Static task
static1
Behavioral task
behavioral1
Sample
c64ba1212a1531a37a95c3e721be01f66008ef7f8a892a63bdda6e5b0332aa9c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c64ba1212a1531a37a95c3e721be01f66008ef7f8a892a63bdda6e5b0332aa9c.exe
Resource
win10v2004-20221111-en
General
-
Target
c64ba1212a1531a37a95c3e721be01f66008ef7f8a892a63bdda6e5b0332aa9c
-
Size
667KB
-
MD5
9e43194b13179102139664f1daddd253
-
SHA1
6d3f980e99a5493b3495b7f8890a4c3c5d141865
-
SHA256
c64ba1212a1531a37a95c3e721be01f66008ef7f8a892a63bdda6e5b0332aa9c
-
SHA512
9f819013562aaba59439d8726e6fc2b9419683db8f4967fa6823a4e762eeecc4a96d7df1d9f620c6d77f135787612e5e415f37cbdc2c064f6f47719d7813434d
-
SSDEEP
12288:QjGz5pJRzISmlGaUVawb7zr4mhtDYK74ifAJ7L6B9AhZ:QKQGa21r4mhtDYKCJ7Ly9AD
Malware Config
Signatures
Files
-
c64ba1212a1531a37a95c3e721be01f66008ef7f8a892a63bdda6e5b0332aa9c.exe windows x86
96ac5b9238a49b51d8eed34cf61fb10e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
VirtualAlloc
GetVersion
GetModuleHandleA
EndUpdateResourceA
DeleteVolumeMountPointW
LoadLibraryA
SetConsoleMode
GetHandleInformation
GetProcessHeap
OpenEventW
VirtualUnlock
TransactNamedPipe
VerLanguageNameA
GetUserDefaultLCID
GetConsoleAliasExesLengthA
FindFirstFileExA
VerLanguageNameW
GetLocalTime
SetStdHandle
LockFileEx
GetSystemTime
GlobalMemoryStatus
EnumSystemCodePagesW
ReadFile
FreeLibrary
BackupRead
GetNamedPipeHandleStateA
IsValidLocale
SetSystemPowerState
version
VerQueryValueW
GetFileVersionInfoSizeA
VerFindFileA
VerFindFileW
VerInstallFileA
VerQueryValueA
GetFileVersionInfoSizeW
VerInstallFileW
GetFileVersionInfoA
opengl32
glLightModeliv
wglMakeCurrent
glEvalPoint2
glIndexub
glNewList
glDeleteTextures
wglDeleteContext
wglCreateContext
glShadeModel
glTexEnvfv
glRasterPos3dv
glColor4f
glColor3uiv
glGetMapdv
msvcrt
_unlink
fclose
setvbuf
fprintf
towupper
fwrite
__p___argc
sprintf
feof
fseek
_mbccpy
fsetpos
_mbsnbcat
fopen
ftell
fputc
fread
_spawnve
_onexit
fwprintf
cosh
memset
isleadbyte
_except_handler3
fputs
ferror
rename
printf
Sections
.text Size: 648KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE