Static task
static1
Behavioral task
behavioral1
Sample
ad36d1ab32789933aec394c8aaf134c9b24ef92e0d3efa2022932701c7baad34.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad36d1ab32789933aec394c8aaf134c9b24ef92e0d3efa2022932701c7baad34.exe
Resource
win10v2004-20221111-en
General
-
Target
ad36d1ab32789933aec394c8aaf134c9b24ef92e0d3efa2022932701c7baad34
-
Size
615KB
-
MD5
4d600aa6854fcf8666b1b65829f8cc45
-
SHA1
9daa23a210d8213b7bb0867b1c2ae1516c5a1af0
-
SHA256
ad36d1ab32789933aec394c8aaf134c9b24ef92e0d3efa2022932701c7baad34
-
SHA512
69914a981073d8c1ac77da361a15243dd7e638383486d7540e0bd416c787b30cc3fd5e2781e5557586bc3884a6c52c96a15529fef2052a97839150e8e7408b86
-
SSDEEP
12288:vywG+KLNa8VMSM03BTIw0YmYfTRzZm7Dc7t3XHnRJ8lK9xO:v4+qD3M0xTQAiXcp3rrxO
Malware Config
Signatures
Files
-
ad36d1ab32789933aec394c8aaf134c9b24ef92e0d3efa2022932701c7baad34.exe windows x86
69a9906fa6bbf51a17d02bc602018dde
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetHandleInformation
LoadLibraryA
VirtualAlloc
GetModuleHandleA
EnumSystemLocalesW
TerminateProcess
WaitNamedPipeW
InterlockedCompareExchange
HeapDestroy
ReadConsoleW
FreeConsole
GetVolumePathNameA
GetVersion
GetStartupInfoA
CreateJobObjectW
GetLocalTime
GetSystemTime
FreeLibrary
SetConsoleTitleA
GetDefaultCommConfigW
UnlockFile
GlobalAddAtomA
GetProcAddress
GetCommTimeouts
DuplicateHandle
WriteConsoleInputVDMA
CreateWaitableTimerW
IsValidLocale
MultiByteToWideChar
SetDefaultCommConfigW
EnumCalendarInfoExW
EnumResourceNamesA
opengl32
wglCreateContext
glVertex4i
glReadBuffer
glColorMaterial
glDrawPixels
glEvalPoint1
glTranslated
glRasterPos3fv
glFogiv
glDeleteLists
glVertex3s
glRasterPos2fv
glGetTexEnvfv
glPolygonStipple
glPopClientAttrib
glNormal3d
glRasterPos4dv
wglDeleteContext
glGetDoublev
wglMakeCurrent
glTexCoord2sv
glGetTexImage
glGetTexParameterfv
glRasterPos2sv
msvcrt
fputs
fprintf
_unlink
fwrite
ferror
fread
fputc
_CIfmod
fwprintf
printf
fsetpos
feof
ftell
sprintf
strtok
fseek
fclose
memset
fopen
_execl
Sections
.text Size: 592KB - Virtual size: 590KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE