Static task
static1
Behavioral task
behavioral1
Sample
f1d0dd2b6f811ed1808a27c1753d88c786c636001c2704245250e5f940358c0d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1d0dd2b6f811ed1808a27c1753d88c786c636001c2704245250e5f940358c0d.exe
Resource
win10v2004-20220901-en
General
-
Target
f1d0dd2b6f811ed1808a27c1753d88c786c636001c2704245250e5f940358c0d
-
Size
205KB
-
MD5
c51a384157660a5bb0ac0d9d4a1e3c21
-
SHA1
0225f0c0f9a1f2da6459ad6d04b70f80499dffb3
-
SHA256
f1d0dd2b6f811ed1808a27c1753d88c786c636001c2704245250e5f940358c0d
-
SHA512
e711deae8626306e2de57ac05c9698aa7c28283c90db7a487c9f76496fae7425600dcef65ffd1704469e2a8bbfa2cdb0f0b36ff6db1b2dcd0cb2a34e7e3d36e4
-
SSDEEP
3072:/I+5hi6tLXA5OxKAprIADl5b7GAVNIG8ZlDLclnDs/zHdHVX:A+5I6tLXYAJIAh5b7GOslDWDKHB
Malware Config
Signatures
Files
-
f1d0dd2b6f811ed1808a27c1753d88c786c636001c2704245250e5f940358c0d.exe windows x86
f7200442a58e6a8928c7124d199f598a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
WriteConsoleW
SetStdHandle
CreateFileW
ReadConsoleOutputCharacterW
CloseHandle
GetProcAddress
GetLastError
GetStdHandle
ExitThread
LoadLibraryW
GetProcessHeap
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapFree
GetCurrentProcess
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
HeapCreate
GetModuleFileNameW
WriteFile
IsProcessorFeaturePresent
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
lstrlenA
user32
MapWindowPoints
SendMessageW
BeginDeferWindowPos
DeferWindowPos
UpdateWindow
IsWindow
AppendMenuA
SetWindowPos
GetSysColor
EndDialog
EnableWindow
SetDlgItemTextA
DialogBoxParamA
GetDlgItem
DestroyWindow
GetSystemMenu
GetWindowRect
LoadStringA
LoadMenuA
LoadIconA
SendMessageA
GetDC
DrawFocusRect
GetForegroundWindow
CreateDialogIndirectParamA
GetWindowTextA
ReleaseDC
SetClassLongA
FindWindowA
gdi32
SelectObject
ExtTextOutA
EndPage
GetTextMetricsW
StartPage
SetTextColor
DeleteDC
CreateFontIndirectW
GetDeviceCaps
SetBkColor
SetAbortProc
SwapBuffers
StartDocA
GetTextExtentPointW
GetTextMetricsA
EndDoc
TextOutA
comdlg32
PrintDlgA
ole32
CoCreateInstance
shlwapi
StrCpyNW
comctl32
ImageList_Draw
gdiplus
GdipFree
GdipDeletePen
GdipDeleteGraphics
GdipDrawImageRectI
GdipLoadImageFromFile
GdipAlloc
GdipDisposeImage
GdipCloneImage
GdipDrawLineI
GdipCreatePen1
GdipCreateFromHDC
opengl32
glLoadIdentity
glColor3f
glFlush
glTranslatef
glViewport
glMatrixMode
glPolygonMode
glRotatef
glPushMatrix
glPopMatrix
glShadeModel
glBegin
glEnd
glOrtho
glClearColor
glClear
glVertex2f
glu32
gluLookAt
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ