Static task
static1
Behavioral task
behavioral1
Sample
b627e5dc17b8f87885c0b9c5225effeb1552cbd8a615dab1ee1b52a5fc57a4e7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b627e5dc17b8f87885c0b9c5225effeb1552cbd8a615dab1ee1b52a5fc57a4e7.exe
Resource
win10v2004-20221111-en
General
-
Target
b627e5dc17b8f87885c0b9c5225effeb1552cbd8a615dab1ee1b52a5fc57a4e7
-
Size
839KB
-
MD5
7429f2f343accceeb94d2e47bc69f101
-
SHA1
9f28a2452b5fc8789d1bf66dda6310756007667c
-
SHA256
b627e5dc17b8f87885c0b9c5225effeb1552cbd8a615dab1ee1b52a5fc57a4e7
-
SHA512
e235dec8cfc39391f3fdd4d00fe88855f4c8a4be1ff08b1dd7b04e992e1cfadc54c556b127aad7b8efd351e162823ffceaff36930cb3737ff4e49fc82c81f416
-
SSDEEP
24576:f6HbUWfGlUoEE2xfrzFJkBdkLATU8XDWxpgPEpD+DyoYqT:S4QCULEQTzUksP6xpTmE
Malware Config
Signatures
Files
-
b627e5dc17b8f87885c0b9c5225effeb1552cbd8a615dab1ee1b52a5fc57a4e7.exe windows x86
b429f5c2bf325755498aa3164b2d0f2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glEndList
glEnd
glTexSubImage1D
glRasterPos3sv
glGetTexEnviv
wglSwapMultipleBuffers
glDrawArrays
wglChoosePixelFormat
glLightfv
glLoadMatrixf
glNormal3fv
glPointSize
wglGetCurrentContext
wglSetPixelFormat
glTexImage1D
glGetTexParameteriv
glVertex4fv
glPrioritizeTextures
glLightModelf
glTexCoord1dv
glColor4ubv
glVertex3d
kernel32
CreateHardLinkA
GetOverlappedResult
WriteProfileSectionA
NlsGetCacheUpdateCount
GetConsoleScreenBufferInfo
GetFirmwareEnvironmentVariableA
InitializeCriticalSection
LoadLibraryA
DeleteAtom
GetConsoleInputWaitHandle
IsProcessInJob
VirtualAlloc
VirtualAllocEx
SetConsoleDisplayMode
GetACP
GlobalUnlock
SetConsoleKeyShortcuts
ConvertThreadToFiber
QueryDepthSList
IsDBCSLeadByteEx
FileTimeToLocalFileTime
GetThreadPriorityBoost
WriteConsoleInputW
RestoreLastError
HeapValidate
lstrcpynW
FatalAppExitA
GetCalendarInfoA
ReleaseMutex
ReadFileEx
SetLocalPrimaryComputerNameA
IsValidCodePage
HeapSetInformation
GetCurrentDirectoryA
GetDateFormatW
OpenConsoleW
SetComPlusPackageInstallStatus
SetConsoleCursor
Module32Next
GetDevicePowerState
OpenWaitableTimerA
DuplicateConsoleHandle
SetClientTimeZoneInformation
SetConsoleWindowInfo
FlushConsoleInputBuffer
SetCommConfig
IsValidLocale
GetConsoleAliasA
FreeLibrary
GetCurrencyFormatW
ntdll
RtlInitUnicodeStringEx
RtlUnicodeStringToAnsiSize
ZwCreateMailslotFile
RtlRealSuccessor
RtlInitializeSid
ZwRaiseException
NlsMbOemCodePageTag
NtSetVolumeInformationFile
NtEnumerateSystemEnvironmentValuesEx
RtlReleaseResource
NtOpenKeyedEvent
ZwNotifyChangeKey
NtCreateSymbolicLinkObject
RtlOemStringToUnicodeString
RtlNtPathNameToDosPathName
NtQueryKey
ZwQueryInformationToken
atol
ZwTraceEvent
RtlLargeIntegerToChar
RtlNtStatusToDosErrorNoTeb
RtlCharToInteger
NtCreateWaitablePort
NtQueryBootEntryOrder
wcsncpy
msvcrt
exit
Sections
.text Size: 461KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 371KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ