Static task
static1
Behavioral task
behavioral1
Sample
c98b7db8ba569d4efa580e37ae211c655bec824777ce5ecc206ea22fa780a4b0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c98b7db8ba569d4efa580e37ae211c655bec824777ce5ecc206ea22fa780a4b0.exe
Resource
win10v2004-20220812-en
General
-
Target
c98b7db8ba569d4efa580e37ae211c655bec824777ce5ecc206ea22fa780a4b0
-
Size
15.9MB
-
MD5
6b5a928c9c1aa0cda34734daa42e8bc6
-
SHA1
798d9b026bdf916284fd57772c98abe729c0c983
-
SHA256
c98b7db8ba569d4efa580e37ae211c655bec824777ce5ecc206ea22fa780a4b0
-
SHA512
71e7c13e16a8dbd62c2a61b18729a9c31d4ef5ca052c4ab146b1b2e0e708468fbfec787e1e73d1f6977947ab6e6a0a98486ba1bd7f021726b5173b4da8ef72a9
-
SSDEEP
1536:xzWu+k+UHW8QkHnmpSbUhhFJrDnhH//pSzrcU:CUFISbUhhFJrDhH/BuI
Malware Config
Signatures
Files
-
c98b7db8ba569d4efa580e37ae211c655bec824777ce5ecc206ea22fa780a4b0.exe windows x86
9ce4e90fd62f1f550b49b6ea152d057d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
wglSetLayerPaletteEntries
glRects
glScalef
glPopAttrib
kernel32
GetStdHandle
HeapSize
SetConsoleCP
EnumResourceNamesW
ReplaceFileA
GlobalGetAtomNameW
RegisterWaitForSingleObject
LockFileEx
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
LoadLibraryW
RtlUnwind
IsProcessorFeaturePresent
HeapAlloc
HeapReAlloc
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ