Static task
static1
Behavioral task
behavioral1
Sample
2641555eea1bc4e4862d56c9f9f93b4d32385a247fe262321dd296098dd0f638.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2641555eea1bc4e4862d56c9f9f93b4d32385a247fe262321dd296098dd0f638.exe
Resource
win10v2004-20220901-en
General
-
Target
2641555eea1bc4e4862d56c9f9f93b4d32385a247fe262321dd296098dd0f638
-
Size
565KB
-
MD5
92db298a53fab4e6bb60d098babbf2b0
-
SHA1
56f982a6a36645534296692b68b58e818dc4d2ed
-
SHA256
2641555eea1bc4e4862d56c9f9f93b4d32385a247fe262321dd296098dd0f638
-
SHA512
b7e86e7dda8fc7c15cf53b399e11f1cd36acfb100059d1abb3a12c766110488147a633b989007088e9075a821b027eaac5b196e543a9b8f1d20fae8cd2866310
-
SSDEEP
12288:a14HsKa59VKq/sDV9qUk+qedQuoddK1HW1d1FXU/P:E6SmVuHHDK1HuFsP
Malware Config
Signatures
Files
-
2641555eea1bc4e4862d56c9f9f93b4d32385a247fe262321dd296098dd0f638.exe windows x86
11c59cc78bf1938f9760b4fa517db08d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
IsValidLocale
GetVersion
GetProcAddress
GetHandleInformation
ReadConsoleOutputAttribute
HeapLock
WriteConsoleInputW
Beep
GetSystemTime
GetLocalTime
GlobalReAlloc
EnumResourceTypesW
FreeLibrary
IsDBCSLeadByte
LoadLibraryA
RegisterWowExec
UnlockFile
ScrollConsoleScreenBufferW
GetModuleHandleA
GetStartupInfoA
opengl32
wglCreateLayerContext
glGenTextures
glRasterPos3iv
glRectf
glTexCoord1s
glColor3bv
glLightiv
glLightfv
glCullFace
glEndList
glTexCoord4iv
glRasterPos3sv
wglGetPixelFormat
glVertex3d
glPopAttrib
glGetMapfv
glColor4sv
glRasterPos2fv
glIndexPointer
glGetString
glColor4ub
glLogicOp
glStencilOp
glMap2d
glLightModeli
glTexCoord2f
glRasterPos4f
glRectiv
wglGetDefaultProcAddress
glBlendFunc
glRasterPos3s
glRenderMode
glGetFloatv
wglDeleteContext
wglMakeCurrent
wglCreateContext
glFeedbackBuffer
glRasterPos3f
msvcrt
fwprintf
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_acmdln
exit
_exit
sprintf
_ismbbkpunct
memcpy
_spawnl
_XcptFilter
_execl
_mbctoupper
fsetpos
_getche
ftell
_unlink
vwprintf
__argv
_outpd
_initterm
printf
strncmp
towupper
_wexeclpe
iswupper
fputc
_wfullpath
_setjmp3
fclose
strncat
_chkesp
fprintf
sqrt
fseek
_wcsncoll
_ismbbpunct
_putenv
__p__pwctype
_mbsrchr
_ctype
strspn
_CIlog10
ferror
_msize
fopen
__winitenv
fputs
_wfindfirsti64
fwrite
fread
memset
_ismbbkprint
_utime
_stati64
_eof
feof
_wfopen
_c_exit
_get_sbh_threshold
_wcsrev
_strdate
_strrev
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 504KB - Virtual size: 502KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE