Static task
static1
Behavioral task
behavioral1
Sample
cd391a5a733c9694852776bfcf3c06b81566f2b26503b8f50f58e7b0153caf72.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd391a5a733c9694852776bfcf3c06b81566f2b26503b8f50f58e7b0153caf72.exe
Resource
win10v2004-20220812-en
General
-
Target
cd391a5a733c9694852776bfcf3c06b81566f2b26503b8f50f58e7b0153caf72
-
Size
85KB
-
MD5
049077bde2c11b9d824dbfa595525018
-
SHA1
818fd0feb4b3db3dbcf12d1242c974cb8d60417b
-
SHA256
cd391a5a733c9694852776bfcf3c06b81566f2b26503b8f50f58e7b0153caf72
-
SHA512
054291377187509aebce1186e64fa9fceb283321436fc5c5dd3e9169997971e37b33f217de8b72b402c9d5d00ac3244467f226bb5a4d8a0b5e389b5bd55d2f32
-
SSDEEP
1536:nf/IiWgxVxFa+OGXXAe5QiNDuGTFuwCr0StLMcLcY+s6ozEkyF0EFMnsbBtZF:f/pWgxVfaxQ6iFVFhCr0StxygnFEw69F
Malware Config
Signatures
Files
-
cd391a5a733c9694852776bfcf3c06b81566f2b26503b8f50f58e7b0153caf72.exe windows x86
3f89b7c71c78409b2d6fe7c6b5f93075
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDriveStringsW
FindResourceW
VerLanguageNameA
EndUpdateResourceA
GetTimeZoneInformation
HeapCreate
ReleaseMutex
FormatMessageA
SetEvent
GetSystemTimeAsFileTime
CreateSemaphoreA
InitializeCriticalSection
GetFileSizeEx
CloseHandle
IsBadWritePtr
ConvertThreadToFiber
GetLastError
ReleaseSemaphore
CreateToolhelp32Snapshot
InterlockedDecrement
GetProfileStringW
IsValidLocale
GetModuleHandleA
HeapDestroy
LockFileEx
Heap32ListFirst
Heap32ListNext
msvcrt
__iscsymf
_Strftime
_ctime64
_splitpath
_spawnle
_ismbbalpha
div
_longjmpex
_wcsncoll
__p___wargv
_wfindnexti64
_safe_fdivr
_winmajor
memcpy
acos
_initterm
strpbrk
winmm
mciGetDeviceIDFromElementIDA
mmioInstallIOProcA
mciGetYieldProc
mciSendCommandA
mmioSeek
timeEndPeriod
opengl32
glRectsv
glColor4fv
GlmfInitPlayback
glPixelTransferf
glVertex3fv
glTexGeni
glAreTexturesResident
glTexCoord4s
glNormal3iv
glAlphaFunc
glGetMapdv
glColor3fv
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE