Static task
static1
Behavioral task
behavioral1
Sample
e1ef2562c4794af6d561cc83878e0a3df1a54ec4fc2dae631cd3e5d3c76a3a39.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1ef2562c4794af6d561cc83878e0a3df1a54ec4fc2dae631cd3e5d3c76a3a39.exe
Resource
win10v2004-20220812-en
General
-
Target
e1ef2562c4794af6d561cc83878e0a3df1a54ec4fc2dae631cd3e5d3c76a3a39
-
Size
32KB
-
MD5
a1b2d4df8159db323a8595c93320e1c0
-
SHA1
3ae2319ca61f88a6474b7ebe2a99cdcc8b2008a8
-
SHA256
e1ef2562c4794af6d561cc83878e0a3df1a54ec4fc2dae631cd3e5d3c76a3a39
-
SHA512
67fb47d9a576f2a74b3f5b0c5009fe1070f9b19de74c3f5dcb9175a3f0fecd5cf7970db3e302c3776e252c19c79eddf54bb9660cf02b92cb8d338b3d06092ea7
-
SSDEEP
384:IbraBO5boaMlDXh8A/IjE1n1OiNbHmpnCC9plvke:san9h8NWOkipr5ke
Malware Config
Signatures
Files
-
e1ef2562c4794af6d561cc83878e0a3df1a54ec4fc2dae631cd3e5d3c76a3a39.exe windows x86
7dfd11f0a7b20fd972c4a4f87230ad1a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
lstrcpynA
GetModuleHandleA
GetFileType
GetDiskFreeSpaceW
lstrcpynA
GetPrivateProfileIntA
lstrcpynA
GetDriveTypeW
lstrcpynA
GetSystemTime
ReadConsoleA
VirtualFree
GetVolumeInformationA
lstrcpynA
GetCurrentProcess
VirtualProtectEx
lstrcpynA
lstrcpynA
lstrcpynA
lstrcmpW
FindFirstVolumeW
OpenMutexW
GetCurrentDirectoryA
WriteFile
SetThreadPriority
Heap32Next
lstrcpynA
lstrcpynA
d3d8
DebugSetMute
ValidateVertexShader
Direct3DCreate8
ValidatePixelShader
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ