Static task
static1
Behavioral task
behavioral1
Sample
6da65ecba6c6480518e88ae57a2531e5b7964362740ea0bd1fbc5f7e6bd1a584.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6da65ecba6c6480518e88ae57a2531e5b7964362740ea0bd1fbc5f7e6bd1a584.exe
Resource
win10v2004-20220901-en
General
-
Target
6da65ecba6c6480518e88ae57a2531e5b7964362740ea0bd1fbc5f7e6bd1a584
-
Size
638KB
-
MD5
92f92bd371caf80591c1d460733fa50b
-
SHA1
6d5e2aa51d0e54cf3aff47d9a53ac28cd7636358
-
SHA256
6da65ecba6c6480518e88ae57a2531e5b7964362740ea0bd1fbc5f7e6bd1a584
-
SHA512
6804a6fc212ca354938be66a37912e157a173e3e8a618ffe9522a398216c5c3423e186d2b9b8fdcfc812adb7b517665167be7bd02955fb010cbb760acc76c7aa
-
SSDEEP
12288:3kEeLZ5kvBmXZ+L80ZcePR0tdxBkHcX5ZFZDm67LV:eZ5sI8HR8PBkHcpZHV
Malware Config
Signatures
Files
-
6da65ecba6c6480518e88ae57a2531e5b7964362740ea0bd1fbc5f7e6bd1a584.exe windows x86
76c8b503cbc3b54309736d5db11b03e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetVersion
VirtualAlloc
WriteConsoleOutputW
CreateWaitableTimerA
GetProcAddress
GetTapeParameters
GetCommConfig
GetFileType
Sleep
GetSystemTimeAsFileTime
GlobalUnlock
GetLocalTime
GetModuleFileNameA
CreateEventA
_lwrite
IsDBCSLeadByteEx
FreeLibrary
ReadFileEx
ReadConsoleOutputAttribute
WriteConsoleOutputAttribute
DeleteAtom
IsValidLocale
GetHandleInformation
ExpungeConsoleCommandHistoryA
AddAtomA
QueryPerformanceCounter
LoadLibraryW
DuplicateConsoleHandle
GetSystemTime
opengl32
glReadBuffer
glOrtho
glIsList
glGetPolygonStipple
glEvalCoord2fv
glNormal3fv
glVertex4iv
glNormal3sv
glPixelMapusv
wglCreateContext
glColor3bv
glMatrixMode
glEdgeFlag
glPolygonOffset
wglMakeCurrent
glColor4dv
wglDeleteContext
glPushAttrib
glMultMatrixf
GlmfInitPlayback
glVertex4i
glColor3fv
glEnableClientState
glVertex3sv
glReadPixels
glVertex2i
glTexSubImage2D
glIsTexture
glGetLightfv
glIndexs
glRasterPos3fv
glRasterPos3s
glLightf
glTexCoord4fv
glDrawPixels
winmm
timeGetTime
mmTaskYield
PlaySoundW
mci32Message
mid32Message
mciDriverYield
midiOutGetDevCapsA
mciGetDriverData
auxGetDevCapsA
waveOutGetNumDevs
sndPlaySoundW
auxGetNumDevs
PlaySoundA
mciSetYieldProc
msvcrt
_mbslen
_mbsstr
_mbsnextc
_statusfp
_beginthread
_fstati64
_mbschr
fread
_abnormal_termination
__lconv_init
isxdigit
div
_acmdln
_cprintf
fseek
fgetpos
fputc
puts
system
feof
fputs
fwrite
_wtempnam
_cabs
_mbsncpy
ldexp
fopen
_spawnvp
__RTCastToVoid
_unlink
iswgraph
fsetpos
__p__iob
_ismbclower
ftell
__p__winmajor
ferror
_itow
_putw
_getch
_endthreadex
strftime
_kbhit
__lc_codepage
fwprintf
printf
sprintf
_CxxThrowException
_pwctype
fclose
_mbcjmstojis
floor
memcpy
fprintf
tolower
_wspawnvp
isalnum
_mbscspn
memset
Sections
.text Size: 616KB - Virtual size: 614KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE