Static task
static1
Behavioral task
behavioral1
Sample
cf6c1992ffd0350bec925e5c5828f1e73f3d7b86a149b6a876bdd59ae362104f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf6c1992ffd0350bec925e5c5828f1e73f3d7b86a149b6a876bdd59ae362104f.exe
Resource
win10v2004-20220812-en
General
-
Target
cf6c1992ffd0350bec925e5c5828f1e73f3d7b86a149b6a876bdd59ae362104f
-
Size
210KB
-
MD5
3f4b64f0c43af27b1441ceb4f028f0d0
-
SHA1
081715ab0e885963e955268b171292b9455dea62
-
SHA256
cf6c1992ffd0350bec925e5c5828f1e73f3d7b86a149b6a876bdd59ae362104f
-
SHA512
45f844290b0ff8fc785f9601f37fdba3c21a45d37066a1e5545c0e30c4cc0d2bfb8e7081b58fdd410442512b5fa0891da8dae3b4779ec0d0c77830fb5531ed6d
-
SSDEEP
3072:FT4lVOYmOxJFl5CcnJTUVnA8wn5sJRFHg8a0RXGwJ1k8+7PpmbovDbe5ySQqM:FTbWlXJUXvRgdkXjiuo7bec
Malware Config
Signatures
Files
-
cf6c1992ffd0350bec925e5c5828f1e73f3d7b86a149b6a876bdd59ae362104f.exe windows x86
47a2d13b07e78ce2f23c1bef7f0f708a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
TerminateProcess
CheckRemoteDebuggerPresent
RtlZeroMemory
CreateThread
lstrcpyA
SwitchToThread
GetModuleHandleW
Sleep
GetStartupInfoW
GetProcessHeap
WaitForSingleObject
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
ExitProcess
user32
FindWindowA
OpenClipboard
advapi32
RegCloseKey
RegQueryValueA
RegOpenKeyA
opengl32
glEnable
glLightfv
glLineWidth
glDisable
glViewport
glMatrixMode
glBlendFunc
glPolygonMode
glColor3d
glBegin
glLineStipple
glVertex3d
glEnd
glPointSize
glOrtho
glClear
glLoadIdentity
msvcrt
_except_handler3
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
__setusermatherr
__set_app_type
_adjust_fdiv
_controlfp
__p__commode
__p__fmode
_initterm
ws2_32
WSAStartup
secur32
LsaFreeReturnBuffer
d3d9
Direct3DCreate9
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE