Static task
static1
Behavioral task
behavioral1
Sample
b343d16dd1ecd42982b6340e4c5bb7e28d782a67b31c5e0252b2a6f9c4ed7c8a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b343d16dd1ecd42982b6340e4c5bb7e28d782a67b31c5e0252b2a6f9c4ed7c8a.exe
Resource
win10v2004-20220812-en
General
-
Target
b343d16dd1ecd42982b6340e4c5bb7e28d782a67b31c5e0252b2a6f9c4ed7c8a
-
Size
697KB
-
MD5
be1d33b83c6bbeaa43937f1cb9522f28
-
SHA1
f79acd9a3b4a5d6197a8d0dd0a266ac4b5203f32
-
SHA256
b343d16dd1ecd42982b6340e4c5bb7e28d782a67b31c5e0252b2a6f9c4ed7c8a
-
SHA512
ca75f9fff42f5d320e742c00f517bb1c36a467ab8fc13e4d0676d52b4610044cdce8239c2dfa99ffbb09f6375d3efa40aeb521e1c9774a932db84b3535d9b470
-
SSDEEP
12288:MmyQ0sbYgpp+hWsdtVUz1Ig64oC9d0XGORLKhnjCh2fY8np:MvPgIWuVUzmP4BwfRLK9jCInp
Malware Config
Signatures
Files
-
b343d16dd1ecd42982b6340e4c5bb7e28d782a67b31c5e0252b2a6f9c4ed7c8a.exe windows x86
59e32cf8729f267488e8b67242619951
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
CreateThread
lstrcpyA
SwitchToThread
LoadLibraryA
EnterCriticalSection
VirtualAlloc
GetProcAddress
GetLastError
LeaveCriticalSection
Sleep
InitializeCriticalSection
GetProcessHeap
ExitProcess
WaitForSingleObject
HeapFree
HeapAlloc
GetVolumeInformationW
ntdll
strcat
memset
strcpy
RtlUnwind
user32
EmptyClipboard
GetActiveWindow
wvsprintfA
advapi32
RegQueryValueA
RegOpenKeyA
RegCloseKey
opengl32
glLoadIdentity
glEnable
glLightfv
glLineWidth
glViewport
glMatrixMode
glBlendFunc
glPolygonMode
glColor3d
glBegin
glClear
glOrtho
glPointSize
glEnd
glVertex3d
glLineStipple
glDisable
d3d9
Direct3DCreate9
secur32
LsaFreeReturnBuffer
Sections
.text Size: 634KB - Virtual size: 633KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ