Static task
static1
Behavioral task
behavioral1
Sample
844781a15a25ed4da6c795856043c55fe1ba1692c48a92f3761b140e92c4a5d6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
844781a15a25ed4da6c795856043c55fe1ba1692c48a92f3761b140e92c4a5d6.exe
Resource
win10v2004-20221111-en
General
-
Target
844781a15a25ed4da6c795856043c55fe1ba1692c48a92f3761b140e92c4a5d6
-
Size
234KB
-
MD5
6e2f1e80b22b84d18b9605e003ce5289
-
SHA1
afdfac0e087ac14dfcd424063c37b9e106496082
-
SHA256
844781a15a25ed4da6c795856043c55fe1ba1692c48a92f3761b140e92c4a5d6
-
SHA512
08db4154dd4fb3b7decfcdf68d35bc82a5acccb06c75991170c5b23b5302f6f0b59a57240150c2e598d2acace7baffba2cf083d84e0dd90be83e1839c97f05b8
-
SSDEEP
3072:UPSM9+7Xx39PNfcPYYTqPbWjrpbBhbAQ1Ng1b7qF6ZAo5s4qEW0FAoqKhwfRdK6V:kS/x39aPR99VAd7A6ZAireoqlWFGnwSz
Malware Config
Signatures
Files
-
844781a15a25ed4da6c795856043c55fe1ba1692c48a92f3761b140e92c4a5d6.exe windows x86
22f5872ca0954cbd8a27df3993804524
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleInitialize
OleSetAutoConvert
MonikerCommonPrefixWith
StgOpenAsyncDocfileOnIFillLockBytes
CoGetCallContext
opengl32
glBegin
glRotatef
glRectf
glVertex3f
glEnd
kernel32
InitializeCriticalSectionAndSpinCount
HeapSize
LoadLibraryW
IsProcessorFeaturePresent
HeapReAlloc
HeapAlloc
RtlUnwind
LCMapStringW
GetSystemTimeAsFileTime
SleepEx
ClearCommBreak
CreateTimerQueue
lstrcpynA
GetTapeStatus
EnumSystemCodePagesW
WaitNamedPipeA
WriteProfileStringW
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
DecodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetACP
GetOEMCP
IsValidCodePage
Sleep
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
MultiByteToWideChar
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ