Static task
static1
Behavioral task
behavioral1
Sample
4f513a387cc3abb1cfb494d02540078cbcee8718f16d14cfefc7d3889d1f3019.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4f513a387cc3abb1cfb494d02540078cbcee8718f16d14cfefc7d3889d1f3019.exe
Resource
win10v2004-20221111-en
General
-
Target
4f513a387cc3abb1cfb494d02540078cbcee8718f16d14cfefc7d3889d1f3019
-
Size
833KB
-
MD5
f03b4201a5588635501da25f0c75fdfd
-
SHA1
c4078e6b8ce971cd541298f5cbf14beee7e6e07e
-
SHA256
4f513a387cc3abb1cfb494d02540078cbcee8718f16d14cfefc7d3889d1f3019
-
SHA512
0fd931817a1c25299f8ac4cb265b2e68b3825c4d2adb82e933a746c85408de493fb391aff43f36346df7abda4a98ab2a29bb90bbc9efb88bb0affe469d6a0fd0
-
SSDEEP
24576:mksJkQi9wJ+kQd6UUJXrXruFYW0xUcMIHmol:mksJxi7kQ4UUJXrXcRVo
Malware Config
Signatures
Files
-
4f513a387cc3abb1cfb494d02540078cbcee8718f16d14cfefc7d3889d1f3019.exe windows x86
a371f96c43e038d86c8fd78a7efa6a35
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
dinput8
DirectInput8Create
ddraw
DirectDrawCreateEx
dsound
ord11
avifil32
AVISaveOptions
winmm
timeSetEvent
opengl32
glDeleteTextures
ws2_32
closesocket
user32
GetDlgCtrlID
gdi32
StretchBlt
shell32
DragFinish
comdlg32
GetSaveFileNameA
shlwapi
PathCompactPathA
oleaut32
SysFreeString
Sections
.text Size: 774KB - Virtual size: 40.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE