Static task
static1
Behavioral task
behavioral1
Sample
c1a7918ab1c22aaa0507a8b7062b7caf722dfee5e9dd5fbb0b4e08157024c831.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1a7918ab1c22aaa0507a8b7062b7caf722dfee5e9dd5fbb0b4e08157024c831.exe
Resource
win10v2004-20221111-en
General
-
Target
c1a7918ab1c22aaa0507a8b7062b7caf722dfee5e9dd5fbb0b4e08157024c831
-
Size
52KB
-
MD5
9ed81996c4b43445e871f22fbfb8fe4a
-
SHA1
7b23ed7f0492fbecec81130219b11770bc85b13f
-
SHA256
c1a7918ab1c22aaa0507a8b7062b7caf722dfee5e9dd5fbb0b4e08157024c831
-
SHA512
2e95c8af3b23fc2f8c85447ada216c0408370a474500f14719f50af5920d3a5d957359d35cd89e3bd1fdade7343fb6e37a9b27a6d59446f1f9754abee98e82b1
-
SSDEEP
768:2wlvOd5AcwChqzyACEDdnjFN5mYyNp0hiS3MlD51SyE3JwpIssk4TZjOUOK7vzWM:2Y+5aeqzTJNwnah8l3Sd6oDFOnK7vzq
Malware Config
Signatures
Files
-
c1a7918ab1c22aaa0507a8b7062b7caf722dfee5e9dd5fbb0b4e08157024c831.exe windows x86
0d42a6f25e20c7397bfbfc00ddbdd88e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorA
opengl32
glTexCoord3i
glEvalPoint1
glCallLists
glFogfv
glTexCoord3fv
version
VerInstallFileW
GetFileVersionInfoA
VerFindFileA
kernel32
IsProcessorFeaturePresent
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
RtlUnwind
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetProcAddress
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
LoadLibraryW
UnhandledExceptionFilter
IsDebuggerPresent
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ