Static task
static1
Behavioral task
behavioral1
Sample
87d35fc728180388849662bf34fa59899b843ace4cd423e32cebad418383a228.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
87d35fc728180388849662bf34fa59899b843ace4cd423e32cebad418383a228.exe
Resource
win10v2004-20221111-en
General
-
Target
87d35fc728180388849662bf34fa59899b843ace4cd423e32cebad418383a228
-
Size
734KB
-
MD5
2122e83366bbfce723522b95e548ad00
-
SHA1
0029ac0506d927946d2333c40f3d14579635d714
-
SHA256
87d35fc728180388849662bf34fa59899b843ace4cd423e32cebad418383a228
-
SHA512
05826c04e937e4d284d2cef6908a28bb789761bc3b724780f3ae04b51232cea507e44808257cef44a22009bc0085a8b6b06486e275c194de54d5b48fa7221ddd
-
SSDEEP
12288:+QzNgbtgC7pvN+AsvqXeeYT2Z09DObq/x+zW+5vVWc5Jnwht/XlgV6pjezzlISyc:+K6NOqXOT2Z09Dwq/x+62bnCtdg8pKzH
Malware Config
Signatures
Files
-
87d35fc728180388849662bf34fa59899b843ace4cd423e32cebad418383a228.exe windows x86
fbe36e1db39cc831051322c062f4bb00
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
libresample
resample_close
resample_reset
resample_open
resample_process
resample_deinit
resample_init
pthreadvc2
pthread_cond_wait
pthread_mutex_lock
pthread_attr_init
pthread_mutex_unlock
pthread_join
pthread_create
pthread_cond_init
pthread_mutex_destroy
pthread_cond_signal
pthread_mutex_init
pthread_attr_destroy
pthread_cond_destroy
pthread_attr_setschedparam
sdl
SDL_strlcpy
SDL_SetModuleHandle
SDL_LockAudio
SDL_UnlockAudio
SDL_FreeRW
SDL_RWFromMem
SDL_RWFromFP
SDL_AllocRW
SDL_PollEvent
SDL_UpperBlit
SDL_FreeSurface
SDL_SetVideoMode
SDL_GL_SwapBuffers
SDL_strlcat
SDL_getenv
SDL_ShowCursor
SDL_putenv
SDL_GL_SetAttribute
SDL_MapRGB
SDL_Flip
SDL_CreateRGBSurface
SDL_Init
SDL_Quit
SDL_GetWMInfo
SDL_GetKeyName
SDL_EnableKeyRepeat
SDL_JoystickNumAxes
SDL_JoystickNumButtons
SDL_JoystickEventState
SDL_JoystickClose
SDL_WM_SetCaption
SDL_NumJoysticks
SDL_JoystickNumHats
SDL_JoystickOpened
SDL_JoystickOpen
SDL_AudioDriverName
SDL_GetError
SDL_UpdateRect
SDL_SetClipRect
SDL_FillRect
sdl_mixer
Mix_PlayMusic
Mix_HookMusicFinished
Mix_ResumeMusic
Mix_HaltMusic
Mix_RewindMusic
Mix_PausedMusic
Mix_VolumeMusic
Mix_LoadMUS_RW
Mix_PlayingMusic
Mix_OpenAudio
Mix_CloseAudio
Mix_FreeMusic
Mix_FreeChunk
Mix_Volume
Mix_LoadWAV_RW
Mix_SetPanning
Mix_Playing
Mix_QuickLoad_RAW
Mix_HaltChannel
Mix_PlayChannelTimed
Mix_AllocateChannels
Mix_HookMusic
Mix_SetMusicPosition
Mix_QuerySpecEx
Mix_PauseMusic
sdl_ttf
TTF_RenderUTF8_Solid
TTF_RenderUTF8_Blended
TTF_OpenFont
TTF_CloseFont
TTF_Init
TTF_FontAscent
TTF_SizeUTF8
TTF_Quit
sdl_gfx
zoomSurface
winmm
timeGetTime
timeEndPeriod
timeBeginPeriod
zlib1
crc32
inflateInit2_
inflate
inflateEnd
deflate
deflateEnd
deflateInit2_
deflateReset
opengl32
glDisable
glBegin
glTexParameteri
glCopyTexImage2D
glTexEnvf
glEnable
glFlush
glGenTextures
glClear
glClearColor
glGetError
glBindTexture
glEnd
glPixelStorei
glTexCoord2f
glVertex3i
glTexSubImage2D
glDeleteTextures
glViewport
glMatrixMode
glClearDepth
glew32
glewInit
glu32
gluOrtho2D
kernel32
Sleep
VirtualFree
QueryPerformanceCounter
InterlockedExchangeAdd
QueryPerformanceFrequency
GetModuleHandleA
GetProcAddress
FreeLibrary
LoadLibraryA
GetModuleFileNameA
GetCommandLineA
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
user32
DialogBoxParamA
MoveWindow
GetSystemMetrics
EndDialog
GetDlgItem
CreateWindowExA
SendMessageA
GetClientRect
SetClassLongA
LoadIconA
GetDlgItemTextA
gdi32
CreateSolidBrush
shell32
SHGetFolderPathA
msvcr90
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
longjmp
strlen
memcmp
memcpy
memset
_setjmp3
abort
isalpha
_strlwr
strncmp
setbuf
_getcwd
srand
remove
_vsnprintf
_chdir
_isnan
isalnum
strtol
strtod
fwrite
fflush
atof
fprintf
printf
__iob_func
perror
ceil
sscanf
exit
fclose
fseek
ftell
ferror
isdigit
fread
fopen
fgets
fgetc
feof
iscntrl
strncat
vsprintf
malloc
qsort
strpbrk
strrchr
strncpy
tolower
_snprintf
strchr
strstr
isspace
_stricmp
memmove
realloc
calloc
atoi
free
sprintf
setvbuf
freopen
_CIpow
floor
_CIsin
_CIsqrt
_CIexp
_CIatan
_CIacos
_CIasin
_CIlog
_CItan
_CIcos
_time64
Sections
.text Size: 614KB - Virtual size: 613KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE