Static task
static1
Behavioral task
behavioral1
Sample
63f6c09b092935e907472421de31ab941683543c418e4da367a4da6371c5924c.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63f6c09b092935e907472421de31ab941683543c418e4da367a4da6371c5924c.exe
Resource
win10v2004-20240802-en
General
-
Target
63f6c09b092935e907472421de31ab941683543c418e4da367a4da6371c5924c
-
Size
249KB
-
MD5
49e04038b6bcc18300d1075c5c7a7505
-
SHA1
e42eac9fbe2eed7d974c1aa5d07b1cce6951d194
-
SHA256
63f6c09b092935e907472421de31ab941683543c418e4da367a4da6371c5924c
-
SHA512
f4199db3252bb0ff48a7c40dea3cef1343f66e5991350eb9934fc15e78bfbaa8d92b5eb3967e8670ec2fa5b4ad779b699e5a4dfe8600b433373e2abf053ac552
-
SSDEEP
3072:rv0KpaMBe5G0+RVwbMA87Q5O5u6ouve7Llp/OJulf2a7BVFpqEFgI:L0w+5b2VOM57m0uce7xX2a7emgI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63f6c09b092935e907472421de31ab941683543c418e4da367a4da6371c5924c
Files
-
63f6c09b092935e907472421de31ab941683543c418e4da367a4da6371c5924c.exe windows:4 windows x86 arch:x86
51a19f4e5c3181539d2a9e5d6e86c303
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
sdl2
SDL_CreateRenderer
SDL_CreateTexture
SDL_CreateTextureFromSurface
SDL_CreateWindow
SDL_Delay
SDL_DestroyRenderer
SDL_DestroyTexture
SDL_DestroyWindow
SDL_DisableScreenSaver
SDL_FreeSurface
SDL_GetCurrentDisplayMode
SDL_GetCurrentVideoDriver
SDL_GetError
SDL_GetNumRenderDrivers
SDL_GetNumVideoDisplays
SDL_GetRenderDriverInfo
SDL_GetTicks
SDL_Init
SDL_JoystickClose
SDL_JoystickGetGUID
SDL_JoystickGetGUIDString
SDL_JoystickInstanceID
SDL_JoystickName
SDL_JoystickNameForIndex
SDL_JoystickOpen
SDL_NumJoysticks
SDL_PollEvent
SDL_QueryTexture
SDL_Quit
SDL_RaiseWindow
SDL_RenderClear
SDL_RenderCopyEx
SDL_RenderDrawRect
SDL_RenderFillRect
SDL_RenderPresent
SDL_RenderSetLogicalSize
SDL_SetHint
SDL_SetMainReady
SDL_SetRenderDrawBlendMode
SDL_SetRenderDrawColor
SDL_ShowCursor
SDL_ShowWindow
SDL_UpdateYUVTexture
SDL_iconv_string
SDL_isspace
SDL_malloc
SDL_wcslen
sdl2_image
IMG_Init
IMG_Load
sdl2_ttf
TTF_CloseFont
TTF_Init
TTF_OpenFont
TTF_Quit
TTF_RenderText_Blended
TTF_RenderText_Blended_Wrapped
avcodec-56
av_free_packet
avcodec_alloc_context3
avcodec_close
avcodec_copy_context
avcodec_decode_video2
avcodec_find_decoder
avcodec_free_context
avcodec_open2
avformat-56
av_read_frame
av_register_all
avformat_close_input
avformat_find_stream_info
avformat_open_input
avutil-54
av_frame_alloc
av_frame_free
libglib-2.0-0
g_assertion_message_expr
g_date_time_new_from_unix_local
g_date_time_unref
g_error_free
g_file_get_contents_utf8
g_file_set_contents
g_file_test_utf8
g_free
g_get_current_dir_utf8
g_get_user_config_dir
g_hash_table_destroy
g_hash_table_get_keys
g_hash_table_insert
g_hash_table_lookup
g_hash_table_new_full
g_hash_table_remove
g_int_equal
g_int_hash
g_key_file_free
g_key_file_get_boolean
g_key_file_get_integer
g_key_file_get_string
g_key_file_load_from_file
g_key_file_new
g_list_free
g_list_length
g_list_nth_data
g_log
g_malloc_n
g_mkdir
g_option_context_add_main_entries
g_option_context_new
g_option_context_parse
g_queue_free
g_queue_free_full
g_queue_get_length
g_queue_insert_before
g_queue_new
g_queue_peek_nth
g_queue_peek_nth_link
g_queue_pop_head
g_queue_pop_nth
g_queue_push_tail
g_queue_remove
g_random_int_range
g_slist_append
g_slist_free
g_slist_length
g_slist_nth_data
g_spawn_sync_utf8
g_strcmp0
g_strdup
g_strdup_printf
g_strfreev
g_strsplit
g_utf8_collate
g_utf8_strlen
g_utf8_strup
g_win32_get_system_data_dirs_for_module
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
_unlock
abort
system
vfprintf
libsqlite3-0
sqlite3_bind_int
sqlite3_bind_text
sqlite3_close_v2
sqlite3_column_int
sqlite3_column_text
sqlite3_errmsg
sqlite3_errstr
sqlite3_finalize
sqlite3_open_v2
sqlite3_prepare_v2
sqlite3_step
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1024B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ