Static task
static1
Behavioral task
behavioral1
Sample
0a821e3a01b99a55c3f949feb3da78aa2056bbb13a8bcbbba89bae86e6580d85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a821e3a01b99a55c3f949feb3da78aa2056bbb13a8bcbbba89bae86e6580d85.exe
Resource
win10v2004-20220901-en
General
-
Target
0a821e3a01b99a55c3f949feb3da78aa2056bbb13a8bcbbba89bae86e6580d85
-
Size
605KB
-
MD5
c52606695b08fb23ee9428a8b14aa48d
-
SHA1
418af746bc750bf55c6493d9284791bf2cd97da7
-
SHA256
0a821e3a01b99a55c3f949feb3da78aa2056bbb13a8bcbbba89bae86e6580d85
-
SHA512
5535b985081b58e39f21c540905afa2879bff80b37e8842b36a16ed4bd05517d96bf82672eacfc205c7bc6bb437dfd2e7823d4f3110f9df6ddb908a3b83e095a
-
SSDEEP
12288:aKs3fxZZ7KnfVXEGFWGDTKbjG4O16fvFBpip:anfNa9zWqmbq4Y6fvXpip
Malware Config
Signatures
Files
-
0a821e3a01b99a55c3f949feb3da78aa2056bbb13a8bcbbba89bae86e6580d85.exe windows x86
1d975600189678aa6c20b8ed876b70cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
GetFileType
GetTimeFormatW
ExpandEnvironmentStringsA
GetHandleInformation
GetVersion
GetShortPathNameA
FreeLibrary
lstrcatA
GetLogicalDriveStringsA
SetUnhandledExceptionFilter
SetMailslotInfo
GetCurrentThread
ReadConsoleOutputCharacterW
InterlockedExchange
EnumResourceNamesA
SetVolumeMountPointA
IsValidLocale
FindNextFileA
GetProcessHeap
GetUserDefaultLCID
GetSystemTime
GlobalGetAtomNameW
GetNumberOfConsoleInputEvents
GetVDMCurrentDirectories
EnumResourceNamesW
SetVolumeMountPointW
GetModuleHandleA
VirtualAlloc
GetProcAddress
GetLocalTime
LoadLibraryA
comctl32
ImageList_Destroy
_TrackMouseEvent
ImageList_LoadImageW
ord17
opengl32
glTexCoord3fv
glGetString
glClearStencil
glGetMapiv
glInterleavedArrays
glGetTexParameteriv
glIndexdv
wglCreateContext
wglDeleteContext
glColor3fv
wglMakeCurrent
glIsList
msvcrt
_mbsnextc
_mbsrev
_mbccpy
_yn
_mbschr
tolower
fseek
log
fread
sprintf
_iob
_getw
_safe_fdivr
_ismbcl2
fwrite
fputs
feof
fopen
_ismbstrail
_strupr
fsetpos
mktime
__threadid
_fmode
_mbspbrk
_heapmin
fclose
__lc_codepage
_mbctoupper
fputc
ftell
_heapwalk
_unlink
ferror
_CIsin
fwprintf
printf
memset
fprintf
Sections
.text Size: 584KB - Virtual size: 583KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE