Static task
static1
Behavioral task
behavioral1
Sample
c0ff1c79d3b77ed1f6d5117d4dfb11e16ceeb5a92a5947af95c39eb1d2c0f359.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0ff1c79d3b77ed1f6d5117d4dfb11e16ceeb5a92a5947af95c39eb1d2c0f359.exe
Resource
win10v2004-20220901-en
General
-
Target
c0ff1c79d3b77ed1f6d5117d4dfb11e16ceeb5a92a5947af95c39eb1d2c0f359
-
Size
1.4MB
-
MD5
6be22327d5c306ed4c29404edf7841e5
-
SHA1
61366cca2e71b2ea661bfb96408d749eed35e952
-
SHA256
c0ff1c79d3b77ed1f6d5117d4dfb11e16ceeb5a92a5947af95c39eb1d2c0f359
-
SHA512
c485d11ae1ed1d4b33400f5aeac4702dc01083060c279961195f80aed98f1e3f30414a213a7dbb06aecb017bf6b2f39efba47603dfec99990afdaffdb5555216
-
SSDEEP
24576:4s74blkJ2EcJ5hxIBbuEJ2kQJrgMWHF+xC/D0zPSl1htMDy+TLV7aeeMU6PjyZBs:n74m2F5ka82DJy1/D0zP+IZLYee1yyZK
Malware Config
Signatures
Files
-
c0ff1c79d3b77ed1f6d5117d4dfb11e16ceeb5a92a5947af95c39eb1d2c0f359.exe windows x86
e44b9727f040ba7e6b09123dc39e0767
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
d3d9
Direct3DCreate9
d3dx9_24
D3DXLoadSurfaceFromFileInMemory
dinput8
DirectInput8Create
dsound
ord11
comctl32
ord17
winmm
timeGetTime
ddraw
DirectDrawCreateEx
setupapi
SetupDiDestroyDeviceInfoList
ws2_32
WSAStartup
libeay32
ord469
iphlpapi
GetAdaptersInfo
ilnsys32
ord3
imm32
ImmSetOpenStatus
user32
DestroyWindow
gdi32
CreateFontIndirectA
comdlg32
ChooseFontA
advapi32
RegOpenKeyExA
shell32
DragFinish
ole32
CoUninitialize
oleaut32
VariantInit
shlwapi
PathAddBackslashA
Sections
.text Size: 1.3MB - Virtual size: 12.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE