Static task
static1
Behavioral task
behavioral1
Sample
3fa21c0adafce135b2c9dd3f1110dfe5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fa21c0adafce135b2c9dd3f1110dfe5.exe
Resource
win10v2004-20231215-en
General
-
Target
3fa21c0adafce135b2c9dd3f1110dfe5
-
Size
24KB
-
MD5
3fa21c0adafce135b2c9dd3f1110dfe5
-
SHA1
263b6755d70917ad918e58de5c92857bcb4831f1
-
SHA256
15b74389a508b7cb5d38363546ca70d2d69ff95933d7f633265d7391de17d628
-
SHA512
6da1489aeb1890062b63415619df3ff7e9671ec98c6164a6864bf79c679c2a2632bfeca47e7c362dfe6fcd84a21d149f40ee3f6162d6f0ce784d72755cecbfe9
-
SSDEEP
384:Mec+b2dMPoU2IdjMO1tE2t11vy1VVc+vQEEairV3adwj0DK:MecDyvt91vqVcI453wm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fa21c0adafce135b2c9dd3f1110dfe5
Files
-
3fa21c0adafce135b2c9dd3f1110dfe5.exe windows:5 windows x86 arch:x86
531a944b43cee7b208e82f40ca6dcaae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glInterleavedArrays
glNormalPointer
glGetPolygonStipple
glStencilFunc
GlmfPlayGlsRecord
glPolygonOffset
glStencilMask
glPushClientAttrib
glTexCoord3dv
glVertex3s
wglGetDefaultProcAddress
glTexCoord1i
glColor4ui
glTexCoord3s
glTexCoord2iv
glBegin
glAlphaFunc
dbnetlib
ConnectionOpen
ConnectionCheckForData
ConnectionOpenW
ConnectionRead
InitSession
ConnectionObjectSize
GenClientContext
ConnectionStatus
ConnectionGetSvrUser
TermSession
ConnectionWriteOOB
InitSSPIPackage
msvcp60
?xalloc@ios_base@std@@SAHXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPAGII@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
?norm@std@@YAOABV?$complex@O@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
?seekp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@JW4seekdir@ios_base@2@@Z
?classic@locale@std@@SAABV12@XZ
?_Xran@std@@YAXXZ
_FNan
??8std@@YA_NABOABV?$complex@O@0@@Z
??_F?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
?freeze@strstreambuf@std@@QAEX_N@Z
?copyfmt@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEAAV12@ABV12@@Z
??_8?$basic_fstream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1bad_exception@std@@UAE@XZ
?round_error@?$numeric_limits@F@std@@SAFXZ
wctype
??0?$_Complex_base@M@std@@QAE@ABM0@Z
??4?$complex@N@std@@QAEAAV01@ABN@Z
??Kstd@@YA?AV?$complex@N@0@ABNABV10@@Z
??1?$basic_fstream@GU?$char_traits@G@std@@@std@@UAE@XZ
?_Nomemory@std@@YAXXZ
?decimal_point@?$numpunct@G@std@@QBEGXZ
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
?_Nanv@?$_Ctr@O@std@@SAOO@Z
wctrans
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
kernel32
GetCurrentProcessId
DebugActiveProcessStop
GetTickCount
SetConsoleCursorMode
DuplicateHandle
WritePrivateProfileSectionA
GetVersionExW
GetProfileSectionW
ReplaceFileW
GetConsoleInputExeNameW
GetConsoleInputExeNameA
DeleteFiber
ChangeTimerQueueTimer
VirtualAlloc
GetEnvironmentStrings
SetConsoleCtrlHandler
IsBadHugeWritePtr
GetCurrentThreadId
GetDiskFreeSpaceW
QueryPerformanceCounter
SetThreadLocale
_lopen
msvcrt20
_mbcjistojms
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
_wfdopen
??0ostream@@QAE@PAVstreambuf@@@Z
__mb_cur_max
_mbschr
??0strstreambuf@@QAE@P6APAXJ@ZP6AXPAX@Z@Z
_CIsin
_adj_fpatan
_endthread
?setf@ios@@QAEJJJ@Z
??0fstream@@QAE@H@Z
??_7istrstream@@6B@
?sh_read@filebuf@@2HB
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 665B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 819B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ