Static task
static1
Behavioral task
behavioral1
Sample
a22765868c5ffd0e98dd56d12f0133943c8117c0b62dd6988b722697323562fb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a22765868c5ffd0e98dd56d12f0133943c8117c0b62dd6988b722697323562fb.exe
Resource
win10v2004-20220901-en
General
-
Target
a22765868c5ffd0e98dd56d12f0133943c8117c0b62dd6988b722697323562fb
-
Size
106KB
-
MD5
32fee927ea42b8f12083b7e7870e0929
-
SHA1
a6e4d8817cb8cc15d539059f623e87e471ba16f7
-
SHA256
a22765868c5ffd0e98dd56d12f0133943c8117c0b62dd6988b722697323562fb
-
SHA512
b57ded4b4a1774cfc744064f40bc458596ec4212b77485aa792f9b24c6bb618c37a66c6530e445f7fc9e52d59de2a340bd549d82b661dbebb9c26fe3f502555f
-
SSDEEP
1536:9yp9eJ+u6K1n+wNfwVJz9dA7Vs8W3KKKmminu1w7f0W6lCfv8xI:9c013OVJzTWVO3RZu60Tkfv86
Malware Config
Signatures
Files
-
a22765868c5ffd0e98dd56d12f0133943c8117c0b62dd6988b722697323562fb.exe windows x86
13cf55e1d771bb9574daabdc602fb07a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glEnd
wglGetCurrentContext
glLoadName
wglSetLayerPaletteEntries
glMap2d
kernel32
GetCurrentThreadId
HeapReAlloc
HeapAlloc
HeapSize
RaiseException
GetCurrentThread
SetMailslotInfo
HeapWalk
GetLargestConsoleWindowSize
GetVolumeInformationW
GetTimeZoneInformation
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapFree
Sleep
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ