Static task
static1
Behavioral task
behavioral1
Sample
e53dc26d1ebd6ccd7b9bb770b525d9b22ac99552dc51cf4fe8e8a129cdc936d3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e53dc26d1ebd6ccd7b9bb770b525d9b22ac99552dc51cf4fe8e8a129cdc936d3.exe
Resource
win10v2004-20220812-en
General
-
Target
e53dc26d1ebd6ccd7b9bb770b525d9b22ac99552dc51cf4fe8e8a129cdc936d3
-
Size
228KB
-
MD5
9a6866ba3d020149a4a61a5107d7cca6
-
SHA1
07eac21156b2b010554733574542714c702501ec
-
SHA256
e53dc26d1ebd6ccd7b9bb770b525d9b22ac99552dc51cf4fe8e8a129cdc936d3
-
SHA512
06c799bcb3dd16165381406914898b859b2ac1df6798c2e0c11d3ae3e51d92e5669228b0015813db1e6dea845da6fd2b20e60b5cf62a69a5864c55200c57281b
-
SSDEEP
3072:qLy+oA5vfs3So+WLQ0xwTADLHbDYYIDuyu+SkhCEEtMg9xSAGDXc/4YKvNsQFFij:K9ro7LQ0/KVykS9wxPYKPaWbnk
Malware Config
Signatures
Files
-
e53dc26d1ebd6ccd7b9bb770b525d9b22ac99552dc51cf4fe8e8a129cdc936d3.exe windows x86
a3f0885285ac63a9e4e2f534828b67fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
glu32
gluScaleImage
gluSphere
gluBeginTrim
gluUnProject
gluDeleteNurbsRenderer
gluTessProperty
gluDeleteQuadric
gluBeginCurve
gluNurbsCallback
gluPerspective
gluTessBeginContour
user32
AnyPopup
MessageBoxIndirectA
CreateDialogIndirectParamA
SendDlgItemMessageA
GetDesktopWindow
CloseWindow
SetDlgItemTextA
ole32
ReadFmtUserTypeStg
CoFreeLibrary
CoFileTimeNow
CreateAntiMoniker
OleIsCurrentClipboard
GetHGlobalFromILockBytes
OleRegEnumVerbs
OleSetClipboard
comctl32
ord8
ord4
UninitializeFlatSB
PropertySheetW
ord6
DestroyPropertySheetPage
ord5
shlwapi
StrChrIW
StrCmpNA
StrRStrIW
StrStrA
StrRChrW
StrChrW
StrToIntA
kernel32
GetProcAddress
Sleep
VirtualAllocEx
GetModuleHandleW
GetModuleHandleA
GetStartupInfoA
secur32
VerifySignature
EncryptMessage
ExportSecurityContext
DecryptMessage
aclui
ord2
ord1
activeds
ord22
ord3
ord7
msvcrt
_adjust_fdiv
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
__p__commode
_controlfp
_except_handler3
__set_app_type
__p__fmode
_exit
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 203KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE