Static task
static1
Behavioral task
behavioral1
Sample
ab64b93c2dfc71e311991391b409d347d262f4f7fe90d692c4e8b5468997952a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab64b93c2dfc71e311991391b409d347d262f4f7fe90d692c4e8b5468997952a.exe
Resource
win10v2004-20220812-en
General
-
Target
ab64b93c2dfc71e311991391b409d347d262f4f7fe90d692c4e8b5468997952a
-
Size
4.2MB
-
MD5
107140fed3bbb2be919f36854065a1db
-
SHA1
f11fafa845ee250a3badfa1e5f58f5a216b91b2b
-
SHA256
ab64b93c2dfc71e311991391b409d347d262f4f7fe90d692c4e8b5468997952a
-
SHA512
63e7e650ae741266f662096814acb4dac9cbbf8c8600dba0e628cea85cb99b872d72ec1c677b59c00d8f5750b64625934500626f658d5ec14a4986392f42919d
-
SSDEEP
98304:7ZrO8a2LT5m76FTGneXlLenvynMpGEgLpKtdtopqM:7c8a2LT5G6FTGmlLenvynST3Q
Malware Config
Signatures
Files
-
ab64b93c2dfc71e311991391b409d347d262f4f7fe90d692c4e8b5468997952a.exe windows x86
c137bc1654d2b2738eaacd7c8283c64a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
OutputDebugStringA
CreateDirectoryA
ReleaseSemaphore
GetSystemDirectoryA
GetVersionExA
lstrlenW
CompareStringA
GetLocaleInfoA
QueryPerformanceCounter
CreateDirectoryW
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
LocalFree
SetEndOfFile
CreateProcessA
GetExitCodeProcess
OutputDebugStringW
GetFullPathNameW
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
GetFileAttributesExW
DeleteFileW
FlushFileBuffers
GetModuleFileNameW
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetTimeZoneInformation
GetOEMCP
GetACP
IsValidCodePage
GetStdHandle
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
HeapSize
EnumSystemLocalesW
GetUserDefaultLCID
GlobalUnlock
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
UnhandledExceptionFilter
GetCommandLineA
FileTimeToSystemTime
PeekNamedPipe
GetFileType
GetFileInformationByHandle
FileTimeToLocalFileTime
GetCPInfo
SetEnvironmentVariableA
LoadLibraryExW
GetCurrentThreadId
SetUnhandledExceptionFilter
ExitThread
HeapReAlloc
GetFullPathNameA
GetDriveTypeW
AreFileApisANSI
GlobalLock
MoveFileA
GetPrivateProfileStringA
lstrlenA
CreateMutexA
ReleaseMutex
DeleteFileA
GetCurrentDirectoryA
SetFileAttributesA
SetThreadPriority
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
Module32Next
Module32First
GetLastError
GetTickCount
GetCurrentDirectoryW
K32GetModuleBaseNameA
WinExec
LocalAlloc
GlobalFree
GlobalAlloc
WriteFile
ReadFile
GetFileSize
GetProcessHeap
HeapFree
HeapAlloc
LoadLibraryA
FreeLibrary
WriteProcessMemory
GetCurrentProcess
GetModuleHandleExW
ExitProcess
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
DecodePointer
EncodePointer
GetStringTypeW
CreateFileW
IsProcessorFeaturePresent
HeapValidate
K32GetModuleFileNameExW
K32EnumProcesses
FindNextFileA
FindFirstFileA
FindClose
GetModuleHandleA
CreateThread
Sleep
Process32Next
Process32First
CreateToolhelp32Snapshot
K32GetProcessImageFileNameA
K32GetModuleFileNameExA
K32EnumProcessModules
WideCharToMultiByte
MultiByteToWideChar
GetVolumeInformationA
GetTempFileNameA
GetTempPathA
ResumeThread
LoadLibraryW
GetProcAddress
GetModuleFileNameA
ReadProcessMemory
VirtualQueryEx
GetSystemInfo
OpenProcess
TerminateProcess
GetCurrentProcessId
CloseHandle
GetFileAttributesA
IsValidLocale
CreateFileA
user32
UnregisterClassA
CreateWindowExA
DefWindowProcA
LoadStringA
GetSystemMetrics
ChangeDisplaySettingsA
ReleaseCapture
SetCapture
GetCapture
ShowWindow
SetCursorPos
LoadImageA
IsWindow
DestroyWindow
DestroyCursor
SetCursor
CharNextExA
LoadCursorA
AdjustWindowRectEx
GetMenu
RegisterClassA
DispatchMessageA
TranslateMessage
GetMessageA
ShowCursor
GetKeyState
SystemParametersInfoA
LoadIconA
CharNextW
ScreenToClient
MoveWindow
SetFocus
UpdateWindow
GetWindowLongA
SetWindowLongA
OpenClipboard
CloseClipboard
GetClipboardData
GetKeyboardLayoutNameA
GetKeyboardLayout
GetCursorPos
SetWindowPos
OffsetRect
SetRect
FillRect
ClientToScreen
GetClientRect
InvalidateRect
EndPaint
BeginPaint
GetAsyncKeyState
PeekMessageA
FindWindowA
WindowFromPoint
GetWindowTextA
SetWindowTextA
GetActiveWindow
GetWindowThreadProcessId
GetClassNameA
EnumWindows
FindWindowExA
ReleaseDC
GetDC
MessageBoxA
GetDesktopWindow
GetWindowRect
PostQuitMessage
RegisterClassExA
CharPrevExA
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
GetDeviceCaps
GetDIBits
SelectObject
StretchBlt
GetObjectA
EnumFontFamiliesExA
GetTextExtentPoint32A
GetStockObject
TextOutW
GetTextExtentPoint32W
GetCharABCWidthsFloatW
CreateFontIndirectA
TextOutA
CreateDIBSection
SetTextColor
SetBkMode
SetBkColor
DeleteDC
PatBlt
DeleteObject
CreateSolidBrush
advapi32
RegQueryValueExA
CryptReleaseContext
CryptAcquireContextA
RegCloseKey
RegCreateKeyExA
RegOpenKeyA
RegOpenKeyExA
CryptGenRandom
RegSetValueExA
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
shell32
SHGetSpecialFolderPathA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
CoGetClassObject
OleInitialize
OleUninitialize
OleSetContainedObject
CoInitializeEx
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
winmm
timeGetDevCaps
timeBeginPeriod
timeGetTime
timeEndPeriod
d3d8
Direct3DCreate8
python27
Py_BuildValue
Py_InitModule4
PyModule_AddIntConstant
PyErr_SetString
PyExc_RuntimeError
PyInt_AsLong
PyString_FromString
PyTuple_GetItem
PyList_New
PyList_Append
PyLong_AsLongLong
PyTuple_Size
PyDict_GetItemString
PyArg_ParseTuple
PyInt_FromLong
PyTuple_New
PyTuple_SetItem
PyLong_FromUnsignedLongLong
PyDict_Next
PyDict_Size
PyString_InternFromString
PyString_AsString
PyDict_SetItemString
PyModule_GetDict
PyErr_Clear
PyErr_Fetch
Py_SetProgramName
Py_Initialize
PyNumber_Check
PyObject_CallObject
PyErr_Print
PyErr_BadArgument
PyFloat_AsDouble
PyCallable_Check
PyObject_GetAttr
PyObject_GetAttrString
_Py_NoneStruct
PyImport_ImportModule
PyImport_AddModule
PyRun_StringFlags
Py_Finalize
imm32
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmGetConversionStatus
ImmSetConversionStatus
ImmGetOpenStatus
ImmNotifyIME
ImmIsIME
ImmReleaseContext
ImmGetContext
ImmGetIMEFileNameA
ws2_32
recv
WSACleanup
select
__WSAFDIsSet
inet_addr
WSAGetLastError
ioctlsocket
ntohs
ntohl
inet_ntoa
WSAStartup
gethostbyname
socket
send
htons
connect
closesocket
iphlpapi
GetTcpTable
gdiplus
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipAlloc
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipDisposeImage
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
imagehlp
GetTimestampForLoadedLibrary
devil
ilGenImages
ilGetInteger
ilLoad
ilOriginFunc
ilEnable
ilSave
ilSetPixels
ilTexImage
ilInit
ilCopyPixels
ilDeleteImages
ilShutDown
ilConvertImage
ilBindImage
granny2
_GrannyPlayControlledAnimation@12
_GrannySetLogCallback@4
_GrannyGetMaterialTextureByType@8
_GrannyFindMatchingMember@16
_GrannyConvertSingleObject@20
_GrannyGetMeshTriangleGroupCount@4
_GrannyGetMeshTriangleGroups@4
_GrannyGetMeshVertexType@4
_GrannyGetMeshVertexCount@4
_GrannyCopyMeshVertices@12
_GrannyGetMeshVertices@4
_GrannyMeshIsRigid@4
_GrannyCopyMeshIndices@12
_GrannyNewMeshBinding@12
_GrannyFreeMeshBinding@4
_GrannyGetMeshBindingToBoneIndices@4
_GrannyNewMeshDeformer@16
_GrannyFreeMeshDeformer@4
_GrannyDeformVertices@24
GrannyPNT332VertexType
_GrannyGetTotalTypeSize@4
_GrannyGetMeshIndexCount@4
_GrannyGetWorldPose4x4@8
_GrannyInstantiateModel@4
_GrannyFreeModelInstance@4
_GrannyGetSourceSkeleton@4
_GrannyFindBoneByName@12
_GrannyNewWorldPose@4
_GrannyFreeWorldPose@4
_GrannyGetWorldPoseComposite4x4@8
_GrannyFreeControl@4
_GrannyFreeControlOnceUnused@4
_GrannyCompleteControlAt@8
_GrannyControlIsComplete@4
_GrannyFreeControlIfComplete@4
_GrannyGetControlLoopCount@4
_GrannySetControlLoopCount@8
_GrannyGetControlSpeed@4
_GrannySetControlSpeed@8
_GrannyGetControlLocalDuration@4
_GrannySetControlEaseIn@8
_GrannySetControlEaseInCurve@28
_GrannyGetFileInfo@4
_GrannyFreeFile@4
_GrannyFreeFileSection@8
_GrannyReadEntireFileFromMemory@8
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyFreeLocalPose@4
_GrannyNewLocalPose@4
_GrannyUpdateModelMatrix@20
_GrannySampleModelAnimationsAccelerated@20
_GrannyFreeCompletedModelControls@4
_GrannySetModelClock@8
_GrannySetControlEaseOutCurve@28
_GrannySetControlRawLocalClock@8
_GrannyGetControlRawLocalClock@4
_GrannySetControlEaseOut@8
mss32
_AIL_close_3D_provider@4
_AIL_open_3D_provider@4
_AIL_enumerate_3D_providers@12
_AIL_close_digital_driver@4
_AIL_open_digital_driver@16
_AIL_stream_status@4
_AIL_set_stream_loop_count@8
_AIL_stream_volume_levels@12
_AIL_set_stream_volume_levels@12
_AIL_pause_stream@8
_AIL_start_stream@4
_AIL_close_stream@4
_AIL_auto_update_3D_position@8
_AIL_open_3D_listener@4
_AIL_set_3D_velocity@20
_AIL_set_3D_position@16
_AIL_3D_sample_volume@4
_AIL_shutdown@0
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_end_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_start_3D_sample@4
_AIL_release_3D_sample_handle@4
_AIL_allocate_3D_sample_handle@4
_AIL_sample_volume_pan@12
_AIL_close_3D_listener@4
_AIL_set_3D_orientation@28
_AIL_open_stream@12
_AIL_set_redist_directory@4
_AIL_sample_status@4
_AIL_set_sample_loop_count@8
_AIL_set_sample_volume_pan@12
_AIL_end_sample@4
_AIL_resume_sample@4
_AIL_stop_sample@4
_AIL_start_sample@4
_AIL_3D_sample_status@4
_AIL_startup@0
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_last_error@0
_AIL_file_type@8
_AIL_decompress_ADPCM@12
_AIL_decompress_ASI@24
_AIL_WAV_info@8
_AIL_set_file_callbacks@16
_AIL_file_read@8
_AIL_mem_free_lock@4
speedtreert
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
??0SGeometry@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
dinput8
DirectInput8Create
ddraw
DirectDrawCreate
libcurl
curl_easy_perform
curl_easy_setopt
curl_easy_init
curl_easy_strerror
curl_easy_cleanup
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 622KB - Virtual size: 622KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 195KB - Virtual size: 498KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ