Static task
static1
Behavioral task
behavioral1
Sample
da03b6c494f6f18a2471de0fd1e982a19378f6db37fa4863913c9e8d3081f94a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
da03b6c494f6f18a2471de0fd1e982a19378f6db37fa4863913c9e8d3081f94a.exe
Resource
win10v2004-20220812-en
General
-
Target
da03b6c494f6f18a2471de0fd1e982a19378f6db37fa4863913c9e8d3081f94a
-
Size
517KB
-
MD5
f1de8e2d42ae88b0d76c9d0325789773
-
SHA1
d0a2c5093a5873e7bed711289e5b91a4309a2e6c
-
SHA256
da03b6c494f6f18a2471de0fd1e982a19378f6db37fa4863913c9e8d3081f94a
-
SHA512
be7fb207d96c147a6b2aa5d6d88ed949362281b927450894f3103997c9057f4b3609a6d369bbb368351067a897760b3cfc986ae06214fa591caf1e4cde8d6599
-
SSDEEP
12288:cXBR+qU6fPn2QvBSzu64vtNsJG3AjLE8nCbhvffr:Y+BW/DgujtcGq9OFXr
Malware Config
Signatures
Files
-
da03b6c494f6f18a2471de0fd1e982a19378f6db37fa4863913c9e8d3081f94a.exe windows x86
466d55bbdfb03a056fd6be0ea022af39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
CopyFileW
GetStartupInfoA
GetStringTypeW
GetLongPathNameA
OpenSemaphoreW
CreateMutexW
LoadLibraryA
ReadConsoleA
OpenMutexW
CreateEventW
InterlockedDecrement
InterlockedIncrement
OpenEventW
GetCurrentProcessId
GetVersion
SetCurrentDirectoryW
IsValidCodePage
d3d8
DebugSetMute
ValidateVertexShader
Direct3DCreate8
ValidatePixelShader
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_WRITE
.mdata Size: 500KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ