Static task
static1
Behavioral task
behavioral1
Sample
8e79ad67b366115ca119cc46ded0e997e1cfa98f49e96ff883d52a5e4ec9bb55.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e79ad67b366115ca119cc46ded0e997e1cfa98f49e96ff883d52a5e4ec9bb55.exe
Resource
win10v2004-20220812-en
General
-
Target
8e79ad67b366115ca119cc46ded0e997e1cfa98f49e96ff883d52a5e4ec9bb55
-
Size
23KB
-
MD5
8fe9a6606deb0f559a8d41273a22468e
-
SHA1
1dcc5215b4c36bc59ac3bed572eab2211a24aab9
-
SHA256
8e79ad67b366115ca119cc46ded0e997e1cfa98f49e96ff883d52a5e4ec9bb55
-
SHA512
85a95dfcf9b4388349fb6bdcf69e3ee76b5e2cf4af27effe1bfc74fe67696a46ad6941df4a8baaaebe3d45972c55dff01ea44354e0931c55a619973b6709718b
-
SSDEEP
384:D+MtBEvselqn5iOBdqE5CbK97L3L0kPh8oMCrHgMEqajRvKO:DB/yy5iuqVbK9v7ZZHgVq4iO
Malware Config
Signatures
Files
-
8e79ad67b366115ca119cc46ded0e997e1cfa98f49e96ff883d52a5e4ec9bb55.exe windows x86
8acfb6a90ce0d36bac7d9739b69d2f30
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glLightiv
glStencilMask
glMultMatrixf
glRasterPos4dv
glGetDoublev
glIndexMask
glFeedbackBuffer
glIndexubv
glPushClientAttrib
GlmfEndPlayback
glPopName
glReadPixels
glDrawArrays
glColor4us
kernel32
GetDiskFreeSpaceExA
GetCurrentThreadId
GetCPInfoExW
GetCurrentProcessId
CreateMutexA
LocalShrink
GlobalAddAtomA
QueryPerformanceCounter
GetTickCount
AllocConsole
CreateTapePartition
CreateWaitableTimerA
VirtualAlloc
GetVolumeInformationA
GetSystemWow64DirectoryA
SetThreadPriorityBoost
RtlZeroMemory
CompareFileTime
msvcp60
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??0_Timevec@std@@QAE@ABV01@@Z
?cos@?$_Ctr@N@std@@SANN@Z
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0ostrstream@std@@QAE@PADHH@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
?conj@std@@YA?AV?$complex@M@1@ABV21@@Z
??0_Locinfo@std@@QAE@ABV01@@Z
?positive_sign@?$_Mpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
?pow@std@@YA?AV?$complex@O@1@ABV21@H@Z
hhsetup
?AddLocationHistory@CTitle@@QAEKKPBD00PBVCLocation@@00H@Z
?AddChildFolder@CFolder@@QAEPAV1@PBGKPAKG@Z
?GetLangId@CCollection@@QAEGPBD@Z
?AddRefedTitle@CCollection@@AAEKPAVCFolder@@@Z
?SetLanguage@CFolder@@QAEXG@Z
??0CFIFOString@@QAE@XZ
?GetVolumeW@CLocation@@QAEPBGXZ
?ParseFile@CCollection@@AAEKPBD@Z
?DeleteFolders@CCollection@@AAEXPAPAVCFolder@@@Z
?SetFirstChildFolder@CFolder@@QAEXPAV1@@Z
?IncrementRefTitleCount@CCollection@@QAEXXZ
?Next@CPointerList@@QAEPAUListItem@@PAU2@@Z
??4CPointerList@@QAEAAV0@ABV0@@Z
urlmon
URLOpenPullStreamW
HlinkNavigateMoniker
URLOpenBlockingStreamW
URLDownloadToCacheFileA
URLDownloadW
URLDownloadA
RegisterMediaTypeClass
ObtainUserAgentString
ZonesReInit
HlinkSimpleNavigateToMoniker
URLOpenStreamW
CDLGetLongPathNameW
CreateFormatEnumerator
query
?GetNumber@CQueryScanner@@QAEHAAKAAH@Z
?SetProperties@CDbProperties@@UAGJKQAUtagDBPROPSET@@@Z
?GetStr@CKeyBuf@@QBEPAGXZ
?LokNewWorkId@CPropertyStore@@AAEKKHH@Z
?SkipULong@CMemDeSerStream@@UAEXXZ
??0CDFA@@QAE@PBGAAVCTimeLimit@@E@Z
??0CMachineAdmin@@QAE@PBGH@Z
??1CDbProp@@QAE@XZ
??3CDbParameter@@SGXPAX@Z
?EnumerateFilesInDir@CiStorage@@SGXPBGAAVCEnumString@@@Z
?Unmap@CRcovStrmTrans@@IAEXW4DataCopyNum@CRcovStorageHdr@@@Z
??1CContentRestriction@@QAE@XZ
?FindPropid@CPidLookupTable@@QAEHABVCFullPropSpec@@AAKH@Z
?IsCIStarted@CMachineAdmin@@QAEHXZ
?SetBSTR@CStorageVariant@@QAEXPAGI@Z
??1?$XPtr@VCDbProjectListAnchor@@@@QAE@XZ
??0CSvcQuery@@QAE@PBGPAUIDBProperties@@@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 667B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ