Static task
static1
Behavioral task
behavioral1
Sample
94f5fb0e77a3aa238e30cce884f57f696cbf2835588503a8b2dc004fc86d7e1b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
94f5fb0e77a3aa238e30cce884f57f696cbf2835588503a8b2dc004fc86d7e1b.exe
Resource
win10v2004-20220812-en
General
-
Target
94f5fb0e77a3aa238e30cce884f57f696cbf2835588503a8b2dc004fc86d7e1b
-
Size
184KB
-
MD5
0bf7de9e2fc3bab94b928f61806888e9
-
SHA1
4ac4d3fcb7a87860115af538e23cfbd9a4622b39
-
SHA256
94f5fb0e77a3aa238e30cce884f57f696cbf2835588503a8b2dc004fc86d7e1b
-
SHA512
89b2c231093993d14e659b034e6c13e3ca0c99c800d31f86d1e5bf34f0c550844eb2d805c1072d6dc9b120e993c7188dc40fb41e43617eb64c837d2618ee6f9e
-
SSDEEP
3072:EWiiGijE+bIrq2WMrUBBOVSDADeak7dJHB/AKGL:NPjEzq9MABOVSsQLH5AKk
Malware Config
Signatures
Files
-
94f5fb0e77a3aa238e30cce884f57f696cbf2835588503a8b2dc004fc86d7e1b.exe windows x86
b9c105a334c3b94191fee01ab6f8fd8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
d3d9
Direct3DCreate9
d3dx9_40
D3DXMatrixScaling
D3DXMatrixPerspectiveFovLH
D3DXCreateSprite
D3DXMatrixRotationAxis
D3DXVec3TransformCoord
D3DXVec3Normalize
D3DXMatrixRotationX
D3DXMatrixTranslation
D3DXMatrixMultiply
D3DXLoadMeshFromXA
D3DXCreateTextureFromFileA
D3DXMatrixRotationY
dinput8
DirectInput8Create
kernel32
GetModuleFileNameW
GetProcessHeap
HeapAlloc
HeapFree
FatalAppExitA
GetSystemTimeAsFileTime
VirtualQuery
GetCurrentThreadId
GetTickCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
FreeLibrary
lstrcpyA
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryA
GetProcAddress
lstrlenA
IsDebuggerPresent
WideCharToMultiByte
DebugBreak
RaiseException
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
user32
CreateWindowExA
TranslateMessage
PostQuitMessage
DefWindowProcA
RegisterClassExA
DispatchMessageA
ShowWindow
UpdateWindow
PeekMessageA
winmm
timeGetTime
msvcr80d
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
__CxxFrameHandler3
_CrtDbgReportW
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
memset
_purecall
atan
_CRT_RTC_INITW
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_amsg_exit
__getmainargs
_exit
_XcptFilter
_cexit
exit
_ismbblead
_acmdln
_CrtSetCheckCount
_initterm
_initterm_e
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_invoke_watson
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
??3@YAXPAX@Z
acos
memcpy
_time64
srand
rand
wcsrchr
??2@YAPAXI@Z
_invalid_parameter
msvcp80d
??1_Container_base@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Debug_message@std@@YAXPB_W0I@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??0_Container_base@std@@QAE@XZ
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ