Static task
static1
Behavioral task
behavioral1
Sample
d3305d51ee1ad64f919b8b442535e7bb63380de30533473007dd17274279f7e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3305d51ee1ad64f919b8b442535e7bb63380de30533473007dd17274279f7e4.exe
Resource
win10v2004-20220901-en
General
-
Target
d3305d51ee1ad64f919b8b442535e7bb63380de30533473007dd17274279f7e4
-
Size
822KB
-
MD5
2d9dec32505f2b08580501740f92daab
-
SHA1
65905f779260a0be262a6f606349de470fd1daa4
-
SHA256
d3305d51ee1ad64f919b8b442535e7bb63380de30533473007dd17274279f7e4
-
SHA512
e4396d30eaf62d298eabe871a3074548ce600a132e4e9654f37dd2b5b575cbf9b87f153d4382c1e7f822d6dc0df48489e57814feffd9f7ad27efd8f294c64bca
-
SSDEEP
24576:4TYDs2ysjlkHK6lN0jB8uEtxe8/blb61CB2xbB:44ja/lN2E7v/bl5EL
Malware Config
Signatures
Files
-
d3305d51ee1ad64f919b8b442535e7bb63380de30533473007dd17274279f7e4.exe windows x86
82cf2483ebaffa6fb1979ffd1bf1fa5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstVolumeW
Heap32Next
lstrcpynA
GetVolumeInformationA
GetDiskFreeSpaceW
lstrcpynA
GetDriveTypeW
lstrcpynA
VirtualFree
ReadConsoleA
GetPrivateProfileIntA
lstrcpynA
GetModuleHandleA
lstrcmpW
VirtualProtectEx
GetLastError
GetSystemTime
GetCurrentProcessId
lstrcpynA
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
lstrcpynA
GetFileType
lstrcatA
lstrcpynA
lstrcpynA
WriteFile
OpenMutexW
d3d8
ValidatePixelShader
DebugSetMute
Direct3DCreate8
ValidateVertexShader
Sections
.text Size: 19KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 798KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ