Static task
static1
Behavioral task
behavioral1
Sample
d7ac36a5f6a5f9f417c15f039613e21c745f7ede6d9314fd29f17a2397e6e71f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d7ac36a5f6a5f9f417c15f039613e21c745f7ede6d9314fd29f17a2397e6e71f.exe
Resource
win10v2004-20221111-en
General
-
Target
d7ac36a5f6a5f9f417c15f039613e21c745f7ede6d9314fd29f17a2397e6e71f
-
Size
4.5MB
-
MD5
a31556097e76b9082d315e468a353fd8
-
SHA1
a3fc6113edb3a4b08fde524b347078926b05cdb8
-
SHA256
d7ac36a5f6a5f9f417c15f039613e21c745f7ede6d9314fd29f17a2397e6e71f
-
SHA512
9be549ad52fd85bfd315eee2233a4311c402848d3b4c95970b1023832c0d8d9b772e0c52d25238d72b4cfc34787d19a158cda3c2a08a7a1299a8fd439b1c4e4f
-
SSDEEP
98304:h8y2dY+3mVHlYd26xOMxjE2gQc0xTJpgwVmr6WaxuK9JggpxAIDp+GMmEXmEbg3T:vzX6A32BagQogbg3cA+0ex7Zo
Malware Config
Signatures
Files
-
d7ac36a5f6a5f9f417c15f039613e21c745f7ede6d9314fd29f17a2397e6e71f.exe windows x86
b1703ee240ea5c9a9fdf8c3b16499fc5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
strncpy
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
clusapi
ClusterNodeCloseEnum
comctl32
FlatSB_GetScrollInfo
comdlg32
GetFileTitleW
gdi32
SetMiterLimit
GetCharWidthA
StartFormPage
GetTextCharsetInfo
glu32
gluTessBeginPolygon
kernel32
GetStartupInfoA
GetConsoleWindow
GetLastError
SetFileApisToOEM
GetModuleHandleA
SetThreadContext
GetThreadContext
VirtualProtect
GetProcAddress
LoadLibraryA
ReadFile
mpr
WNetGetConnectionW
msacm32
acmDriverClose
acmDriverOpen
oleaut32
VarDecFromR8
VarUI1FromStr
VarBstrFromR4
opengl32
glVertex4s
glGetTexLevelParameteriv
glGetLightiv
glDisableClientState
rpcns4
RpcNsMgmtEntryInqIfIdsW
RpcNsGroupMbrInqNextW
shlwapi
SHRegOpenUSKeyW
user32
PeekMessageA
ScreenToClient
DispatchMessageA
GetMessageA
DdeAccessData
SetTimer
PaintDesktop
GetWindowRgn
CharToOemBuffW
CloseDesktop
winmm
waveOutBreakLoop
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 24.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SELIGER Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ