Static task
static1
Behavioral task
behavioral1
Sample
41873393bee5a0d7017d9ac7e49253f5d7c0af9b61fc3ed0abd5b401b6df714a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
41873393bee5a0d7017d9ac7e49253f5d7c0af9b61fc3ed0abd5b401b6df714a.exe
Resource
win10v2004-20220901-en
General
-
Target
41873393bee5a0d7017d9ac7e49253f5d7c0af9b61fc3ed0abd5b401b6df714a
-
Size
557KB
-
MD5
cde3ce2de66002c0e64577e1a6a35c69
-
SHA1
7ab8d6ccab39747c0e7e28918adc80db3c03d860
-
SHA256
41873393bee5a0d7017d9ac7e49253f5d7c0af9b61fc3ed0abd5b401b6df714a
-
SHA512
63f998b3622d29202ab6c7a20a9127947011e58d4ca95e49bbde056a5a8013060865dc1d29574cad5c3f9fe389e9db4c851a7961ac67bec0a55140afbb3b9565
-
SSDEEP
12288:gYpuvP4JU5sBIvn7pfnAMz7JbtVN1vhYbw98bOSuS2:gdvPYUsQ7ZhxvvhYbvbOSuS2
Malware Config
Signatures
Files
-
41873393bee5a0d7017d9ac7e49253f5d7c0af9b61fc3ed0abd5b401b6df714a.exe windows x86
33a570791fd0f1c10c8274ce6d0f2b36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glTexGend
glLightiv
glRasterPos2s
glBlendFunc
glColor3b
glGetBooleanv
glDisableClientState
glEvalCoord1f
glTexCoord2f
glTranslatef
gdi32
CreateCompatibleBitmap
AbortDoc
GetBitmapDimensionEx
GetBkMode
DeleteObject
CreateDCA
ExtSelectClipRgn
FloodFill
FrameRgn
CloseEnhMetaFile
Escape
CreateDCW
FillRgn
CopyMetaFileA
CopyEnhMetaFileW
shlwapi
SHRegEnumUSValueA
StrChrIW
PathCompactPathExA
SHRegGetBoolUSValueW
StrCatW
PathCombineW
StrRChrIA
PathIsSameRootW
StrFormatByteSizeA
kernel32
GlobalReAlloc
GlobalAlloc
LCMapStringA
WideCharToMultiByte
GlobalFree
MultiByteToWideChar
GetACP
GetStringTypeA
GetSystemDefaultLangID
GetCPInfoExA
FoldStringA
ReleaseMutex
LocalHandle
GetModuleHandleA
GetProcAddress
VirtualAllocEx
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetLastError
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
WriteFile
CloseHandle
CreateFileA
SetStdHandle
GetCPInfo
GetOEMCP
LoadLibraryA
FlushFileBuffers
SetEndOfFile
ReadFile
LCMapStringW
GetStringTypeW
msvfw32
ICLocate
ICOpenFunction
avifil32
AVIStreamCreate
AVIFileEndRecord
AVIMakeFileFromStreams
AVIStreamAddRef
AVIMakeCompressedStream
wsnmp32
ord603
ord106
ord905
ord502
ord901
ord105
ord503
ord206
ord401
ord504
activeds
ord23
ord22
ord14
cryptui
CryptUIWizExport
CryptUIWizDigitalSign
CryptUIWizImport
CryptUIDlgViewContext
odbc32
ord59
Sections
.text Size: 516KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ