Static task
static1
Behavioral task
behavioral1
Sample
b87a0e657de4bfcfa18fc79fdee86a063ba1a799c6de547843a6b94fecb4c113.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b87a0e657de4bfcfa18fc79fdee86a063ba1a799c6de547843a6b94fecb4c113.exe
Resource
win10v2004-20220901-en
General
-
Target
b87a0e657de4bfcfa18fc79fdee86a063ba1a799c6de547843a6b94fecb4c113
-
Size
58KB
-
MD5
0bd37f147bef80274e0348642bfcdd0f
-
SHA1
5c8715f7107b5f346ad79d7200de6c5e04b32030
-
SHA256
b87a0e657de4bfcfa18fc79fdee86a063ba1a799c6de547843a6b94fecb4c113
-
SHA512
5415a2bac6bb9d20c7e9afb309128c07f4d59b131a2a6cfe9e669e678c65cfba640d432461b8e643be30c10dbd732138071e6d4933e6247ec373e4f459f42a57
-
SSDEEP
1536:NB+nu9b3kc74UHshmP+fy9WWvofqmo2Wt:Neu9b317BsheNAa2q
Malware Config
Signatures
Files
-
b87a0e657de4bfcfa18fc79fdee86a063ba1a799c6de547843a6b94fecb4c113.exe windows x86
7d1b76578ec416fe4b11468ad0cdbde7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glPushMatrix
msvcrt
malloc
??_V@YAXPAX@Z
_wcsicmp
_initterm
_adjust_fdiv
user32
RegisterClassA
DefWindowProcA
SetWindowsHookExA
LoadStringW
SetWindowLongW
GetScrollInfo
DefWindowProcW
PostQuitMessage
SetWindowTextA
GetWindowTextA
GetTopWindow
kernel32
GetLocaleInfoA
GetSystemTimeAsFileTime
GetFileSize
VirtualFree
CreateFileW
GetLastError
MultiByteToWideChar
SetEndOfFile
VirtualAlloc
CloseHandle
SetLastError
WriteFile
LeaveCriticalSection
InterlockedCompareExchange
RaiseException
LCMapStringW
LockResource
RemoveDirectoryA
lstrlenW
GetStdHandle
GetModuleHandleW
OpenEventW
GetCurrentProcessId
UnhandledExceptionFilter
ExitProcess
FreeEnvironmentStringsA
CreateThread
OutputDebugStringA
LocalFree
LoadLibraryExW
GetConsoleCP
GetTimeFormatW
lstrlenA
SizeofResource
HeapAlloc
LoadLibraryA
InterlockedExchange
GetProcAddress
ntdll
NtCurrentTeb
gdi32
RealizePalette
ExcludeClipRect
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ