Static task
static1
Behavioral task
behavioral1
Sample
985dadbdf66da90fb29d243a16938e9e1f6890c24376dca777dc83a9d85e7e30.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
985dadbdf66da90fb29d243a16938e9e1f6890c24376dca777dc83a9d85e7e30.exe
Resource
win10v2004-20220812-en
General
-
Target
985dadbdf66da90fb29d243a16938e9e1f6890c24376dca777dc83a9d85e7e30
-
Size
61KB
-
MD5
cdea158cce9abdd451ca68ec5cf3b0a8
-
SHA1
3a3df0e3fb2a23ddd699d5fe88ec2a1fd0cb75ee
-
SHA256
985dadbdf66da90fb29d243a16938e9e1f6890c24376dca777dc83a9d85e7e30
-
SHA512
ee0c5e35cfd2ff642a6142a78ffd4339718a8c8387d853a1efa3bb05181b2f387b9c60eb099cae0c7b088444e433d0d64305fe3322e38143d74570c1c5db3e6c
-
SSDEEP
768:5+79P47+g7obL0kTuh0iz3SAjZ3paUe7LuHuUPkijIOxEDKAn+G5EmfRldrdboXY:5v7+LiXxpILkPPG+elddUI
Malware Config
Signatures
Files
-
985dadbdf66da90fb29d243a16938e9e1f6890c24376dca777dc83a9d85e7e30.exe windows x86
cb6713719c1f82c59e00b85c796d9d8c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetAltTabInfoA
IsRectEmpty
ScrollDC
DefFrameProcW
GetDlgCtrlID
ReplyMessage
SetMessageQueue
CreateWindowStationA
DdeNameService
wsprintfW
ClipCursor
UnpackDDElParam
wininet
InternetGetConnectedState
InternetQueryOptionA
InternetGetLastResponseInfoW
GetUrlCacheEntryInfoExA
HttpSendRequestA
opengl32
glEvalMesh1
glColor4sv
glGetClipPlane
glNormal3fv
glTexParameterf
glTexCoord4d
glTexGenf
kernel32
GetFileType
CreateFileW
CloseHandle
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
MultiByteToWideChar
WriteConsoleW
SetStdHandle
FlushFileBuffers
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetConsoleMode
GetConsoleCP
SetFilePointer
Sleep
LoadLibraryW
DeleteFileW
SetMessageWaitingIndicator
GlobalFree
LocalShrink
lstrcmpW
GetLastError
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapCreate
EncodePointer
DecodePointer
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ