_InitModule4
PyLong_AsLong
PyDict_GetItemString
PyType_IsSubtype
PyDict_Type
PyTuple_GetItem
PyTuple_Size
PyLong_FromUnsignedLongLong
PyInt_AsLong
PyDict_Size
PyErr_SetString
PyExc_RuntimeError
PyTuple_Type
PyList_Append
PyString_FromString
PyList_New
PyErr_BadArgument
_Py_NoneStruct
PyFloat_AsDouble
PyString_AsString
PyString_Type
PyErr_Print
PyObject_CallObject
PyCallable_Check
PyErr_Clear
PyObject_GetAttrString
PyObject_GetAttr
PyNumber_Check
Py_Finalize
PyErr_Fetch
Py_Initialize
PyRun_String
PyDict_Next
PyDict_SetItemString
PyImport_ImportModule
PyModule_GetDict
PyImport_AddModule
Py_SetProgramName
imm32
ImmSetCompositionStringW
ImmAssociateContext
ImmIsIME
ImmGetOpenStatus
ImmGetIMEFileNameA
ImmNotifyIME
ImmGetCompositionStringW
ImmGetConversionStatus
ImmGetContext
ImmSetConversionStatus
ImmReleaseContext
ImmGetCandidateListW
devil
ilConvertImage
ilCopyPixels
ilGenImages
ilBindImage
ilLoad
ilGetInteger
ilDeleteImages
ilInit
ilSetPixels
ilTexImage
ilSave
ilOriginFunc
ilShutDown
ilEnable
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
imagehlp
StackWalk
GetTimestampForLoadedLibrary
EnumerateLoadedModules
granny2
_GrannyNewLocalPose@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyFreeCompletedModelControls@4
_GrannyGetMeshVertexType@4
_GrannyNewMeshDeformer@12
_GrannyFreeMeshDeformer@4
_GrannyFreeLocalPose@4
_GrannyUpdateModelMatrix@16
_GrannySetModelClock@8
_GrannyNewMeshBinding@12
_GrannyFreeMeshBinding@4
_GrannyGetMeshBindingToBoneIndices@4
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetWorldPose4x4@8
_GrannyFindBoneByName@12
_GrannyFreeModelInstance@4
_GrannyInstantiateModel@4
_GrannyFreeWorldPose@4
_GrannyGetSourceSkeleton@4
_GrannyNewWorldPose@4
_GrannyReadEntireFileFromMemory@8
_GrannyGetFileInfo@4
_GrannyFreeFileSection@8
_GrannyFreeFile@4
_GrannyGetMaterialTextureByType@8
_GrannyFindMatchingMember@12
_GrannyConvertSingleObject@16
_GrannySetLogCallback@4
_GrannyGetMeshTriangleGroupCount@4
_GrannyGetMeshTriangleGroups@4
_GrannyGetMeshVertices@4
_GrannyDeformVertices@24
_GrannyCopyMeshVertices@12
_GrannyCopyMeshIndices@12
GrannyPNT332VertexType
_GrannyFreeControl@4
_GrannyGetControlSpeed@4
_GrannyGetControlLoopCount@4
_GrannyGetControlRawLocalClock@4
_GrannyGetControlLocalDuration@4
_GrannySetControlRawLocalClock@8
_GrannySetControlEaseIn@8
_GrannySetControlEaseOut@8
_GrannySetControlEaseOutCurve@28
_GrannyCompleteControlAt@8
_GrannyFreeControlIfComplete@4
_GrannyPlayControlledAnimation@12
_GrannySetControlSpeed@8
_GrannySetControlLoopCount@8
_GrannySetControlEaseInCurve@28
_GrannyFreeControlOnceUnused@4
_GrannyControlIsComplete@4
_GrannyMeshIsRigid@4
_GrannyGetMeshVertexCount@4
_GrannyGetTotalTypeSize@4
_GrannyGetMeshIndexCount@4
_GrannySampleModelAnimationsAccelerated@20
mss32
_AIL_file_type@8
_AIL_file_read@8
_AIL_set_file_callbacks@16
_AIL_close_3D_provider@4
_AIL_close_3D_listener@4
_AIL_set_3D_orientation@28
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_open_3D_listener@4
_AIL_open_3D_provider@4
_AIL_enumerate_3D_providers@12
_AIL_open_digital_driver@16
_AIL_open_stream@12
_AIL_close_digital_driver@4
_AIL_shutdown@0
_AIL_startup@0
_AIL_set_redist_directory@4
_AIL_release_3D_sample_handle@4
_AIL_allocate_3D_sample_handle@4
_AIL_auto_update_3D_position@8
_AIL_last_error@0
_AIL_set_3D_sample_file@8
_AIL_3D_sample_status@4
_AIL_start_3D_sample@4
_AIL_mem_free_lock@4
_AIL_stop_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_end_3D_sample@4
_AIL_set_3D_sample_volume@8
_AIL_close_stream@4
_AIL_stream_status@4
_AIL_start_stream@4
_AIL_set_stream_loop_count@8
_AIL_pause_stream@8
_AIL_stream_volume_levels@12
_AIL_set_stream_volume_levels@12
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_sample_status@4
_AIL_start_sample@4
_AIL_set_sample_loop_count@8
_AIL_stop_sample@4
_AIL_resume_sample@4
_AIL_end_sample@4
_AIL_sample_volume_pan@12
_AIL_set_sample_volume_pan@12
_AIL_decompress_ASI@24
_AIL_WAV_info@8
_AIL_set_3D_sample_loop_count@8
_AIL_3D_sample_volume@4
_AIL_decompress_ADPCM@12
speedtreert
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
??0STextures@CSpeedTreeRT@@QAE@XZ
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
??0CSpeedTreeRT@@QAE@XZ
??2CSpeedTreeRT@@SAPAXI@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
??1CSpeedTreeRT@@QAE@XZ
??3CSpeedTreeRT@@SAXPAX@Z
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
dinput8
DirectInput8Create
ws2_32
htons
gethostbyname
WSACleanup
inet_addr
WSAGetLastError
recv
closesocket
connect
ioctlsocket
socket
send
__WSAFDIsSet
select
WSAStartup
ddraw
DirectDrawCreate
advapi32
RegCloseKey
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
shell32
SHGetSpecialFolderPathA
oleaut32
SysFreeString
VariantClear
SysAllocString
VariantInit
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 426KB - Virtual size: 425KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 181KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 326KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE