Static task
static1
Behavioral task
behavioral1
Sample
5c49f35dffd05870a9c20022fe3ca8ca5eb6f82306b24f68cb137bc8c72a2096.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5c49f35dffd05870a9c20022fe3ca8ca5eb6f82306b24f68cb137bc8c72a2096.exe
Resource
win10v2004-20220812-en
General
-
Target
5c49f35dffd05870a9c20022fe3ca8ca5eb6f82306b24f68cb137bc8c72a2096
-
Size
71KB
-
MD5
2f35157d817489c6a51e3b05e9545f60
-
SHA1
03a2d26e61ca644f43632938b1cc5100643df0c2
-
SHA256
5c49f35dffd05870a9c20022fe3ca8ca5eb6f82306b24f68cb137bc8c72a2096
-
SHA512
6e091dfe9a82ecc51a10b2993861bad8c1afb00fefe17b6efced06500fb2e0b807cb9352a6d7d421882e6e9ed1c02851dba41eeb933c382732a776ef8806aec1
-
SSDEEP
1536:vgKXSB6VTH+w/lbDmDBx4cGWcDYklVexT5eH:4KO4H+w/tDmDz4c7mYkyxT5eH
Malware Config
Signatures
Files
-
5c49f35dffd05870a9c20022fe3ca8ca5eb6f82306b24f68cb137bc8c72a2096.exe windows x86
87a0c1374f1c47824720df3e8514ee47
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glTexEnvf
glClearColor
glRectfv
glMap2f
glCopyTexImage2D
glLoadIdentity
glNormal3sv
glRasterPos4s
glGetString
glVertex2dv
glTexCoord1dv
glu32
gluTessEndContour
gluQuadricNormals
gluNurbsSurface
gluPwlCurve
gluOrtho2D
gluEndSurface
gluNurbsCallback
gluGetNurbsProperty
gluQuadricDrawStyle
gluPerspective
gluNewTess
gluTessBeginContour
gluTessVertex
gluUnProject
comctl32
InitializeFlatSB
ord15
ord14
PropertySheetA
ord16
ord2
DrawStatusTextW
CreateToolbarEx
CreatePropertySheetPageW
shlwapi
StrRStrIW
kernel32
GetStringTypeA
WaitForMultipleObjects
LocalFree
OpenMutexA
ResetEvent
VirtualQuery
WideCharToMultiByte
GetThreadLocale
HeapLock
GetACP
LocalAlloc
CompareStringA
PulseEvent
GetModuleHandleA
GetProcAddress
LCMapStringA
GetStartupInfoA
GetTickCount
GetVersion
SuspendThread
VirtualAlloc
ReleaseMutex
GetCurrentProcessId
QueryPerformanceCounter
ResumeThread
TlsGetValue
LocalReAlloc
GetCurrentThreadId
uxtheme
GetThemeSysInt
GetThemeTextMetrics
GetThemeAppProperties
DrawThemeParentBackground
wsnmp32
ord300
activeds
ord17
ord22
ord14
ord21
comdlg32
GetOpenFileNameA
ChooseColorW
GetSaveFileNameW
CommDlgExtendedError
PrintDlgW
FindTextW
msvcrt
fputs
freopen
fseek
fopen
_fullpath
fscanf
fwrite
fread
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ