Static task
static1
Behavioral task
behavioral1
Sample
980df3a28d3bcb00ef7c434f42e92377ed485e190a9035c86603ab3a29ba39cd.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
980df3a28d3bcb00ef7c434f42e92377ed485e190a9035c86603ab3a29ba39cd.exe
Resource
win10v2004-20231023-en
General
-
Target
980df3a28d3bcb00ef7c434f42e92377ed485e190a9035c86603ab3a29ba39cd
-
Size
3.6MB
-
MD5
433b3a2292d37485f5f98427a65ab162
-
SHA1
32a1794b1882f3a0ca7fcbbdd6cd874af7aa8ce6
-
SHA256
980df3a28d3bcb00ef7c434f42e92377ed485e190a9035c86603ab3a29ba39cd
-
SHA512
e905e84958110ae75c536778ba7833d99a4a6c5d6400d5f9472a7faac4c2be4e2b5730388700b59574c673ee17e67ea5f1a3d2583d7e813aaae4bc3749b3d207
-
SSDEEP
49152:Yc48egvHUOVDyKbE1zYUkHP+es+FqJ5c6FDZnrGQPafCN4O:Y4eBQDZbLUkHP+7DrGQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 980df3a28d3bcb00ef7c434f42e92377ed485e190a9035c86603ab3a29ba39cd
Files
-
980df3a28d3bcb00ef7c434f42e92377ed485e190a9035c86603ab3a29ba39cd.exe windows:6 windows x86 arch:x86
c573a169c3c7a2cf66b7f0a553f14c17
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetEvent
GetSystemInfo
WriteConsoleW
SetEndOfFile
HeapSize
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
SetStdHandle
Sleep
CreateThread
TerminateProcess
Process32Next
InitializeCriticalSection
HeapReAlloc
CreateProcessW
GetExitCodeProcess
GetTimeZoneInformation
GetFileAttributesExW
FlushFileBuffers
CreateDirectoryW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetStdHandle
GetFileType
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedPushEntrySList
GetPriorityClass
RtlUnwind
SetFilePointerEx
WaitNamedPipeW
PeekNamedPipe
GetModuleFileNameW
SetLastError
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
CreateEventW
ResetEvent
InitializeCriticalSectionAndSpinCount
CreateFileW
IsProcessorFeaturePresent
HeapValidate
GetCPInfo
CompareStringEx
TryEnterCriticalSection
GetModuleHandleW
SetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose
GetModuleHandleA
VirtualProtect
GetCurrentDirectoryA
lstrlenA
GetPrivateProfileStringA
DeleteFileA
GetSystemTimeAsFileTime
GetModuleFileNameA
GlobalFree
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
OpenProcess
Process32First
CheckRemoteDebuggerPresent
GetLastError
ReadProcessMemory
GetCurrentProcess
Module32Next
CloseHandle
Module32First
CreateToolhelp32Snapshot
GetTickCount
GetCurrentDirectoryW
MultiByteToWideChar
HeapFree
GetProcessHeap
WakeConditionVariable
InitializeConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
InitializeCriticalSectionEx
LCMapStringEx
DecodePointer
EncodePointer
GetStringTypeW
GetExitCodeThread
WaitForSingleObjectEx
QueryPerformanceFrequency
QueryPerformanceCounter
ReleaseSemaphore
GetLocaleInfoA
CompareStringA
WideCharToMultiByte
lstrlenW
GlobalLock
GlobalUnlock
FreeLibrary
GetVersionExA
GetSystemDirectoryA
WriteFile
ReadFile
OutputDebugStringA
LoadLibraryA
GetProcAddress
GetCurrentThreadId
SetUnhandledExceptionFilter
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetFileSize
CreateFileA
GlobalAlloc
RemoveDirectoryA
CreateDirectoryA
HeapAlloc
GetCurrentProcessId
VerifyVersionInfoW
RaiseException
VerSetConditionMask
user32
RegisterClassExA
DefWindowProcA
DestroyIcon
FlashWindowEx
LoadImageA
SetWindowPos
LoadIconA
RegisterClassA
GetMenu
AdjustWindowRectEx
GetWindowLongA
SetWindowLongA
LoadCursorA
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
CloseClipboard
CreateWindowExA
CharNextW
CharNextExA
CharPrevExA
FindWindowA
ScreenToClient
GetCursorPos
PostQuitMessage
GetAsyncKeyState
SetRect
OffsetRect
GetKeyState
ClientToScreen
PeekMessageA
ReleaseDC
FillRect
GetDC
InvalidateRect
UnregisterClassA
DestroyWindow
IsWindow
GetClipboardData
DestroyCursor
ShowCursor
SetCursor
SetCursorPos
SetCapture
ReleaseCapture
ChangeDisplaySettingsA
GetCapture
GetSystemMetrics
LoadStringA
MessageBoxA
MoveWindow
SetFocus
SystemParametersInfoA
ShowWindow
GetClientRect
UpdateWindow
gdi32
DeleteDC
TextOutW
CreateDIBSection
TextOutA
SetTextColor
SetBkColor
SelectObject
GetTextExtentPoint32W
CreateFontIndirectA
EnumFontFamiliesExA
GetStockObject
CreateSolidBrush
DeleteObject
StretchBlt
GetTextExtentPoint32A
CreateCompatibleDC
SetBkMode
GetCharABCWidthsFloatW
shell32
SHGetSpecialFolderPathA
SetCurrentProcessExplicitAppUserModelID
SHGetFolderPathA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
winmm
timeEndPeriod
timeGetTime
timeBeginPeriod
timeGetDevCaps
d3d8
Direct3DCreate8
python27
Py_InitModule4
PyModule_AddIntConstant
PyErr_SetString
PyExc_RuntimeError
PyTuple_GetItem
PyInt_AsLong
PyList_New
PyString_FromString
PyList_Append
PyTuple_Size
PyDict_GetItemString
PyLong_AsLong
PyTuple_New
PyTuple_SetItem
PyDict_New
PyDict_SetItemString
PyList_SetItem
PyList_GetItem
PyArg_ParseTuple
PyList_Size
_PyInt_AsInt
PyLong_FromLongLong
PyDict_SetItem
PyDict_Size
PyDict_Next
PyImport_ImportModule
PyModule_AddStringConstant
PyString_InternFromString
PyObject_GetAttr
PyCallable_Check
PyLong_AsLongLong
PyFloat_AsDouble
Py_BuildValue
PyErr_Clear
PyErr_BadArgument
PyErr_Print
PyObject_CallObject
PyNumber_Check
_Py_NoneStruct
PyModule_GetDict
PyErr_Fetch
Py_SetProgramName
Py_Initialize
Py_Finalize
PyRun_StringFlags
PyImport_AddModule
PyString_AsString
PyObject_GetAttrString
imm32
ImmGetIMEFileNameA
ImmIsIME
ImmNotifyIME
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
libcef
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_multimap_free
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_browser_host_create_browser
cef_command_line_get_global
cef_string_map_free
cef_string_map_alloc
cef_v8context_get_current_context
cef_log
cef_api_hash
cef_string_utf8_to_utf16
cef_string_utf16_clear
cef_string_utf8_clear
cef_string_utf16_to_utf8
cef_string_utf16_cmp
cef_string_utf16_set
cef_string_userfree_utf16_free
cef_string_list_alloc
cef_string_list_free
cef_register_extension
cef_execute_process
cef_initialize
cef_shutdown
cef_run_message_loop
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
devil
ilInit
ilSetPixels
ilTexImage
ilSave
ilShutDown
ilDeleteImages
ilCopyPixels
ilConvertImage
ilBindImage
ilGetInteger
ilLoad
ilOriginFunc
ilEnable
ilGenImages
granny2
_GrannyGetMeshVertexCount@4
_GrannyGetTotalTypeSize@4
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetWorldPose4x4@8
_GrannyFreeWorldPose@4
_GrannyNewWorldPose@4
_GrannyFindBoneByName@12
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFreeMeshBinding@4
_GrannyNewMeshBinding@12
_GrannyFreeModelInstance@4
_GrannyInstantiateModel@4
_GrannyFreeControlOnceUnused@4
_GrannyFreeLocalPose@4
_GrannyCompleteControlAt@8
_GrannyUpdateModelMatrix@20
_GrannySampleModelAnimationsAccelerated@20
_GrannyFreeCompletedModelControls@4
_GrannySetModelClock@8
_GrannyGetSourceSkeleton@4
_GrannyGetFileInfo@4
_GrannyFreeFile@4
_GrannyFreeFileSection@8
_GrannyReadEntireFileFromMemory@8
_GrannyConvertSingleObject@20
_GrannyMeshIsRigid@4
_GrannyGetMaterialTextureByType@8
_GrannySetLogCallback@4
_GrannyControlIsComplete@4
_GrannyFreeControlIfComplete@4
_GrannyGetControlLoopCount@4
_GrannySetControlLoopCount@8
_GrannyGetControlSpeed@4
GrannyPNT332VertexType
_GrannyDeformVertices@24
_GrannySetControlSpeed@8
_GrannyGetControlLocalDuration@4
_GrannySetControlEaseIn@8
_GrannySetControlEaseInCurve@28
_GrannySetControlEaseOut@8
_GrannySetControlEaseOutCurve@28
_GrannyGetControlRawLocalClock@4
_GrannySetControlRawLocalClock@8
_GrannyPlayControlledAnimation@12
_GrannyGetMeshTriangleGroupCount@4
_GrannyGetMeshTriangleGroups@4
_GrannyGetMeshVertexType@4
_GrannyCopyMeshVertices@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshIndices@12
_GrannyNewMeshDeformer@16
_GrannyFreeMeshDeformer@4
_GrannyGetMeshIndexCount@4
_GrannyFindMatchingMember@16
_GrannyFreeControl@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyNewLocalPose@4
mss32
_AIL_auto_update_3D_position@8
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_end_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_start_3D_sample@4
_AIL_release_3D_sample_handle@4
_AIL_allocate_3D_sample_handle@4
_AIL_sample_volume_pan@12
_AIL_sample_status@4
_AIL_set_sample_loop_count@8
_AIL_set_sample_volume_pan@12
_AIL_end_sample@4
_AIL_resume_sample@4
_AIL_stop_sample@4
_AIL_start_sample@4
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_last_error@0
_AIL_stream_status@4
_AIL_set_stream_loop_count@8
_AIL_stream_volume_levels@12
_AIL_set_stream_volume_levels@12
_AIL_pause_stream@8
_AIL_start_stream@4
_AIL_close_stream@4
_AIL_set_redist_directory@4
_AIL_shutdown@0
_AIL_startup@0
_AIL_set_3D_orientation@28
_AIL_set_3D_velocity@20
_AIL_set_3D_position@16
_AIL_close_3D_listener@4
_AIL_open_3D_listener@4
_AIL_close_3D_provider@4
_AIL_open_3D_provider@4
_AIL_enumerate_3D_providers@12
_AIL_close_digital_driver@4
_AIL_open_stream@12
_AIL_open_digital_driver@16
_AIL_file_type@8
_AIL_decompress_ADPCM@12
_AIL_decompress_ASI@24
_AIL_WAV_info@8
_AIL_set_file_callbacks@16
_AIL_file_read@8
_AIL_mem_free_lock@4
speedtreert
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
??1STextures@CSpeedTreeRT@@QAE@XZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
dinput8
DirectInput8Create
ws2_32
WSAStartup
WSACleanup
socket
send
select
recv
ioctlsocket
connect
closesocket
__WSAFDIsSet
inet_addr
gethostbyname
WSAGetLastError
htons
ddraw
DirectDrawCreate
advapi32
OpenProcessToken
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
LookupPrivilegeValueA
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyA
oleaut32
VariantClear
SysFreeString
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 484KB - Virtual size: 483KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 152KB - Virtual size: 642KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 259KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ