Static task
static1
Behavioral task
behavioral1
Sample
a1de1a4e1dbff7f46b16158b62d71761d74719b63ea09b8539de185f842fb3d0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1de1a4e1dbff7f46b16158b62d71761d74719b63ea09b8539de185f842fb3d0.exe
Resource
win10v2004-20220901-en
General
-
Target
a1de1a4e1dbff7f46b16158b62d71761d74719b63ea09b8539de185f842fb3d0
-
Size
1.3MB
-
MD5
0b792ff97662b97488f4c28980b07149
-
SHA1
f4581d9c270555b6893e49b840d00019afd99d0b
-
SHA256
a1de1a4e1dbff7f46b16158b62d71761d74719b63ea09b8539de185f842fb3d0
-
SHA512
de5ddef36753403a372221c7adf8952272d4f18f74f7fbd895357cfd25b62dd11eac98b0284781945b0f45b0b38b52a77c8b26c867602be525b4aa481ba23e76
-
SSDEEP
24576:r4WqeeKEqqHQmexzOEJmqpQzkdC3MzS4VhGrxXnIr0FcNkQH1r/s6:5KSmexzOlqpQzkscG8hGrRnIZ1r/
Malware Config
Signatures
Files
-
a1de1a4e1dbff7f46b16158b62d71761d74719b63ea09b8539de185f842fb3d0.exe windows x86
910393b26bb786504e9ade1defb4a80f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
opencl
clBuildProgram
clCreateBuffer
clCreateCommandQueue
clCreateContextFromType
clCreateKernel
clCreateProgramWithBinary
clCreateProgramWithSource
clEnqueueNDRangeKernel
clEnqueueReadBuffer
clEnqueueWriteBuffer
clFinish
clGetDeviceIDs
clGetDeviceInfo
clGetPlatformIDs
clGetPlatformInfo
clGetProgramBuildInfo
clGetProgramInfo
clReleaseCommandQueue
clReleaseContext
clReleaseKernel
clReleaseMemObject
clReleaseProgram
clSetKernelArg
libcurl
curl_easy_cleanup
curl_easy_getinfo
curl_easy_init
curl_easy_perform
curl_easy_reset
curl_easy_setopt
curl_easy_strerror
curl_global_cleanup
curl_global_init
curl_slist_append
curl_slist_free_all
pthreadgc2
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_create
pthread_detach
pthread_exit
pthread_join
pthread_kill
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_self
pthread_setcancelstate
pthread_setcanceltype
pthread_testcancel
ptw32_pop_cleanup
ptw32_push_cleanup
sched_yield
sem_destroy
sem_init
sem_post
sem_timedwait
sem_trywait
sem_wait
pdcurses
LINES
stdscr
mvwhline
mvwprintw
wmove
wclrtoeol
wresize
mvwin
wprintw
erase
wclear
nocbreak
delwin
endwin
wattron
wattroff
touchwin
wrefresh
echo
wgetnstr
immedok
getmaxy
getmaxx
newwin
idlok
scrollok
leaveok
noecho
initscr
halfdelay
wgetch
cbreak
kernel32
CloseHandle
CreateWaitableTimerA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FormatMessageA
FreeLibrary
GetConsoleScreenBufferInfo
GetCurrentProcessId
GetCurrentThread
GetModuleHandleA
GetProcAddress
GetStdHandle
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleCursorPosition
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
SwitchToThread
WaitForSingleObject
WideCharToMultiByte
msvcrt
_access
_close
_dup2
_execv
_fdopen
_isatty
_open
_stat
_strdup
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_iob
_isctype
_onexit
_pctype
_setmode
_snprintf
_stricmp
_strnicmp
_vsnprintf
abort
atexit
atof
atoi
calloc
div
exit
exp
fclose
fflush
fgetc
floor
fopen
fputc
fread
free
fseek
ftell
fwrite
getenv
localeconv
localtime
log10
malloc
mbstowcs
memchr
memcpy
memmove
memset
qsort
raise
realloc
setlocale
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncat
strncmp
strncpy
strrchr
strstr
strtok
strtol
time
tolower
toupper
wcslen
wcstombs
winmm
timeBeginPeriod
timeEndPeriod
ws2_32
WSAGetLastError
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getsockopt
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 313KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 46KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE