Static task
static1
Behavioral task
behavioral1
Sample
5695ccb9dc8db67b61a15742dcc3a4c1efe945be2f11c25a88cbf78513e3f2b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5695ccb9dc8db67b61a15742dcc3a4c1efe945be2f11c25a88cbf78513e3f2b9.exe
Resource
win10v2004-20221111-en
General
-
Target
5695ccb9dc8db67b61a15742dcc3a4c1efe945be2f11c25a88cbf78513e3f2b9
-
Size
184KB
-
MD5
7ed15306689a6ce28d857a696fa28550
-
SHA1
749f3e283781ea263a5f15136455e49ac72db652
-
SHA256
5695ccb9dc8db67b61a15742dcc3a4c1efe945be2f11c25a88cbf78513e3f2b9
-
SHA512
dc77a6b22f8cc8d48fce8f21239dc8f6e460748443ca98331afaee09d48f9f9f8ea90de5bd191678af45c27a4f75435b2b82016c3cc029d84d1c69001fac4027
-
SSDEEP
3072:A35if+jskj+la75P/0F5lQ5Qz8hNi4yaGCERgzvOP:siGbwa75Ps5KQzkNfJP6P
Malware Config
Signatures
Files
-
5695ccb9dc8db67b61a15742dcc3a4c1efe945be2f11c25a88cbf78513e3f2b9.exe windows x86
aefc4cf63f955099f5455318bb357a0b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetUpdateRgn
EnumChildWindows
SendMessageW
DestroyAcceleratorTable
LoadImageW
AnimateWindow
SetWindowTextW
InvertRect
DrawIconEx
DlgDirSelectComboBoxExW
CreateIconIndirect
DrawFocusRect
ArrangeIconicWindows
opengl32
glColor3f
glVertex3f
kernel32
TlsSetValue
CompareStringW
HeapSize
LoadLibraryW
IsProcessorFeaturePresent
RtlUnwind
LCMapStringW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LocalFree
LocalAlloc
HeapSetInformation
GlobalUnfix
GlobalGetAtomNameW
CancelDeviceWakeupRequest
FillConsoleOutputCharacterA
ReadConsoleInputW
SetEnvironmentVariableA
CreateNamedPipeW
InterlockedDecrement
InterlockedIncrement
GetTimeFormatA
GetDateFormatA
GetLastError
HeapReAlloc
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
IsValidCodePage
Sleep
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
GetTimeZoneInformation
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ