Static task
static1
Behavioral task
behavioral1
Sample
2791c48fa6912f3c9a7388e793822e7625ab2e137c59b0f3517271effae7f402.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2791c48fa6912f3c9a7388e793822e7625ab2e137c59b0f3517271effae7f402.exe
Resource
win10v2004-20221111-en
General
-
Target
2791c48fa6912f3c9a7388e793822e7625ab2e137c59b0f3517271effae7f402
-
Size
88KB
-
MD5
3f9e446502f1b0c9e2955b59f3217760
-
SHA1
78846a8f91045bdbb2a1ec255caa13c95fdff8b4
-
SHA256
2791c48fa6912f3c9a7388e793822e7625ab2e137c59b0f3517271effae7f402
-
SHA512
b592e7437e911ac30c2cd753966c2068ca3fb5f96308116b003ee569a6367781c32f71fdd1beac713041ba1903ed5c2727cba2ba408614544b620b361eb97d87
-
SSDEEP
1536:iv8JdrPgxW8V1vOHt5cQFuUVUOGxcvGxcTGxcu:zJdqW874cQAUiOGxkGxoGx
Malware Config
Signatures
Files
-
2791c48fa6912f3c9a7388e793822e7625ab2e137c59b0f3517271effae7f402.exe windows x86
3cb9a4e3716780d304225797079d829a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glFogi
glTranslatef
glVertex2dv
glRasterPos3d
glIsList
glColor3ubv
glRasterPos4d
glu32
gluScaleImage
gluEndTrim
gluGetTessProperty
gluUnProject
gluQuadricNormals
user32
IsIconic
GetForegroundWindow
FindWindowA
ChildWindowFromPoint
IsWindowVisible
DefDlgProcA
AnyPopup
GetWindowTextLengthA
DialogBoxIndirectParamA
GetNextDlgGroupItem
ole32
CoRegisterSurrogate
PropStgNameToFmtId
StgIsStorageILockBytes
OleCreateStaticFromData
RegisterDragDrop
CreateFileMoniker
CLSIDFromProgID
DoDragDrop
BindMoniker
advapi32
CloseEventLog
RegCreateKeyA
NotifyChangeEventLog
OpenThreadToken
urlmon
RegisterBindStatusCallback
kernel32
LocalAlloc
IsBadStringPtrA
LocalReAlloc
GetCPInfo
VirtualProtect
LocalHandle
GetDateFormatA
CreateEventA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
WritePrivateProfileStringA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetEnvironmentVariableA
OpenEventA
GetCurrentThreadId
CreateSemaphoreA
GetExitCodeThread
GetCurrentProcessId
GetHandleInformation
GetComputerNameA
LocalLock
TlsGetValue
GetProcessHeap
VirtualAlloc
GetStartupInfoA
activeds
ord15
ord9
ord3
ord14
ord8
ord18
ord12
ord13
ord16
ord21
ord6
ord23
comdlg32
GetOpenFileNameW
ChooseFontW
ChooseColorA
PrintDlgW
GetOpenFileNameA
ReplaceTextW
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vaztim Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ