Static task
static1
Behavioral task
behavioral1
Sample
c79527085a19d175039752ff65690d0b2e45a9c28c7d231560240ab4bb939acd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c79527085a19d175039752ff65690d0b2e45a9c28c7d231560240ab4bb939acd.exe
Resource
win10v2004-20220901-en
General
-
Target
c79527085a19d175039752ff65690d0b2e45a9c28c7d231560240ab4bb939acd
-
Size
234KB
-
MD5
b1ca45a6f4d9b5351c154e2d077b6ae4
-
SHA1
8bc42ab37a17c0b32322b39f2e654651171aee5d
-
SHA256
c79527085a19d175039752ff65690d0b2e45a9c28c7d231560240ab4bb939acd
-
SHA512
d0426412792afa7af123b73b47c09f9d1731fb217204b6604fd6b5cfe744d24a4be9003b67bf5ed9a2fc3001e0a93fcaa318ad9576fef732822a227f9d3a2732
-
SSDEEP
3072:UPSM9+7Xx39PNfcPYYTqPbWjrpbBhbAQ1Ng1b7qF6ZAo5s4qEW0FAoqKhwfRdK6O:kS/x39aPR99VAd7A6ZAireoqlWFGnw1
Malware Config
Signatures
Files
-
c79527085a19d175039752ff65690d0b2e45a9c28c7d231560240ab4bb939acd.exe windows x86
22f5872ca0954cbd8a27df3993804524
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleInitialize
OleSetAutoConvert
MonikerCommonPrefixWith
StgOpenAsyncDocfileOnIFillLockBytes
CoGetCallContext
opengl32
glBegin
glRotatef
glRectf
glVertex3f
glEnd
kernel32
InitializeCriticalSectionAndSpinCount
HeapSize
LoadLibraryW
IsProcessorFeaturePresent
HeapReAlloc
HeapAlloc
RtlUnwind
LCMapStringW
GetSystemTimeAsFileTime
SleepEx
ClearCommBreak
CreateTimerQueue
lstrcpynA
GetTapeStatus
EnumSystemCodePagesW
WaitNamedPipeA
WriteProfileStringW
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
DecodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetACP
GetOEMCP
IsValidCodePage
Sleep
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
MultiByteToWideChar
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ