Static task
static1
Behavioral task
behavioral1
Sample
90e630c0f09e1c9cd69951b1278f7a9c6d8d55b0ffb5f08b1325538eb3eb3f9f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
90e630c0f09e1c9cd69951b1278f7a9c6d8d55b0ffb5f08b1325538eb3eb3f9f.exe
Resource
win10v2004-20220812-en
General
-
Target
90e630c0f09e1c9cd69951b1278f7a9c6d8d55b0ffb5f08b1325538eb3eb3f9f
-
Size
406KB
-
MD5
8890a70bbde6470664ee6cd5b127bfb0
-
SHA1
966bb6b494d7a443e42260b24da70f9f99c576be
-
SHA256
90e630c0f09e1c9cd69951b1278f7a9c6d8d55b0ffb5f08b1325538eb3eb3f9f
-
SHA512
6eee585c589dac39b95d2b7f58c82673a39eb0ec1c25413b9d857d6fb5d44e523f1c5e70d62f7d3f005d6d3fea11176bec4e25e41b81fdc5b7975751e7f43b32
-
SSDEEP
6144:ObzEWenS6meJlI8dxL/dJ8g1OZ7XfOMnLP23rHl9aAZ54RweYvZ9qvqx:ObzTP6rLxLdJ8gRMj23/aA3X
Malware Config
Signatures
Files
-
90e630c0f09e1c9cd69951b1278f7a9c6d8d55b0ffb5f08b1325538eb3eb3f9f.exe windows x86
1a64c80af2d7ea50022756d35889185b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
glu32
gluErrorString
gluNewNurbsRenderer
gluLookAt
gluTessBeginPolygon
gluTessBeginContour
gluTessCallback
kernel32
VerLanguageNameA
GetModuleHandleA
GetProcAddress
PulseEvent
DeleteFileA
Sleep
OpenSemaphoreA
TlsGetValue
ResumeThread
GetEnvironmentStrings
GetCurrentProcessId
VirtualAllocEx
OpenEventA
LocalReAlloc
QueryPerformanceCounter
LCMapStringA
SuspendThread
ReleaseSemaphore
LocalLock
GetLastError
GetStartupInfoA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerInstallFileA
VerFindFileA
avifil32
AVISaveVA
setupapi
SetupAddToDiskSpaceListW
SetupLogErrorA
SetupInstallFileExW
SetupGetMultiSzFieldA
SetupQueueRenameW
SetupCopyErrorA
SetupQueryFileLogW
SetupDiEnumDeviceInfo
SetupQueueDeleteW
SetupTerminateFileLog
SetupAddToDiskSpaceListA
msvcrt
free
freopen
fscanf
_fsopen
fsetpos
fputs
fopen
fseek
fread
ftell
fputc
fprintf
_pctype
_isctype
__mb_cur_max
_beginthread
iswctype
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 517KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 385KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ