Static task
static1
Behavioral task
behavioral1
Sample
c6e7032aca186d4c52957197d8c50930fc78ec29f0f1917c4b41e43eff32087d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c6e7032aca186d4c52957197d8c50930fc78ec29f0f1917c4b41e43eff32087d.exe
Resource
win10v2004-20221111-en
General
-
Target
c6e7032aca186d4c52957197d8c50930fc78ec29f0f1917c4b41e43eff32087d
-
Size
212KB
-
MD5
4e19fda8d79313ec8698f7313222aa44
-
SHA1
a1fe7ca6e944beb31d2907e782bc5972a7e2ff3a
-
SHA256
c6e7032aca186d4c52957197d8c50930fc78ec29f0f1917c4b41e43eff32087d
-
SHA512
c42bf1ea7dd29d8c49fb5dbc15fa2f7999c23afaa82d578bee27429daf4595e3462a32489f68a0c5254bad5c87f50695deee2655933aec6a5f1684acea5386a1
-
SSDEEP
3072:YhQTUwEYksBFJdIdNg0qHaBheXkbxWPobjHCADDv0dqv8AmA2xCkXK:YPwlJdIETdXkbcPujiev2PS
Malware Config
Signatures
Files
-
c6e7032aca186d4c52957197d8c50930fc78ec29f0f1917c4b41e43eff32087d.exe windows x86
0a1b37c67d6f9fc6ba36ccd3542c15bf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glScaled
glTexCoord2dv
glTexCoord3iv
kernel32
WriteFile
HeapReAlloc
HeapAlloc
IsProcessorFeaturePresent
GetTempPathW
DeviceIoControl
GetVersionExA
FindNextChangeNotification
HeapSize
ConvertThreadToFiber
lstrcmpA
VirtualFreeEx
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
LoadLibraryW
RtlUnwind
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ