Static task
static1
Behavioral task
behavioral1
Sample
ec41250852c5792ecae41d7e1bf83b5808293bb4ae17f27aabef7b38c6fa2602.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec41250852c5792ecae41d7e1bf83b5808293bb4ae17f27aabef7b38c6fa2602.exe
Resource
win10v2004-20220901-en
General
-
Target
ec41250852c5792ecae41d7e1bf83b5808293bb4ae17f27aabef7b38c6fa2602
-
Size
71KB
-
MD5
2bd8a371283d4397494759048496c262
-
SHA1
1bdf089e0214c6a7ac57d519648d8ae2c12bf437
-
SHA256
ec41250852c5792ecae41d7e1bf83b5808293bb4ae17f27aabef7b38c6fa2602
-
SHA512
b0f02f0af987816cf35fc3686feb7303f3a6d9df0f226cc9e0f3be5f2816ff3b39bb7a5fc267a51ace7aa6ad5849917f88dc08ff1b134a8a40d12855233e43d0
-
SSDEEP
1536:NnYco+kZHBPys/LI4GeeWOd+RjbXP5d2sJobWqYyTrFV:Mz9Gee54RPP5kWhyTrFV
Malware Config
Signatures
Files
-
ec41250852c5792ecae41d7e1bf83b5808293bb4ae17f27aabef7b38c6fa2602.exe windows x86
f5998f289f4e73cbc6d89f412218d9cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glPassThrough
glOrtho
glIndexiv
glPixelMapuiv
glTexSubImage2D
glRasterPos3sv
glTexCoord1fv
glColor3d
glTexCoord2dv
glPolygonOffset
glVertex4s
glRasterPos4f
glTexCoord1sv
glu32
gluErrorString
gluGetString
gluProject
gluUnProject
gluBuild2DMipmaps
gluScaleImage
gluGetTessProperty
gluTessNormal
gluEndCurve
gluQuadricDrawStyle
gluNewNurbsRenderer
gluNurbsProperty
gluTessVertex
gluTessCallback
gluDisk
gdi32
GdiComment
DescribePixelFormat
CopyEnhMetaFileW
kernel32
GetModuleHandleW
VirtualAllocEx
GetProcAddress
Sleep
GetStartupInfoA
GetModuleHandleA
uxtheme
GetThemeEnumValue
GetThemeFont
GetThemeSysString
GetThemeSysSize
wsnmp32
ord103
ord400
ord502
ord106
ord905
ord204
ord401
ord102
ord903
ord402
ord101
ord302
ord602
ord501
cryptui
CryptUIWizImport
CryptUIWizDigitalSign
CryptUIWizExport
CryptUIDlgViewContext
msvcrt
__p__fmode
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_controlfp
_except_handler3
__set_app_type
_exit
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE