Static task
static1
Behavioral task
behavioral1
Sample
05c9e5620185c3d4ddcfccb5d3a409d0c570a246d8cc302a8c1c54fceee847a5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
05c9e5620185c3d4ddcfccb5d3a409d0c570a246d8cc302a8c1c54fceee847a5.exe
Resource
win10v2004-20220901-en
General
-
Target
05c9e5620185c3d4ddcfccb5d3a409d0c570a246d8cc302a8c1c54fceee847a5
-
Size
2.0MB
-
MD5
925e161a3e6d09e1ae96c9a4e3a6f804
-
SHA1
b1965474776e9eb245af78bba77d6909d8dcf6bc
-
SHA256
05c9e5620185c3d4ddcfccb5d3a409d0c570a246d8cc302a8c1c54fceee847a5
-
SHA512
31a190204b899d93f1332dcc55bfb3094a7ee0f69e5b2d6f5e6b3cc15bee256aad4d61f3131e6cf3d6a17f6eb8852e8129f8066afaaf3c595874df5af8e9bc36
-
SSDEEP
24576:6HisiAjDAUdI87vbdiqJbf83kOBU5KTk7c2vTWbAypRQuaMPepEealgGPxmU:8BiA1tzbfaGKGcXACRnaM2pEjgGPb
Malware Config
Signatures
Files
-
05c9e5620185c3d4ddcfccb5d3a409d0c570a246d8cc302a8c1c54fceee847a5.exe windows x86
0c2a769b489d7c1f049f72f587e39fa8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
d3d9
Direct3DCreate9
d3dx9_30
D3DXCreateTexture
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileExA
D3DXMatrixRotationAxis
D3DXComputeBoundingBox
D3DXComputeNormals
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXVec3Transform
D3DXMatrixPerspectiveFovLH
D3DXMatrixLookAtLH
D3DXMatrixRotationQuaternion
D3DXQuaternionSlerp
D3DXQuaternionRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixRotationY
D3DXMatrixRotationX
D3DXVec3TransformCoord
D3DXMatrixMultiply
D3DXMatrixTranslation
D3DXMatrixRotationYawPitchRoll
D3DXMatrixScaling
D3DXVec3Normalize
dinput8
DirectInput8Create
winmm
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
kernel32
GetProcessHeap
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileA
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WritePrivateProfileStringA
GetLocalTime
GetPrivateProfileStringA
WaitForSingleObject
OutputDebugStringA
GetVersionExA
GetFileAttributesA
FindFirstFileA
FindClose
GetModuleHandleA
GetModuleFileNameA
CreateDirectoryA
MultiByteToWideChar
QueryPerformanceFrequency
QueryPerformanceCounter
Sleep
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetFileType
SetHandleCount
SetFilePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
CloseHandle
ReadFile
VirtualAlloc
VirtualFree
HeapCreate
GetStdHandle
CreateMutexA
WriteFile
HeapSize
InterlockedDecrement
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetModuleHandleW
GetProcAddress
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
user32
BeginPaint
SetWindowPos
CreateWindowExA
AdjustWindowRect
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
wsprintfA
ScreenToClient
GetCursorPos
MoveWindow
EndPaint
GetSystemMetrics
SendMessageA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
DefWindowProcA
ShowCursor
PostQuitMessage
gdi32
GetStockObject
shell32
SHGetFolderPathA
ole32
CoUninitialize
CoInitialize
dsound
ord1
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE