Static task
static1
Behavioral task
behavioral1
Sample
20c5090071ac64cdd59c12b3746232dbfde2c4c7b147108cafe547150f1748b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
20c5090071ac64cdd59c12b3746232dbfde2c4c7b147108cafe547150f1748b8.exe
Resource
win10v2004-20220812-en
General
-
Target
20c5090071ac64cdd59c12b3746232dbfde2c4c7b147108cafe547150f1748b8
-
Size
609KB
-
MD5
0942495536f8df239582eeeef9ad75d5
-
SHA1
110d0fc8d116ecdb419ae640d521d1a4a29e8738
-
SHA256
20c5090071ac64cdd59c12b3746232dbfde2c4c7b147108cafe547150f1748b8
-
SHA512
9f7096f2aa0297cffe08f938ef87e5262617869f8fb310dd84ab61a5d3fb318d96dce5ba6a0b2d4a3c7f7a57cb03d3313871dac380d5f09bc61103f160cec421
-
SSDEEP
6144:Uy3GDGfBYsUbZuNlV2TxTFjXVmbhg5QX91wr0YTG349FO3lV50vJFaUeYR8WINjA:53GeDmV4jNmTTLyJ/I2cDGz8j
Malware Config
Signatures
Files
-
20c5090071ac64cdd59c12b3746232dbfde2c4c7b147108cafe547150f1748b8.exe windows x86
a9d34e74d9cfc54b8f7e9ed57c0bb5f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
LoadLibraryA
EnumSystemLocalesW
TerminateProcess
WaitNamedPipeW
InterlockedCompareExchange
HeapDestroy
ReadConsoleW
FreeConsole
GetVolumePathNameA
GetVersion
GetStartupInfoA
CreateJobObjectW
GetLocalTime
GetSystemTime
FreeLibrary
SetConsoleTitleA
GetHandleInformation
GetDefaultCommConfigW
UnlockFile
GlobalAddAtomA
GetProcAddress
GetCommTimeouts
DuplicateHandle
WriteConsoleInputVDMA
CreateWaitableTimerW
IsValidLocale
MultiByteToWideChar
SetDefaultCommConfigW
EnumCalendarInfoExW
EnumResourceNamesA
opengl32
wglCreateContext
glVertex4i
glReadBuffer
glColorMaterial
glDrawPixels
glEvalPoint1
glTranslated
glRasterPos3fv
glFogiv
glDeleteLists
glVertex3s
glRasterPos2fv
glGetTexEnvfv
glPolygonStipple
glPopClientAttrib
glNormal3d
glRasterPos4dv
wglDeleteContext
glGetDoublev
wglMakeCurrent
glTexCoord2sv
glGetTexImage
glGetTexParameterfv
glRasterPos2sv
msvcrt
fputs
fprintf
_unlink
fwrite
ferror
fread
fputc
_CIfmod
fwprintf
printf
fsetpos
feof
ftell
sprintf
strtok
fseek
fclose
memset
fopen
_execl
Sections
.text Size: 592KB - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE