Static task
static1
Behavioral task
behavioral1
Sample
0f85393456075f2fa64222bbfb95f904dab4fd477e641df6083327a2ea580a3c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0f85393456075f2fa64222bbfb95f904dab4fd477e641df6083327a2ea580a3c.exe
Resource
win10v2004-20230915-en
General
-
Target
0f85393456075f2fa64222bbfb95f904dab4fd477e641df6083327a2ea580a3c
-
Size
5.3MB
-
MD5
be02e7d300eac256099a41dedb43f11a
-
SHA1
ff0f1a8d5bbf98533f94115ac41723ff072b7972
-
SHA256
0f85393456075f2fa64222bbfb95f904dab4fd477e641df6083327a2ea580a3c
-
SHA512
c740ebc3557339cddcf8070aa847f1415dc09d1c905d9b1ea40a4b1d499e8645be3373347d47f3384709d2e79737b617b2dd7a0b8f2a6ef663ed291a199a2401
-
SSDEEP
98304:S+67nZBqB68BchiPzfqFm15ISaDX4YYLQWg3N6nFzOmVz9AzliAGMZEH7:VgnZBqBBch6fqFm15ISaDX2QWgUFzdHz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f85393456075f2fa64222bbfb95f904dab4fd477e641df6083327a2ea580a3c
Files
-
0f85393456075f2fa64222bbfb95f904dab4fd477e641df6083327a2ea580a3c.exe windows:6 windows x86
1683be8c7a2e791ed5055434dd69acb9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
ddraw
DirectDrawCreate
speedtreert
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?SetTime@CSpeedTreeRT@@SAXM@Z
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
mss32
_AIL_close_digital_driver@4
_AIL_open_stream@12
_AIL_open_digital_driver@16
_AIL_file_type@8
_AIL_enumerate_3D_providers@12
_AIL_decompress_ASI@24
_AIL_WAV_info@8
_AIL_set_file_callbacks@16
_AIL_file_read@8
_AIL_mem_free_lock@4
_AIL_open_3D_provider@4
_AIL_close_3D_provider@4
_AIL_open_3D_listener@4
_AIL_close_3D_listener@4
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_set_3D_orientation@28
_AIL_startup@0
_AIL_shutdown@0
_AIL_set_redist_directory@4
_AIL_close_stream@4
_AIL_start_stream@4
_AIL_pause_stream@8
_AIL_set_stream_volume_levels@12
_AIL_stream_volume_levels@12
_AIL_set_stream_loop_count@8
_AIL_stream_status@4
_AIL_last_error@0
_AIL_allocate_sample_handle@4
_AIL_release_sample_handle@4
_AIL_init_sample@4
_AIL_set_sample_file@12
_AIL_start_sample@4
_AIL_stop_sample@4
_AIL_resume_sample@4
_AIL_end_sample@4
_AIL_set_sample_volume_pan@12
_AIL_set_sample_loop_count@8
_AIL_sample_status@4
_AIL_sample_volume_pan@12
_AIL_allocate_3D_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_end_3D_sample@4
_AIL_set_3D_sample_file@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_loop_count@8
_AIL_3D_sample_status@4
_AIL_3D_sample_volume@4
_AIL_decompress_ADPCM@12
_AIL_auto_update_3D_position@8
ws2_32
gethostbyname
inet_addr
WSACleanup
WSAStartup
WSAGetLastError
socket
send
select
recv
ioctlsocket
connect
closesocket
__WSAFDIsSet
htons
d3d9
Direct3DCreate9
D3DPERF_EndEvent
d3dx9_43
D3DXLoadSurfaceFromSurface
D3DXGetImageInfoFromFileInMemory
D3DXCreateSphere
D3DXCreateCylinder
D3DXCreateMatrixStack
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovRH
D3DXVec3Project
D3DXMatrixLookAtRH
D3DXMatrixDeterminant
D3DXMatrixScaling
D3DXVec4Transform
D3DXMatrixRotationAxis
D3DXCreateTextureFromFileInMemoryEx
D3DXQuaternionRotationYawPitchRoll
D3DXVec3Transform
D3DXMatrixTranspose
D3DXGetFVFVertexSize
D3DXVec3TransformNormal
D3DXMatrixRotationX
D3DXMatrixInverse
D3DXMatrixRotationYawPitchRoll
D3DXVec2Normalize
D3DXQuaternionMultiply
D3DXQuaternionRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixTranslation
D3DXMatrixMultiply
D3DXMatrixRotationZ
D3DXVec3TransformCoord
D3DXVec3Normalize
D3DXCreateTexture
D3DXPlaneNormalize
dinput8
DirectInput8Create
discord_game_sdk
DiscordCreate
kernel32
DecodePointer
EncodePointer
GetModuleHandleW
GetSystemTimeAsFileTime
LCMapStringEx
InitializeCriticalSectionEx
GetCPInfo
GetTempPathW
GetStringTypeW
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
WaitForSingleObjectEx
GetModuleHandleExW
CompareStringEx
LoadLibraryExW
InitializeSListHead
InitializeCriticalSectionAndSpinCount
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InterlockedPushEntrySList
RaiseException
RtlUnwind
WriteConsoleW
ExitThread
FreeLibraryAndExitThread
GetDriveTypeW
ExitProcess
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetStdHandle
VirtualAlloc
VirtualProtect
VirtualQuery
SetFilePointerEx
FlushFileBuffers
GetTimeZoneInformation
LockFileEx
UnlockFileEx
HeapCompact
GetConsoleMode
ReadConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
HeapSize
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetConsoleMode
GetNumberOfConsoleInputEvents
ReadConsoleInputW
PeekConsoleInputA
FindFirstFileExW
GetCommandLineA
GetStdHandle
ExpandEnvironmentStringsW
GetACP
GetCommandLineW
SetConsoleCtrlHandler
ResetEvent
GetSystemDefaultLangID
GetCurrentDirectoryW
GetTickCount
MultiByteToWideChar
CloseHandle
GetLastError
GetCurrentProcess
GetCurrentProcessId
ReadProcessMemory
CreateToolhelp32Snapshot
Module32First
Module32Next
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
CreateEventA
Sleep
OpenProcess
GetSystemInfo
SetFileAttributesA
FindClose
FindFirstFileA
FindNextFileA
GlobalAlloc
GlobalUnlock
TerminateProcess
CreateProcessA
FormatMessageW
WideCharToMultiByte
LocalFree
CreateFileA
DeleteFileA
ReadFile
WriteFile
GetFileSizeEx
GetCurrentDirectoryA
lstrlenA
GetPrivateProfileStringA
MoveFileA
SetEnvironmentVariableW
SetCurrentDirectoryW
SetLastError
CreateProcessW
GetModuleFileNameW
CreateDirectoryA
RemoveDirectoryA
GetModuleFileNameA
GetFileSize
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
OutputDebugStringA
SetFilePointer
GetVersionExA
GetModuleHandleA
GetSystemDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalLock
lstrlenW
CompareStringA
GetLocaleInfoA
ReleaseSemaphore
QueryPerformanceCounter
GetSystemTime
QueryPerformanceFrequency
HeapAlloc
HeapFree
GetProcessHeap
SwitchToThread
CreateThread
FormatMessageA
GetFileAttributesA
GetFileInformationByHandle
OutputDebugStringW
GetConsoleCP
GetConsoleOutputCP
IsDBCSLeadByte
SetEndOfFile
GetFullPathNameA
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetEnvironmentVariableA
SetEnvironmentVariableA
SetCurrentDirectoryA
CreateDirectoryW
CreateFileW
DeleteFileW
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFileAttributesExA
GetFileAttributesExW
GetFileType
GetFullPathNameW
RemoveDirectoryW
SetFileAttributesW
SetFileTime
DuplicateHandle
CreatePipe
GetProcessTimes
GetExitCodeProcess
GetVersion
MoveFileW
SystemTimeToFileTime
GenerateConsoleCtrlEvent
user32
GetMenu
AdjustWindowRectEx
GetWindowLongA
SetWindowLongA
LoadCursorA
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyboardLayoutNameA
GetKeyboardLayout
GetClipboardData
CharNextW
CharNextExA
CharPrevExA
MonitorFromPoint
GetMonitorInfoA
CharPrevA
PeekMessageA
DestroyWindow
IsWindow
CreateWindowExA
RegisterClassA
DefWindowProcA
IsIconic
MessageBoxA
LoadStringA
GetWindowThreadProcessId
EnumWindows
UpdateWindow
MoveWindow
GetSystemMetrics
ChangeDisplaySettingsA
ReleaseCapture
SetCapture
GetCapture
ShowWindow
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetCursorPos
LoadImageA
DestroyCursor
SetCursor
ShowCursor
GetKeyState
SystemParametersInfoA
LoadIconA
FindWindowA
WindowFromPoint
ScreenToClient
GetCursorPos
SetWindowPos
FlashWindowEx
PostQuitMessage
OffsetRect
SetRect
FillRect
ClientToScreen
GetClientRect
InvalidateRect
ReleaseDC
GetDC
GetAsyncKeyState
gdi32
GetPixel
TextOutA
CreateDIBSection
SetBkMode
DeleteDC
CreateCompatibleDC
TextOutW
SetTextColor
SetBkColor
SelectObject
GetTextExtentPoint32W
GetCharABCWidthsFloatW
CreateFontIndirectA
GetStockObject
EnumFontFamiliesExA
StretchBlt
DeleteObject
CreateSolidBrush
GetDeviceCaps
GetTextExtentPoint32A
shell32
ShellExecuteW
SHGetSpecialFolderPathA
ShellExecuteA
SetCurrentProcessExplicitAppUserModelID
ole32
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
SysFreeString
advapi32
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA
RegSetValueA
RegQueryValueExA
RegSaveKeyA
RegQueryValueA
RegQueryInfoKeyA
RegLoadKeyA
RegFlushKey
RegEnumValueA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegConnectRegistryA
CryptReleaseContext
winmm
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
timeGetTime
imm32
ImmGetIMEFileNameA
ImmIsIME
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmGetConversionStatus
ImmSetConversionStatus
ImmGetOpenStatus
ImmNotifyIME
iphlpapi
GetAdaptersInfo
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 777KB - Virtual size: 777KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 230KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 231KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ