Static task
static1
Behavioral task
behavioral1
Sample
1a0fbf6ce1d2bed1f53506eeafd52f738ee4d42d6ba88d3bc10c2cff4f32c2b1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1a0fbf6ce1d2bed1f53506eeafd52f738ee4d42d6ba88d3bc10c2cff4f32c2b1.exe
Resource
win10v2004-20220812-en
General
-
Target
1a0fbf6ce1d2bed1f53506eeafd52f738ee4d42d6ba88d3bc10c2cff4f32c2b1
-
Size
624KB
-
MD5
11737ffac40c848f80d9b4e343390f68
-
SHA1
430f55c89cde3dc2cb3eb7df40b3d695f95afb87
-
SHA256
1a0fbf6ce1d2bed1f53506eeafd52f738ee4d42d6ba88d3bc10c2cff4f32c2b1
-
SHA512
2c263d16354f48164b230b6bbf008015ebd82166ebae451a78539bc7fd365914911e0f99b7e03d093ac8058d25c7d70d26e3ee6e9478ef907fc286bb6b648857
-
SSDEEP
12288:FqIvDligxcYQ7Iiu586dsvQ2pMICcp5GgEfpJo:xd7Qf6ivQppcCgERJo
Malware Config
Signatures
Files
-
1a0fbf6ce1d2bed1f53506eeafd52f738ee4d42d6ba88d3bc10c2cff4f32c2b1.exe windows x86
527779e2592897137bf2f4aff7f8df24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetHandleInformation
VirtualAlloc
GetVersion
lstrcpyW
GetSystemTime
FreeLibrary
GetModuleHandleA
EnumResourceTypesW
GetLocalTime
GetStartupInfoW
IsValidLocale
GetProcAddress
opengl32
glNormal3iv
glBitmap
wglMakeCurrent
glTexGeniv
glVertex4fv
glNormalPointer
glTexCoord4iv
glReadPixels
glCopyPixels
wglGetDefaultProcAddress
glTexCoord1iv
wglCreateLayerContext
glIndexd
glVertex2sv
glClearAccum
wglDeleteContext
glMapGrid2d
glAccum
glGetError
glRasterPos3d
glPopName
glVertex4iv
glGetString
glIndexdv
glVertex2dv
glNormal3b
glRects
glBegin
glTexParameteri
glStencilOp
wglSetLayerPaletteEntries
glColor3iv
glTexCoord2sv
glMap2d
wglCreateContext
glRasterPos4d
glEvalCoord2f
glTexGendv
glEdgeFlagv
glPolygonOffset
wglSwapBuffers
glGetTexGenfv
glLightiv
glAlphaFunc
winmm
mixerGetNumDevs
waveInClose
mciSendStringW
mmioClose
midiStreamRestart
mciGetDeviceIDW
timeGetTime
waveOutGetPosition
PlaySoundA
mmioRenameA
mciGetDeviceIDFromElementIDA
midiOutShortMsg
msvcrt
_mbsninc
_mbscmp
_jn
malloc
_unlink
ftell
iswalnum
strcspn
__p__pwctype
memset
fgetws
_open
fread
_mbclen
_scalb
_get_osfhandle
_yn
_wexecvpe
_umask
atol
fputs
__getmainargs
fprintf
__CxxFrameHandler
_heapwalk
fwprintf
_putenv
fputc
sprintf
mktime
_snprintf
_adjust_fdiv
__p__tzname
$I10_OUTPUT
_mbscat
fsetpos
fopen
_CIsinh
fclose
strchr
__initenv
_ismbslead
_ismbcsymbol
fwrite
_setjmp
feof
exit
strtod
ferror
iswcntrl
_findnext
_wspawnve
printf
_wfsopen
wcstol
_mbcjmstojis
strcpy
fseek
clock
memcmp
_wfindnext
_fileno
_ismbbkpunct
_wcsicoll
Sections
.text Size: 604KB - Virtual size: 603KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE