Static task
static1
Behavioral task
behavioral1
Sample
61a919b9952d7139bf8106fdd291a81d54f09b6ebfbf8eee1dd2646ca130833c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
61a919b9952d7139bf8106fdd291a81d54f09b6ebfbf8eee1dd2646ca130833c.exe
Resource
win10v2004-20220812-en
General
-
Target
61a919b9952d7139bf8106fdd291a81d54f09b6ebfbf8eee1dd2646ca130833c
-
Size
88KB
-
MD5
a0be6b13f75921c4c3afe99d780ce6b9
-
SHA1
eb94a70b0fd03550732e83f95ff5d0b3f22f777a
-
SHA256
61a919b9952d7139bf8106fdd291a81d54f09b6ebfbf8eee1dd2646ca130833c
-
SHA512
aec0a068ec922aa4b04da842d12f9d1fb7aa4b6d4936782e15541534f0c222f79ce2a80ff3864befd94667c84c8a16b021d5e889797cd520cfd1ab62a826a2d3
-
SSDEEP
1536:XXAJmmG+SY5chPR2DDURPxlOiLvtrOiLvtHOiLvt4:AJPSg9DARp0iLsiLoiL
Malware Config
Signatures
Files
-
61a919b9952d7139bf8106fdd291a81d54f09b6ebfbf8eee1dd2646ca130833c.exe windows x86
3cb9a4e3716780d304225797079d829a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glFogi
glTranslatef
glVertex2dv
glRasterPos3d
glIsList
glColor3ubv
glRasterPos4d
glu32
gluScaleImage
gluEndTrim
gluGetTessProperty
gluUnProject
gluQuadricNormals
user32
IsIconic
GetForegroundWindow
FindWindowA
ChildWindowFromPoint
IsWindowVisible
DefDlgProcA
AnyPopup
GetWindowTextLengthA
DialogBoxIndirectParamA
GetNextDlgGroupItem
ole32
CoRegisterSurrogate
PropStgNameToFmtId
StgIsStorageILockBytes
OleCreateStaticFromData
RegisterDragDrop
CreateFileMoniker
CLSIDFromProgID
DoDragDrop
BindMoniker
advapi32
CloseEventLog
RegCreateKeyA
NotifyChangeEventLog
OpenThreadToken
urlmon
RegisterBindStatusCallback
kernel32
LocalAlloc
IsBadStringPtrA
LocalReAlloc
GetCPInfo
VirtualProtect
LocalHandle
GetDateFormatA
CreateEventA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
WritePrivateProfileStringA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetEnvironmentVariableA
OpenEventA
GetCurrentThreadId
CreateSemaphoreA
GetExitCodeThread
GetCurrentProcessId
GetHandleInformation
GetComputerNameA
LocalLock
TlsGetValue
GetProcessHeap
VirtualAlloc
GetStartupInfoA
activeds
ord15
ord9
ord3
ord14
ord8
ord18
ord12
ord13
ord16
ord21
ord6
ord23
comdlg32
GetOpenFileNameW
ChooseFontW
ChooseColorA
PrintDlgW
GetOpenFileNameA
ReplaceTextW
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rkeecq Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ