Static task
static1
Behavioral task
behavioral1
Sample
f9e51a580e02e1d1a5a39fb65f381448ac54adc1346230e03c95faadbf7ea583.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9e51a580e02e1d1a5a39fb65f381448ac54adc1346230e03c95faadbf7ea583.exe
Resource
win10v2004-20221111-en
General
-
Target
f9e51a580e02e1d1a5a39fb65f381448ac54adc1346230e03c95faadbf7ea583
-
Size
57KB
-
MD5
8376f3e2999c34b75c153a86122434aa
-
SHA1
dd5e2c0d67a28b2747cc09987387443a27b69bfd
-
SHA256
f9e51a580e02e1d1a5a39fb65f381448ac54adc1346230e03c95faadbf7ea583
-
SHA512
de1b03c0a1b21ba30a3b0391d0d52f6974748285bb33279922ba4da8e71b4e83aa704a115fc5338ac19780454c36f27072a340c790c3a28891672427b68c07cd
-
SSDEEP
1536:UcgQRtbXg0uHyGY26dgI/5HPE4+l0LnLa4JAj:Ue3XtuHK5ga5HcP0zWoAj
Malware Config
Signatures
Files
-
f9e51a580e02e1d1a5a39fb65f381448ac54adc1346230e03c95faadbf7ea583.exe windows x86
a3c560507227e518b03a04d887fdd511
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
glu32
gluEndTrim
gluBeginTrim
gluLoadSamplingMatrices
gluProject
gluPartialDisk
gluDeleteTess
gluQuadricDrawStyle
gluNewNurbsRenderer
gluTessBeginContour
gluEndSurface
gluBuild1DMipmaps
gluTessVertex
gluQuadricNormals
gluEndCurve
gluNurbsCallback
gluTessCallback
gluQuadricCallback
gluDeleteNurbsRenderer
gluErrorString
gluBuild2DMipmaps
msvcp60
??Dstd@@YA?AV?$complex@M@0@ABV10@0@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??_7bad_cast@std@@6B@
?id@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
wcrtomb
?in_avail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??4?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?underflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?infinity@?$numeric_limits@M@std@@SAMXZ
??4?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_filebuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??_7__non_rtti_object@std@@6B@
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIXZ
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??4_Locinfo@std@@QAEAAV01@ABV01@@Z
??_F?$messages@G@std@@QAEXXZ
?flags@ios_base@std@@QBEHXZ
crtdll
_findfirst
_open_osfhandle
log10
memset
_fputwchar
fputwc
tanh
_mbctombb
wcstol
sinh
_mbslen
swscanf
_mbsnccnt
perror
_fullpath
iswalnum
_mbclen
_getdcwd
ungetwc
_snwprintf
iswprint
ceil
atol
iswupper
ungetc
mbtowc
msls31
LsdnSubmitSublines
LsdnQueryPenNode
LsSetExpansion
LsForceBreakSubline
LsGetReverseLsimethods
LssbFIsSublineEmpty
LsExpandSubline
LsdnGetCurTabInfo
LsdnDistribute
LssbGetObjDimSubline
LssbFDonePresSubline
LsdnFinishByPen
LsGetRubyLsimethods
LsQueryLineDup
LsdnSkipCurTab
LsdnGetDup
LsGetTatenakayokoLsimethods
LssbGetDurTrailWithPensInSubline
LsdnFinishDeleteAll
LsdnGetFormatDepth
LssbGetVisibleDcpInSubline
LsdnResolvePrevTab
LsGetLineDur
LsCreateSubline
LsQueryFLineEmpty
msvcrt20
?sputc@streambuf@@QAEHH@Z
_ismbcalnum
?lock@ios@@QAAXXZ
?rdstate@ios@@QBEHXZ
sprintf
??_Gfstream@@UAEPAXI@Z
strstr
fmod
_wspawnlp
_tcsinc
labs
iswctype
??_8ostream_withassign@@7B@
??1ifstream@@UAE@XZ
?open@ifstream@@QAEXPBDHH@Z
??_7streambuf@@6B@
_wspawnve
?flags@ios@@QAEJJ@Z
_tzname
iswspace
??0ifstream@@QAE@H@Z
??_Eios@@UAEPAXI@Z
??3@YAXPAX@Z
__wgetmainargs
kernel32
WaitForDebugEvent
HeapCreate
WriteConsoleOutputCharacterA
LoadLibraryA
FlushInstructionCache
WideCharToMultiByte
lstrcatA
SetHandleInformation
SetSystemTime
MapViewOfFileEx
UnregisterConsoleIME
SetClientTimeZoneInformation
WriteProfileSectionW
CreateSemaphoreW
AttachConsole
GetPrivateProfileSectionA
CreateRemoteThread
GetConsoleTitleA
VirtualAlloc
ConvertDefaultLocale
GetProcAddress
LCMapStringW
SetWaitableTimer
GetCommModemStatus
GetConsoleCommandHistoryW
InterlockedExchange
Thread32Next
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ