Static task
static1
Behavioral task
behavioral1
Sample
273a65524515cfee305a41354632d444a65c87b808083b068cb4368fefc35ba7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
273a65524515cfee305a41354632d444a65c87b808083b068cb4368fefc35ba7.exe
Resource
win10v2004-20220812-en
General
-
Target
273a65524515cfee305a41354632d444a65c87b808083b068cb4368fefc35ba7
-
Size
556KB
-
MD5
0546908af7ac4152a9f7e60a61af7ed0
-
SHA1
17e9657d36c23be42da73c7c7f927cdd533caf5d
-
SHA256
273a65524515cfee305a41354632d444a65c87b808083b068cb4368fefc35ba7
-
SHA512
de82c14bb2f465c4f896514d3aac76a09c2219a3f09696e171317280bd8c418d34900e4e95d7edaef5589082697c74b5b10e8f75f141eb8f356b8653a6168353
-
SSDEEP
6144:k4MYKx+7E0jQkIPrWshIVCid5XoyPDYVziJiTbOvSTBmCOWzfdl8:Cy7E0yWSCXPLkTbOvSTN2
Malware Config
Signatures
Files
-
273a65524515cfee305a41354632d444a65c87b808083b068cb4368fefc35ba7.exe windows x86
b9fd530c4aeca96aaa76aef798e4a401
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
d3d9
Direct3DCreate9
d3dx9_29
D3DXLoadMeshFromXInMemory
D3DXVec3Normalize
D3DXMatrixInverse
D3DXLoadSurfaceFromSurface
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileA
D3DXMatrixTranspose
D3DXPlaneTransform
D3DXCreateFontA
D3DXLoadMeshFromXA
D3DXMatrixMultiply
D3DXCreateEffect
D3DXCreateEffectFromFileA
D3DXQuaternionNormalize
D3DXQuaternionSlerp
D3DXMatrixReflect
D3DXMatrixPerspectiveFovRH
kernel32
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCPInfo
LCMapStringW
LocalFree
SetEndOfFile
CreateFileW
GetLocaleInfoW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
GetTickCount
OutputDebugStringA
GetCommandLineA
Sleep
GetVersionExA
lstrlenA
MultiByteToWideChar
GetLastError
CreateFileA
SetFilePointer
WriteFile
ReadFile
CloseHandle
SetLastError
WriteConsoleA
LoadLibraryA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetOEMCP
GetACP
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LeaveCriticalSection
GetFileType
GetStdHandle
SetHandleCount
HeapSize
LCMapStringA
ExitProcess
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
GetProcAddress
GetCurrentThreadId
user32
UpdateWindow
ValidateRect
PostMessageA
IsWindow
SendMessageA
EndPaint
DestroyWindow
SetTimer
RegisterClassExA
PostQuitMessage
KillTimer
LoadIconA
GetClientRect
BeginPaint
TranslateMessage
InvalidateRect
UnregisterClassA
GetWindowLongA
CreateWindowExA
PeekMessageA
DefWindowProcA
SetWindowPos
ShowWindow
DispatchMessageA
LoadCursorA
AdjustWindowRect
SetRect
gdi32
GetStockObject
ole32
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoInitialize
oleaut32
GetActiveObject
VariantClear
SysAllocString
Sections
.text Size: 360KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE