Static task
static1
Behavioral task
behavioral1
Sample
b90881253b8f09257ea24dc20a27549ce7887683addc800dc6c7eea5d9d7e171.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b90881253b8f09257ea24dc20a27549ce7887683addc800dc6c7eea5d9d7e171.exe
Resource
win10v2004-20220812-en
General
-
Target
b90881253b8f09257ea24dc20a27549ce7887683addc800dc6c7eea5d9d7e171
-
Size
589KB
-
MD5
3062f63b33dc01597a4b1218d3307a36
-
SHA1
cd50f454d3dbd7cf49b7dc8f511d97d7fcdaad8e
-
SHA256
b90881253b8f09257ea24dc20a27549ce7887683addc800dc6c7eea5d9d7e171
-
SHA512
a2dddf49fcaf10d0b1601773c457c86e0f8aa45a3b18bb7d66000e2794afa918ff6bca164d007f9a4a7a71af2d85ff1ed6147bef170442f50fcf1355e07df2fb
-
SSDEEP
12288:bdhX/npSI0RKUz3U6ilyL02hYSkns7Ti3Jrb9iH3wn/tWF6jM:bHX/gICKn6il80Zs7TApbe4sYY
Malware Config
Signatures
Files
-
b90881253b8f09257ea24dc20a27549ce7887683addc800dc6c7eea5d9d7e171.exe windows x86
0d3e32bc4aeae605703a7fd764d4e62c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetVersion
GetHandleInformation
GetLocalTime
DeleteVolumeMountPointW
WriteConsoleInputVDMA
EnumDateFormatsA
FreeLibrary
GetFileSizeEx
GetConsoleAliasW
ReadConsoleInputA
FatalExit
GetSystemTime
ReadConsoleOutputA
WriteConsoleOutputW
EnumSystemLocalesW
IsValidLocale
GetThreadLocale
GetStartupInfoA
opengl32
glPassThrough
glIndexiv
glRasterPos3d
glGetString
glEdgeFlagv
glVertex4sv
wglMakeCurrent
wglDeleteContext
glDrawPixels
glLoadMatrixd
wglGetDefaultProcAddress
glTexImage1D
glTexCoord4fv
glColor4f
glMaterialf
glMapGrid2f
glRasterPos3sv
glNormal3d
glMap1d
wglCreateContext
glEnd
glColor3b
glFogfv
glIndexubv
glColor3fv
glPixelMapusv
glStencilMask
glLightModeli
glIsEnabled
glEndList
msvcrt
ftell
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_mbsset
fwrite
feof
ferror
_heapset
fopen
fputs
_adj_fprem
fwprintf
signal
fputc
sprintf
_seterrormode
_amsg_exit
_spawnlpe
fprintf
fclose
fsetpos
memset
_lseek
_commit
memchr
_wspawnvp
_onexit
fread
_wcsupr
_unlink
_Getmonths
fseek
_strnicoll
_spawnvpe
printf
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 540KB - Virtual size: 539KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE