Static task
static1
Behavioral task
behavioral1
Sample
5daa18e8d527bcb1577bb294b3550452dda5a132e8f7a88aa4403e487930be1f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5daa18e8d527bcb1577bb294b3550452dda5a132e8f7a88aa4403e487930be1f.exe
Resource
win10v2004-20220901-en
General
-
Target
5daa18e8d527bcb1577bb294b3550452dda5a132e8f7a88aa4403e487930be1f
-
Size
237KB
-
MD5
488860a0479b95d589947b95d8a66ed0
-
SHA1
1b07d43f56fa9b0e4d8bb5cca2036824953b1451
-
SHA256
5daa18e8d527bcb1577bb294b3550452dda5a132e8f7a88aa4403e487930be1f
-
SHA512
d558895986221942d50d9f42fb33dd9b6ea3779aaef51b878509da2aa4f89d9e03207b31b130e772380995e91b7b480aae6e00f059052860700604b1cd509dc1
-
SSDEEP
6144:3NTg6qjmDFFOTCNtQa4G+oksDUaLlq0bH:dHqjAzQyr4Joks1pqu
Malware Config
Signatures
Files
-
5daa18e8d527bcb1577bb294b3550452dda5a132e8f7a88aa4403e487930be1f.exe windows x86
d326bb49fa585cef30bcb2834b0d5239
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
kernel32
GetStartupInfoW
GetModuleHandleW
lstrcpyA
CreateThread
RtlZeroMemory
CheckRemoteDebuggerPresent
ExitProcess
HeapAlloc
SetUnhandledExceptionFilter
HeapFree
WaitForSingleObject
GetProcessHeap
Sleep
GetProcAddress
LoadLibraryA
SwitchToThread
user32
FindWindowA
OpenClipboard
opengl32
glViewport
glLoadIdentity
glEnable
glClear
glOrtho
glPointSize
glEnd
glVertex3d
glLineStipple
glDisable
glBegin
glColor3d
glPolygonMode
glBlendFunc
glMatrixMode
glLightfv
glLineWidth
d3d9
Direct3DCreate9
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 223KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE