Static task
static1
Behavioral task
behavioral1
Sample
7cdf66e357f64a93aa9d77281341df14d2d64a0dba1cce929e36a0d89d98a812.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7cdf66e357f64a93aa9d77281341df14d2d64a0dba1cce929e36a0d89d98a812.exe
Resource
win10v2004-20220812-en
General
-
Target
7cdf66e357f64a93aa9d77281341df14d2d64a0dba1cce929e36a0d89d98a812
-
Size
88KB
-
MD5
a09d6d23f70da37848982cff721a9a50
-
SHA1
d3756fa51119781b437c18150d6ccfc4b6c31eb4
-
SHA256
7cdf66e357f64a93aa9d77281341df14d2d64a0dba1cce929e36a0d89d98a812
-
SHA512
e0fa4b5f288f28d1d99ab9615b9f9bc7aae238853d78d5a8807290f8829575fc186800d70b76b09869ab2a91713e70bd71123fa9e17c7a77cfdde2317db74d94
-
SSDEEP
1536:kXAJZ86aNV9poYQegvjBfojfrH5uU5FZSscDaWGscDaWqscDaWv:9JZpaNbuhDbdawU5FZADa9DaBDa
Malware Config
Signatures
Files
-
7cdf66e357f64a93aa9d77281341df14d2d64a0dba1cce929e36a0d89d98a812.exe windows x86
3cb9a4e3716780d304225797079d829a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glFogi
glTranslatef
glVertex2dv
glRasterPos3d
glIsList
glColor3ubv
glRasterPos4d
glu32
gluScaleImage
gluEndTrim
gluGetTessProperty
gluUnProject
gluQuadricNormals
user32
IsIconic
GetForegroundWindow
FindWindowA
ChildWindowFromPoint
IsWindowVisible
DefDlgProcA
AnyPopup
GetWindowTextLengthA
DialogBoxIndirectParamA
GetNextDlgGroupItem
ole32
CoRegisterSurrogate
PropStgNameToFmtId
StgIsStorageILockBytes
OleCreateStaticFromData
RegisterDragDrop
CreateFileMoniker
CLSIDFromProgID
DoDragDrop
BindMoniker
advapi32
CloseEventLog
RegCreateKeyA
NotifyChangeEventLog
OpenThreadToken
urlmon
RegisterBindStatusCallback
kernel32
LocalAlloc
IsBadStringPtrA
LocalReAlloc
GetCPInfo
VirtualProtect
LocalHandle
GetDateFormatA
CreateEventA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
WritePrivateProfileStringA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetEnvironmentVariableA
OpenEventA
GetCurrentThreadId
CreateSemaphoreA
GetExitCodeThread
GetCurrentProcessId
GetHandleInformation
GetComputerNameA
LocalLock
TlsGetValue
GetProcessHeap
VirtualAlloc
GetStartupInfoA
activeds
ord15
ord9
ord3
ord14
ord8
ord18
ord12
ord13
ord16
ord21
ord6
ord23
comdlg32
GetOpenFileNameW
ChooseFontW
ChooseColorA
PrintDlgW
GetOpenFileNameA
ReplaceTextW
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.afzlo Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ