Static task
static1
Behavioral task
behavioral1
Sample
0de8f275570df64bdec7edc86ddf20b6afd88627326a184edc695c00600ed9e3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0de8f275570df64bdec7edc86ddf20b6afd88627326a184edc695c00600ed9e3.exe
Resource
win10v2004-20220812-en
General
-
Target
0de8f275570df64bdec7edc86ddf20b6afd88627326a184edc695c00600ed9e3
-
Size
44KB
-
MD5
84e4ef052800b8fd3d2d9b6bb75633f1
-
SHA1
47fb5c24f93a999daa7a87341bacf0d3e7eec4e5
-
SHA256
0de8f275570df64bdec7edc86ddf20b6afd88627326a184edc695c00600ed9e3
-
SHA512
c57485a849852ff2ea5d195ef08d2abea226f88764123af394a052515389df15a64271881022412baecc5a8f33b005bdc4db40745156e75563534d74c343f21c
-
SSDEEP
768:p18XhFr9ajWyOoJUpdOWQ/gKPFnk2CJznSk67T2wZRxC03wJkgj:pmhFraWLoJUHOWYg8kDmfTnxC96gj
Malware Config
Signatures
Files
-
0de8f275570df64bdec7edc86ddf20b6afd88627326a184edc695c00600ed9e3.exe windows x86
57f08706a52a525455fe6a5e7a8752e8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
duser
GetGadgetAnimation
GetGadgetRect
AutoTrace
DUserCastHandle
RegisterGadgetMessageString
UnregisterGadgetProperty
DUserPostEvent
InvalidateGadget
SetGadgetParent
DUserInstanceOf
RemoveGadgetMessageHandler
GetGadgetSize
ForwardGadgetMessage
DUserGetGutsData
FindGadgetFromPoint
MapGadgetPoints
SetGadgetProperty
RemoveGadgetProperty
GetStdColorPenF
DUserStopAnimation
RegisterGadgetProperty
UtilBuildFont
DUserCastClass
DUserRegisterGuts
SetGadgetStyle
SetGadgetRotation
GetStdColorBrushF
odbc32
SQLDriverConnectA
SQLTables
SQLGetDescField
g_hHeapMalloc
SQLBindCol
SQLColAttributes
SQLGetDiagRec
SQLFreeEnv
ODBCInternalConnectW
SQLSpecialColumns
SQLDescribeColA
SQLNumParams
SQLFreeHandle
SQLSetParam
PostODBCComponentError
SQLForeignKeys
SQLPrimaryKeysW
SQLGetInfoW
SQLGetStmtOption
SQLFreeStmt
SQLDrivers
CursorLibLockStmt
PostComponentError
SQLDriversA
SQLTablesA
SQLBulkOperations
SQLForeignKeysW
SQLDescribeColW
SQLFreeConnect
SQLSetCursorNameW
SQLBrowseConnectW
SearchStatusCode
SQLConnectW
SQLSetConnectAttrW
SQLGetConnectAttrA
CursorLibLockDesc
SQLGetData
SQLColumnPrivilegesW
SQLMoreResults
SQLGetConnectOptionA
SQLGetDiagFieldA
SQLSetDescRec
SQLSetConnectAttrA
SQLExecDirectA
SQLSetStmtAttrA
SQLCopyDesc
SQLGetDescRec
SQLGetInfo
SQLTablePrivileges
SQLDataSourcesA
SQLPrepare
SQLGetEnvAttr
SQLGetConnectAttr
SQLBrowseConnect
SQLProcedures
SQLGetTypeInfoW
SQLSetConnectOptionW
SQLStatisticsA
VRetrieveDriverErrorsRowCol
opengl32
glColor4i
glColor4f
glGetMaterialiv
glDebugEntry
wglCreateContext
glGenTextures
glGetIntegerv
glPushAttrib
glMap1d
glVertex4dv
GlmfPlayGlsRecord
glPixelZoom
wglCreateLayerContext
glPushMatrix
glIndexubv
glPolygonStipple
glLineStipple
glGetError
glRotatef
glFogi
glMap2f
glVertex2dv
wglGetDefaultProcAddress
glRasterPos4dv
glColor3b
glEdgeFlagv
glTexEnvi
glTexGend
kernel32
HeapSize
TlsSetValue
ReplaceFileA
Module32First
GetFileAttributesExW
SetComputerNameA
VirtualAlloc
DeleteFileA
GetHandleContext
SizeofResource
HeapCreate
LoadLibraryA
CopyFileExA
GlobalReAlloc
RemoveDirectoryA
FindClose
lstrcpyn
FindActCtxSectionStringA
IsProcessInJob
GetSystemTimeAsFileTime
GetSystemDirectoryA
CreateNamedPipeA
GetExitCodeProcess
GetModuleHandleA
SetConsoleScreenBufferSize
GlobalLock
AddConsoleAliasA
ClearCommBreak
FindAtomW
WriteProfileStringW
GetConsoleScreenBufferInfo
SetupComm
iasrad
?radiusToIAS@VSAFilter@@QBEJPAUIAttributesRaw@@@Z
?initialize@VSAFilter@@QAEJXZ
?shutdown@VSAFilter@@QAEJXZ
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ