Static task
static1
Behavioral task
behavioral1
Sample
cf6c599808dfca55ab0ae70a8ba0ac0d9614b3dc9a5879faac2ca30e1187ce2d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf6c599808dfca55ab0ae70a8ba0ac0d9614b3dc9a5879faac2ca30e1187ce2d.exe
Resource
win10v2004-20220812-en
General
-
Target
cf6c599808dfca55ab0ae70a8ba0ac0d9614b3dc9a5879faac2ca30e1187ce2d
-
Size
70KB
-
MD5
122d75524965f66e70b5e6617f687898
-
SHA1
9c669a72ea82be6d39a9b50b73b2152800e7279a
-
SHA256
cf6c599808dfca55ab0ae70a8ba0ac0d9614b3dc9a5879faac2ca30e1187ce2d
-
SHA512
30d9445de387d203c900b284066188bec828e2bce3467a9e9e1a8dcd9fdb01a7ec58717272a0b6624881e2f6a6faf13500e4af155f5a8d2a6a550835556851c4
-
SSDEEP
1536:BGRuvNyF+zGdA31gOB66Yvx+w+jh+w+8Whsh/bo3TM:sRcyF9k1B662Koet
Malware Config
Signatures
Files
-
cf6c599808dfca55ab0ae70a8ba0ac0d9614b3dc9a5879faac2ca30e1187ce2d.exe windows x86
3f710451421361c7568422615f35b4f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpW
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
lstrcpynA
lstrcpynA
GetDriveTypeW
GetVolumeInformationA
WriteFile
ReadConsoleA
VirtualProtectEx
GetCurrentDirectoryA
SetThreadPriority
GetDiskFreeSpaceW
GetFileType
GetSystemTime
GetModuleHandleA
Heap32Next
lstrcatA
FindFirstVolumeW
GetCurrentProcess
OpenMutexW
lstrcpynA
VirtualFree
lstrcpynA
d3d8
Direct3DCreate8
ValidateVertexShader
DebugSetMute
ValidatePixelShader
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ