Static task
static1
Behavioral task
behavioral1
Sample
35e0fd8debbebff24bfbf3f590dd728e8d95f69c820bc444bf131d77df854206.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
35e0fd8debbebff24bfbf3f590dd728e8d95f69c820bc444bf131d77df854206.exe
Resource
win10v2004-20220901-en
General
-
Target
35e0fd8debbebff24bfbf3f590dd728e8d95f69c820bc444bf131d77df854206
-
Size
3.8MB
-
MD5
cb6ea4958fb91ea80401ddb5885b5f63
-
SHA1
75a204ddb91a369758daa3b41afdc9275177df10
-
SHA256
35e0fd8debbebff24bfbf3f590dd728e8d95f69c820bc444bf131d77df854206
-
SHA512
6523f270e4fba9ed5827634302e4d6bfec3af325bc43fd1bdb9910cee0b8f30f1c98c20bf00101977fb57c28c9d218fef6eb5e0be6496b0ae8d62d4599140f49
-
SSDEEP
49152:yRHnFJqBdesBs6TrYAcUAODdG5d0FZTH+pFTd:YFJMeF6TrbHAadG5dwpq
Malware Config
Signatures
Files
-
35e0fd8debbebff24bfbf3f590dd728e8d95f69c820bc444bf131d77df854206.exe windows x86
744b91ec496befe0122d3122226096b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dinput8
DirectInput8Create
ddraw
DirectDrawCreateEx
dsound
ord11
avifil32
AVISaveOptions
AVIStreamRelease
AVIStreamSetFormat
AVIMakeCompressedStream
AVIFileRelease
AVIStreamWrite
AVIFileOpenA
AVIFileInit
AVIFileCreateStreamA
winmm
timeSetEvent
timeEndPeriod
waveInClose
waveInPrepareHeader
waveInOpen
waveInAddBuffer
waveInReset
waveInStart
timeGetDevCaps
timeKillEvent
timeGetTime
timeBeginPeriod
opengl32
glDeleteTextures
glPixelStorei
glEnd
glFinish
glBindTexture
glVertex4fv
glTexImage2D
glGetError
glDisable
glGetString
glBegin
glDepthMask
glTexParameteri
glClearDepth
glClearStencil
glAlphaFunc
glDepthFunc
glClear
glClearColor
glTexParameterf
wglMakeCurrent
wglCreateContext
glLoadIdentity
glGenTextures
glTexCoord2fv
wglGetProcAddress
glEnable
glStencilOp
glColor4fv
glTexImage1D
glViewport
glTexEnvi
glMatrixMode
glScalef
glCullFace
glBlendFunc
glPolygonMode
glStencilFunc
glReadPixels
glColorMask
ws2_32
closesocket
WSACleanup
WSAStartup
recvfrom
htonl
select
htons
setsockopt
sendto
bind
socket
user32
PostMessageA
MessageBoxA
GetAsyncKeyState
GetWindowTextA
GetKeyboardState
GetKeyState
ScreenToClient
SetDlgItemTextA
SetDlgItemTextW
GetDlgItemTextW
CharPrevExA
CharToOemA
CharLowerW
CharUpperW
CharLowerA
CharUpperA
CharNextA
GetParent
CreateMenu
LoadAcceleratorsA
RemoveMenu
FrameRect
GetScrollInfo
GetScrollPos
PostQuitMessage
GetDlgItemInt
SetScrollRange
SetScrollPos
SendInput
DrawMenuBar
SetMenuItemInfoA
CreateWindowExW
DialogBoxParamA
ClientToScreen
CloseClipboard
TrackPopupMenu
SetCapture
IsZoomed
GetSubMenu
SetForegroundWindow
DeleteMenu
LoadMenuA
GetMenuStringW
GetMenuItemInfoW
IsDialogMessageA
SetDlgItemInt
GetMenu
OffsetRect
SetPropA
PeekMessageA
EnableMenuItem
EmptyClipboard
TranslateAcceleratorA
GetMenuItemInfoA
GetMenuItemCount
CheckRadioButton
OpenClipboard
ReleaseCapture
InsertMenuA
SetClipboardData
DestroyMenu
GetDlgItemTextA
SetMenuItemInfoW
ModifyMenuA
MoveWindow
SetActiveWindow
GetFocus
GetWindowTextLengthA
RedrawWindow
GetActiveWindow
IsWindowEnabled
GetForegroundWindow
SetWindowTextW
LoadStringW
EndDialog
GetDlgCtrlID
SendDlgItemMessageA
GetMessageA
GetWindowRect
CreateDialogParamA
KillTimer
SetTimer
EnableWindow
SetWindowTextA
InsertMenuItemA
DrawTextA
GetMenuBarInfo
LoadBitmapA
LoadIconA
GetDC
TranslateMessage
SetRect
UnregisterClassA
ReleaseDC
GetSysColor
SetWindowPos
ShowWindow
SetMenu
DispatchMessageA
AdjustWindowRectEx
SystemParametersInfoA
GetSystemMetrics
UpdateWindow
AdjustWindowRect
CheckMenuItem
EndPaint
RegisterClassExA
FillRect
GetClientRect
BeginPaint
InvalidateRect
GetWindowLongA
CreateWindowExA
DefWindowProcA
GetSysColorBrush
LoadCursorA
DestroyWindow
DialogBoxParamW
wsprintfA
SetFocus
SendMessageA
SetWindowLongA
GetDlgItem
CheckDlgButton
IsDlgButtonChecked
CreateDialogParamW
CallWindowProcA
GetCursorPos
gdi32
StretchBlt
MoveToEx
LineTo
CreatePen
BitBlt
SetBkMode
GetPixelFormat
DescribePixelFormat
ChoosePixelFormat
SetPixelFormat
SetDIBitsToDevice
CreateFontA
CreateCompatibleBitmap
TextOutA
SetTextColor
SetBkColor
GetStockObject
ExtTextOutA
GetTextExtentPoint32A
DeleteDC
GetDIBits
SelectObject
CreateCompatibleDC
SetDIBits
GetObjectA
DeleteObject
CreateSolidBrush
shell32
DragFinish
ShellExecuteA
DragAcceptFiles
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
DragQueryFileA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shlwapi
PathCompactPathA
kernel32
GetLocaleInfoW
MultiByteToWideChar
SetFileAttributesA
CopyFileA
GetFileAttributesA
CloseHandle
CreateEventA
Sleep
SetEvent
WaitForSingleObject
CreateThread
GetModuleFileNameA
lstrlenA
FindNextFileA
FindClose
GetLastError
FindFirstFileA
AllocConsole
FreeLibrary
SetConsoleScreenBufferSize
FreeConsole
SetEnvironmentVariableA
FlushFileBuffers
CreatePipe
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
CompareStringW
CompareStringA
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
WriteConsoleW
GetConsoleOutputCP
CreateFileA
GetCurrentDirectoryA
GetTimeZoneInformation
GetOEMCP
SetHandleCount
HeapCreate
HeapSize
SetLastError
TlsFree
LCMapStringW
LCMapStringA
RaiseException
GetCPInfo
GetProcessHeap
SetEndOfFile
ExitThread
CreateProcessA
MoveFileA
RtlUnwind
HeapReAlloc
GetStartupInfoA
GetCommandLineA
DeleteFileA
GetFileType
SetStdHandle
ExitProcess
GetConsoleMode
GetConsoleCP
WriteFile
SetFilePointer
ReadFile
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
SetConsoleCP
GetACP
SetConsoleTitleA
GetStdHandle
GetProcAddress
LoadLibraryA
WaitForMultipleObjects
GetCurrentProcessId
GetCurrentThreadId
GetSystemTime
SystemTimeToFileTime
FileTimeToDosDateTime
DosDateTimeToFileTime
VirtualFree
VirtualAlloc
LocalFileTimeToFileTime
CompareFileTime
GetVersion
GetModuleHandleW
FormatMessageW
LocalFree
GetThreadLocale
GetLocaleInfoA
InterlockedExchangeAdd
IsValidCodePage
GetCPInfoExA
WideCharToMultiByte
IsDBCSLeadByteEx
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetModuleFileNameW
TlsAlloc
GetCurrentThread
DuplicateHandle
SetThreadPriority
TlsGetValue
TlsSetValue
ReleaseMutex
CreateMutexA
DeleteCriticalSection
CreateSemaphoreA
GetExitCodeProcess
ReleaseSemaphore
GetSystemTimeAsFileTime
IsDebuggerPresent
FormatMessageA
SetCurrentDirectoryA
SwitchToThread
GetTickCount
GetFullPathNameA
GetTempPathA
QueryPerformanceFrequency
GetSystemInfo
ResetEvent
GetPrivateProfileStringA
EnterCriticalSection
SetThreadLocale
LeaveCriticalSection
InitializeCriticalSection
SignalObjectAndWait
QueryPerformanceCounter
GetCurrentProcess
GlobalAddAtomA
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleOutputCP
SetConsoleWindowInfo
WritePrivateProfileStringA
GetPrivateProfileIntA
FindCloseChangeNotification
GetFileAttributesExA
TerminateThread
FindFirstChangeNotificationA
ResumeThread
SetProcessAffinityMask
GetModuleHandleA
oleaut32
SysFreeString
SysAllocString
VariantCopy
SysAllocStringByteLen
VariantClear
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 594KB - Virtual size: 593KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 982KB - Virtual size: 57.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ