Static task
static1
Behavioral task
behavioral1
Sample
a388f857cf23687aa89f00ddb5d229f9efde194afc8b82c7abd0eccb64f2c3a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a388f857cf23687aa89f00ddb5d229f9efde194afc8b82c7abd0eccb64f2c3a5.exe
Resource
win10v2004-20220812-en
General
-
Target
a388f857cf23687aa89f00ddb5d229f9efde194afc8b82c7abd0eccb64f2c3a5
-
Size
631KB
-
MD5
b45d615fc402ad2d69595dda83107c76
-
SHA1
5beda08fdeb36fafd8f78862937494adb1b0b6e5
-
SHA256
a388f857cf23687aa89f00ddb5d229f9efde194afc8b82c7abd0eccb64f2c3a5
-
SHA512
ac329b7bf35369494735542caad24b07d4f148d59285580f4c4e122fdce9ef698eafb926b8c5a232c82e9a4c568e56f396df5ca0e63ae21c9dcbc09a4d8d13ea
-
SSDEEP
12288:u7CnYz3auM0ahO8GmSXWej2HLruLsIM6wZOEsI:znXumSmegXuQIMkEX
Malware Config
Signatures
Files
-
a388f857cf23687aa89f00ddb5d229f9efde194afc8b82c7abd0eccb64f2c3a5.exe windows x86
82eb60a0c8cb9c41047fe7ee247eed96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetVersion
GetHandleInformation
DebugActiveProcess
GetConsoleCommandHistoryLengthA
EnumSystemCodePagesA
GetDiskFreeSpaceExA
FreeLibrary
LoadLibraryA
FindFirstVolumeMountPointA
GetOverlappedResult
WriteConsoleOutputW
CreateFileMappingW
GetStringTypeW
IsValidLocale
SetVolumeMountPointA
FlushViewOfFile
GetSystemTime
OpenFileMappingW
GetProcAddress
WriteConsoleInputA
GetModuleHandleA
CreateFileMappingA
GetLocalTime
user32
SetScrollPos
DrawIconEx
DispatchMessageW
shell32
SHGetSpecialFolderPathA
SHFileOperationA
StrRStrIW
SHLoadInProc
StrChrA
SHBrowseForFolderW
opengl32
wglDeleteContext
wglMakeCurrent
glTexCoord1iv
glMaterialfv
wglCreateContext
glPopAttrib
glVertex3s
glGenTextures
glTexCoord1fv
wglSwapLayerBuffers
glPixelZoom
msvcrt
fread
ftell
fprintf
fsetpos
_yn
_tell
ferror
fwprintf
_unlink
_isnan
fseek
_wfindfirsti64
memset
_ismbbpunct
fopen
printf
fclose
_ismbbalpha
_except_handler3
fputc
_ismbcalnum
sprintf
feof
_dstbias
fputs
fwrite
_winver
Sections
.text Size: 612KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE