Static task
static1
Behavioral task
behavioral1
Sample
f342c67a6d56ea3b50b0b4d4692af4a0ebffa995c4731866709dd34217ee6f9c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f342c67a6d56ea3b50b0b4d4692af4a0ebffa995c4731866709dd34217ee6f9c.exe
Resource
win10v2004-20220812-en
General
-
Target
f342c67a6d56ea3b50b0b4d4692af4a0ebffa995c4731866709dd34217ee6f9c
-
Size
231KB
-
MD5
d2af216fbb8df89ef4f9a212ebd462a5
-
SHA1
5f665b8f3a55e41df749577a58d5cc0115217f92
-
SHA256
f342c67a6d56ea3b50b0b4d4692af4a0ebffa995c4731866709dd34217ee6f9c
-
SHA512
ad4b2b795d9eaacb86be0a40334ac3decdce486ba2a2f87471b72143bc4a5a792e12acad2b13abe790449b4419306221b4094af5c98fb40fa234e285523e34bb
-
SSDEEP
3072:ylmi6vs+02JaGU/6w1xImythC0u4HUn34O8FlhGBkpU19JsppqxJYZ25cSHbZ/FQ:CdwRJvU/RX0u4OI7FD3UkIdNqqoIAK8
Malware Config
Signatures
Files
-
f342c67a6d56ea3b50b0b4d4692af4a0ebffa995c4731866709dd34217ee6f9c.exe windows x86
ccc8d4dda53168a3fafac1241a8e448a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glRasterPos3s
glNewList
glVertex2f
glRectdv
glTexCoord4sv
glFrustum
glPushAttrib
dbghelp
SymGetModuleBase
SymRegisterFunctionEntryCallback
SymEnumerateModules64
SymUnloadModule
kernel32
HeapCreate
CreateFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
CloseHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
ReadFile
HeapSize
CreateIoCompletionPort
RegisterWaitForSingleObject
GetCommState
DeleteVolumeMountPointW
GetThreadPriority
DeleteFiber
lstrcmpiW
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
DeleteCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ