Static task
static1
Behavioral task
behavioral1
Sample
cb00c348718260ab8aa693a3232ffdb9593f53c400c73d2d962195a617348ad2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cb00c348718260ab8aa693a3232ffdb9593f53c400c73d2d962195a617348ad2.exe
Resource
win10v2004-20220812-en
General
-
Target
cb00c348718260ab8aa693a3232ffdb9593f53c400c73d2d962195a617348ad2
-
Size
820KB
-
MD5
e279fcde5b4967d3cf0c6adadd278624
-
SHA1
f8171270c3b710e74f45a99fd451b523dd55d8ac
-
SHA256
cb00c348718260ab8aa693a3232ffdb9593f53c400c73d2d962195a617348ad2
-
SHA512
c21eaadeab8dce0694d9889786cf3aca12a68fb9742d35f0d5050f01191ee7d9c523927e282528d05c8b9e61d19fc9e7609ea62fc0f7ef633a181694b558df46
-
SSDEEP
24576:EOrty0djHWbbyH4GI5skHdHySiWJABR9+ZcROAKO:E2y0hWb2H3I/9HymJ8cZqOG
Malware Config
Signatures
Files
-
cb00c348718260ab8aa693a3232ffdb9593f53c400c73d2d962195a617348ad2.exe windows x86
9113e08dee6bd69e45bf161b1d88de00
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpW
Heap32Next
lstrcpynA
lstrcpynA
GetModuleHandleA
OpenMutexW
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
GetDiskFreeSpaceW
WriteFile
SetThreadPriority
VirtualFree
GetVolumeInformationA
GetCurrentThreadId
GetFileType
GetCurrentDirectoryA
lstrcatA
ReadConsoleA
lstrcpynA
GetDriveTypeW
VirtualProtectEx
lstrcpynA
FindFirstVolumeW
GetPrivateProfileIntA
lstrcpynA
lstrcpynA
GetSystemTime
d3d8
ValidateVertexShader
ValidatePixelShader
DebugSetMute
Direct3DCreate8
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ