Static task
static1
Behavioral task
behavioral1
Sample
36d79e1ec522e41ec8d6c42e3057bb84705d214120f31b9ca8e874ccc796d126.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
36d79e1ec522e41ec8d6c42e3057bb84705d214120f31b9ca8e874ccc796d126.exe
Resource
win10v2004-20220812-en
General
-
Target
36d79e1ec522e41ec8d6c42e3057bb84705d214120f31b9ca8e874ccc796d126
-
Size
529KB
-
MD5
2f4e0ef39b7ee5a9f87354128576cf80
-
SHA1
d3cb2c0a6f370022d8f0c25d4e665f576875b02b
-
SHA256
36d79e1ec522e41ec8d6c42e3057bb84705d214120f31b9ca8e874ccc796d126
-
SHA512
87e5e6e6edd71a3e0b749b08e38f4f98606a3199f164ab47fe662dd4a72598b4bf6f0bb6aeaab45b6e638adf1e9c0127390d2b0d6573677fea4d0f786792b729
-
SSDEEP
12288:WJab2nIfJDdFDTRDaoc/KRnioDNkZwV4PHNdq:iabxxdFOCRioxkZi4PH
Malware Config
Signatures
Files
-
36d79e1ec522e41ec8d6c42e3057bb84705d214120f31b9ca8e874ccc796d126.exe windows x86
3cb9a4e3716780d304225797079d829a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glFogi
glTranslatef
glVertex2dv
glRasterPos3d
glIsList
glColor3ubv
glRasterPos4d
glu32
gluScaleImage
gluEndTrim
gluGetTessProperty
gluUnProject
gluQuadricNormals
user32
IsIconic
GetForegroundWindow
FindWindowA
ChildWindowFromPoint
IsWindowVisible
DefDlgProcA
AnyPopup
GetWindowTextLengthA
DialogBoxIndirectParamA
GetNextDlgGroupItem
ole32
CoRegisterSurrogate
PropStgNameToFmtId
StgIsStorageILockBytes
OleCreateStaticFromData
RegisterDragDrop
CreateFileMoniker
CLSIDFromProgID
DoDragDrop
BindMoniker
advapi32
CloseEventLog
RegCreateKeyA
NotifyChangeEventLog
OpenThreadToken
urlmon
RegisterBindStatusCallback
kernel32
LocalAlloc
IsBadStringPtrA
LocalReAlloc
GetCPInfo
VirtualProtect
LocalHandle
GetDateFormatA
CreateEventA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
WritePrivateProfileStringA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetEnvironmentVariableA
OpenEventA
GetCurrentThreadId
CreateSemaphoreA
GetExitCodeThread
GetCurrentProcessId
GetHandleInformation
GetComputerNameA
LocalLock
TlsGetValue
GetProcessHeap
VirtualAlloc
GetStartupInfoA
activeds
ord15
ord9
ord3
ord14
ord8
ord18
ord12
ord13
ord16
ord21
ord6
ord23
comdlg32
GetOpenFileNameW
ChooseFontW
ChooseColorA
PrintDlgW
GetOpenFileNameA
ReplaceTextW
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 542KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.httjr Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 508KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ