Static task
static1
Behavioral task
behavioral1
Sample
a38ce4a60b83892c39d4556bd53ee2c73ba3124399140c19c87c760d883d9d70.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a38ce4a60b83892c39d4556bd53ee2c73ba3124399140c19c87c760d883d9d70.exe
Resource
win10v2004-20220901-en
General
-
Target
a38ce4a60b83892c39d4556bd53ee2c73ba3124399140c19c87c760d883d9d70
-
Size
834KB
-
MD5
f88abfdf40fc1e892d861b1b923cf226
-
SHA1
b51040c6e3a579efff88b3385478b7dfb87e3b8e
-
SHA256
a38ce4a60b83892c39d4556bd53ee2c73ba3124399140c19c87c760d883d9d70
-
SHA512
968821d91c9827c1f44b8a4a88eb1649cbf6c8950390e58e4b117e6855f9a4403d6b89352b2fe0138904749d3b841e4c9f5c6766270607d7d73e31b05c282e75
-
SSDEEP
24576:Wl52YdlEJEse1edWgqQmx0AFEz5jRCpiJwHAK:+cYyGedWgw0Wy5jDwH
Malware Config
Signatures
Files
-
a38ce4a60b83892c39d4556bd53ee2c73ba3124399140c19c87c760d883d9d70.exe windows x86
a5c267b141b51e0fa41e912a5460a8ff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glAreTexturesResident
glLoadIdentity
glOrtho
glClear
glRenderMode
glEndList
glHint
glCopyTexImage2D
glLightfv
glTexCoord2iv
glGetTexLevelParameterfv
glColor4iv
glEnableClientState
glEvalCoord1f
glPixelMapusv
glGetBooleanv
glPushClientAttrib
glMap2f
glCallList
glRasterPos2fv
glColor4bv
glNormal3f
glTexCoord3f
glRotatef
glTexParameteri
glCopyTexSubImage2D
glEvalCoord1dv
kernel32
TransmitCommChar
GetSystemDirectoryA
DuplicateHandle
FatalAppExitA
GetConsoleOutputCP
RestoreLastError
lstrcpynW
QueryPerformanceCounter
RegisterWaitForSingleObject
TlsAlloc
ConnectNamedPipe
GetVersionExW
ReadConsoleOutputA
CreateDirectoryExW
lstrcpyn
DosDateTimeToFileTime
GetSystemTimeAsFileTime
ExitProcess
DeleteFiber
ReadConsoleA
GetLongPathNameA
GetProcessHeaps
BackupRead
GlobalSize
GetFileInformationByHandle
GetModuleHandleA
CreateProcessInternalA
OpenEventW
GetFileSize
ReadProcessMemory
GetOverlappedResult
RtlMoveMemory
GetModuleFileNameW
WaitForMultipleObjects
_lwrite
GetConsoleTitleA
GetTimeFormatA
VirtualQueryEx
ConsoleMenuControl
GetConsoleKeyboardLayoutNameW
VerifyVersionInfoW
SetEnvironmentVariableW
GetProfileStringW
lstrcmpiW
LoadLibraryA
VirtualAlloc
WriteConsoleInputVDMA
VerifyVersionInfoA
ReadConsoleW
GlobalAlloc
GetLongPathNameW
GetLocaleInfoW
PrepareTape
GetBinaryTypeW
WriteTapemark
GetStringTypeExW
HeapQueryInformation
TerminateJobObject
GetComputerNameExW
_lclose
GlobalFree
RegisterWowExec
winmm
midiInPrepareHeader
joySetCapture
timeKillEvent
mixerGetControlDetailsA
midiConnect
timeGetSystemTime
mciSendCommandW
timeGetDevCaps
mmioRead
waveInPrepareHeader
waveInGetDevCapsA
mciGetErrorStringW
PlaySound
joyGetPos
timeGetTime
mmioFlush
midiInMessage
mciGetCreatorTask
waveInClose
midiOutClose
mmioWrite
waveInStop
midiInClose
midiOutMessage
mixerClose
mmioDescend
PlaySoundW
waveOutPrepareHeader
waveOutGetPitch
midiOutGetErrorTextA
sqlunirl
_RegDeleteKey_@8
_FindFirstFileEx_@24
_QueryServiceConfig_@16
_PropertySheet_@4
_SetVolumeLabel_@8
_CreateMDIWindow_@40
_RegQueryMultipleValues_@20
_DefMDIChildProc_@16
_NDdeGetShareSecurity_@24
_OemToCharBuff_@12
_CallMsgFilter_@8
_EnumFonts_@16
_GetLogicalDriveStrings_@8
_NDdeIsValidAppTopicList_@4
_DefDlgProc_@16
_GetTabbedTextExtent_@20
_RegSaveKey_@12
_ExtractIconEx_@20
_PrivilegedServiceAuditAlarm_@20
_ShellExecute_@24
_EnumWindowStations_@8
_RegUnLoadKey_@8
_GetComputerName@8
_SetWindowLong@12
_ReplaceText_@4
_GetOpenFileName@4
_SendNotifyMessage_@16
_CreateWindowStation_@16
_GetMenuItemInfo_@16
_GetDiskFreeSpaceEx@16
_SearchPath_@24
_PostMessage@16
Sections
.text Size: 415KB - Virtual size: 415KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 180KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ