Static task
static1
Behavioral task
behavioral1
Sample
711bf4c220d5a551d4245a3bda4d7d9ae484039be4c752c6e027ec2a8df3c7f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
711bf4c220d5a551d4245a3bda4d7d9ae484039be4c752c6e027ec2a8df3c7f7.exe
Resource
win10v2004-20220812-en
General
-
Target
711bf4c220d5a551d4245a3bda4d7d9ae484039be4c752c6e027ec2a8df3c7f7
-
Size
98KB
-
MD5
40240a016a28ff9a3f3e8c1c727ec905
-
SHA1
6a04b53f22012c15fbc671d367e40554c5923f69
-
SHA256
711bf4c220d5a551d4245a3bda4d7d9ae484039be4c752c6e027ec2a8df3c7f7
-
SHA512
a3e01303a28fff897be3e0feb17238d15789d024fb2c091b62a3f0f1e8c7444f07b79cb48154cf229dc86f5b758e47e3ad5b5accbcce742fa3c1fe53389982a8
-
SSDEEP
3072:bgxFnlmd1omfaRVJgd0/UypFLd+OqvsI:bgx1la0Je0/fpFLd+nP
Malware Config
Signatures
Files
-
711bf4c220d5a551d4245a3bda4d7d9ae484039be4c752c6e027ec2a8df3c7f7.exe windows x86
13a5e985c92b15fb584215dd553df975
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glColor4f
glRectd
glDisableClientState
glColor3ui
glTexGend
glTexCoord4iv
glLoadMatrixd
glFlush
glInterleavedArrays
glTexParameterfv
glCopyTexSubImage1D
glGetPointerv
glTexCoord2d
glTexCoord2i
glGetTexGendv
shlwapi
PathGetDriveNumberA
StrCpyW
StrDupW
PathIsSameRootW
PathAddExtensionW
StrToIntExA
SHQueryValueExW
SHRegDeleteUSValueW
StrPBrkW
StrCmpIW
StrChrW
kernel32
GetUserDefaultLangID
WaitForSingleObject
OpenMutexA
GetCPInfoExA
GetModuleHandleA
GetProcAddress
VirtualAlloc
GetLastError
GetFullPathNameA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
InitializeCriticalSection
GetCurrentDirectoryA
GetDriveTypeA
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
SetStdHandle
FlushFileBuffers
CloseHandle
CreateFileA
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeA
GetStringTypeW
SetEndOfFile
RaiseException
LCMapStringA
LCMapStringW
secur32
AcceptSecurityContext
CompleteAuthToken
EncryptMessage
FreeCredentialsHandle
ExportSecurityContext
ApplyControlToken
VerifySignature
MakeSignature
DeleteSecurityContext
DecryptMessage
ws2_32
listen
ntohs
connect
socket
shutdown
sendto
htons
select
htonl
getsockname
getservbyname
send
gethostbyname
setupapi
SetupDiGetWizardPage
SetupCommitFileQueueW
SetupDiInstallClassExW
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoW
SetupDiGetSelectedDevice
SetupCommitFileQueueA
SetupTerminateFileLog
SetupInitializeFileLogA
SetupRemoveFileLogEntryA
comdlg32
PageSetupDlgW
PrintDlgA
GetFileTitleA
FindTextA
FindTextW
PageSetupDlgA
PrintDlgW
ReplaceTextA
hlink
ord5
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ