Static task
static1
Behavioral task
behavioral1
Sample
5200ca932296aa00c90f1e22693e2fa6cfe9649891f230b81929f53b27553769.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5200ca932296aa00c90f1e22693e2fa6cfe9649891f230b81929f53b27553769.exe
Resource
win10v2004-20220812-en
General
-
Target
5200ca932296aa00c90f1e22693e2fa6cfe9649891f230b81929f53b27553769
-
Size
587KB
-
MD5
079e3784fc15467e5f7f9c65742e5aac
-
SHA1
6fcac18e428a96966d62e3173c79d74a47c77b33
-
SHA256
5200ca932296aa00c90f1e22693e2fa6cfe9649891f230b81929f53b27553769
-
SHA512
847b72413245dfeed390fdc01ae85b5c297a64faed5f30685a8af78dbb37087b42631be9f9d10cffa27462bad061c25ae8070411585d15608961ce718394dfaf
-
SSDEEP
12288:uo/5ufyz2vvXcmYY1pfy8NYl/wD8FgIOfWIlF:uohufRdDYOfxz
Malware Config
Signatures
Files
-
5200ca932296aa00c90f1e22693e2fa6cfe9649891f230b81929f53b27553769.exe windows x86
3a99c363aff5fd41867a678911760f96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
VirtualAlloc
EndUpdateResourceA
DeleteVolumeMountPointW
SetConsoleMode
GetHandleInformation
GetProcessHeap
OpenEventW
VirtualUnlock
TransactNamedPipe
VerLanguageNameA
GetUserDefaultLCID
GetConsoleAliasExesLengthA
FindFirstFileExA
VerLanguageNameW
GetLocalTime
SetStdHandle
LockFileEx
GetSystemTime
GlobalMemoryStatus
EnumSystemCodePagesW
ReadFile
FreeLibrary
BackupRead
GetNamedPipeHandleStateA
GetVersion
IsValidLocale
SetSystemPowerState
version
VerQueryValueW
GetFileVersionInfoSizeA
VerFindFileA
VerFindFileW
VerInstallFileA
VerQueryValueA
GetFileVersionInfoSizeW
VerInstallFileW
GetFileVersionInfoA
opengl32
glLightModeliv
wglMakeCurrent
glEvalPoint2
glIndexub
glNewList
glDeleteTextures
wglDeleteContext
wglCreateContext
glShadeModel
glTexEnvfv
glRasterPos3dv
glColor4f
glColor3uiv
glGetMapdv
msvcrt
_unlink
fclose
setvbuf
fprintf
towupper
fwrite
__p___argc
sprintf
feof
fseek
_mbccpy
fsetpos
_mbsnbcat
fopen
ftell
fputc
fread
_spawnve
_onexit
fwprintf
cosh
memset
isleadbyte
_except_handler3
fputs
ferror
rename
printf
Sections
.text Size: 564KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE