Static task
static1
Behavioral task
behavioral1
Sample
f4036ce148bde1d3bf542692ddf845e8505ab760444343a7207fa0c17933554f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4036ce148bde1d3bf542692ddf845e8505ab760444343a7207fa0c17933554f.exe
Resource
win10v2004-20221111-en
General
-
Target
f4036ce148bde1d3bf542692ddf845e8505ab760444343a7207fa0c17933554f
-
Size
180KB
-
MD5
d75a159b63e61fec98ed8b64bfdaafd2
-
SHA1
e11c289667602e60ebddfa7e69a44fa5a6ac0bed
-
SHA256
f4036ce148bde1d3bf542692ddf845e8505ab760444343a7207fa0c17933554f
-
SHA512
be3bd24ecee95d5e282cdd9e4d8724b5bd18f654e2090cd7260f971261a27d36513d5476ac9df582492c9ce6c4e76e61fcd0f29b5bf892dc9cf607378185bb1e
-
SSDEEP
1536:lKrhh547GWf6yrCuZm7GH9ACC8t+f3nfpXScup:MlY6yrGE9N/+/4Xp
Malware Config
Signatures
Files
-
f4036ce148bde1d3bf542692ddf845e8505ab760444343a7207fa0c17933554f.exe windows x86
da3fa85ca97c3858282144b6ed4ddf30
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
SHChangeNotify
SHGetSpecialFolderLocation
SHGetFileInfoA
ShellExecuteExA
SHFileOperationA
ole32
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CLSIDFromString
opengl32
glGetMapfv
glTexCoord2f
glColor3b
glColor3i
glGetTexLevelParameteriv
glRasterPos3sv
glGenLists
glDepthRange
kernel32
FileTimeToLocalFileTime
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
RtlUnwind
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
QueryPerformanceCounter
InitializeSListHead
ResumeThread
lstrcmpiA
ScrollConsoleScreenBufferW
SystemTimeToTzSpecificLocalTime
FindAtomA
ReadConsoleA
CloseHandle
CompareStringA
CreateDirectoryA
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
DosDateTimeToFileTime
EnumCalendarInfoA
GetLastError
SetFileTime
MoveFileA
SetFilePointer
SetEndOfFile
GetFileType
CreateFileW
ReadFile
GetStdHandle
SetLastError
WriteFile
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
GetFullPathNameA
GetCurrentDirectoryA
LoadLibraryA
FreeLibrary
GetCPInfo
IsDBCSLeadByte
GetSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
OpenFileMappingA
SetEnvironmentVariableA
GetModuleFileNameW
CreateFileMappingA
MapViewOfFile
GetCommandLineA
UnmapViewOfFile
MoveFileExA
GetTempPathA
Sleep
SetCurrentDirectoryA
WaitForSingleObject
ExpandEnvironmentStringsA
FileTimeToSystemTime
GetTimeFormatA
GetDateFormatA
GetProcAddress
GetNumberFormatA
GetLocaleInfoA
ExitProcess
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
GetModuleHandleA
FindResourceA
GetModuleFileNameA
lstrlenA
GlobalAlloc
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
CreateDirectoryW
DeleteFileW
GetSystemTimeAsFileTime
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
HeapCreate
VirtualFree
Sections
.text Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ