b8c850f9c009b511da113c43c574fefca3780e89794647497848d5aef5b8f3dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8c850f9c009b511da113c43c574fefca3780e89794647497848d5aef5b8f3dd
Size

820KB
MD5

2e63b27e1819c9c80e07e14e2bf7936a
SHA1

109fd9228c8710e972591c972efe9b31962bf2d0
SHA256

b8c850f9c009b511da113c43c574fefca3780e89794647497848d5aef5b8f3dd
SHA512

de5f7390bb6d36e6e62d1eb7ea97bdf109a8289ed1dab427075c6c2765f9c2a4d82882ca75d0268d04900f04646674903fa766bd4adde935a0eb2cd5dce1758e
SSDEEP

12288:1E9keRFldyuxf4QNzCflDR5j45COLz5Qv0IoS1RUKMLu+BRfCCZ1GS8kpS2n3J+Q:1AtzyuxQh9V18LtJ81RHKhG4S2n5PN

Score

N/A

Malware Config

Signatures

Files

b8c850f9c009b511da113c43c574fefca3780e89794647497848d5aef5b8f3dd
.exe windows x86

74b323324aaa576052bd5d161fe83f82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
Heap32Next
lstrcpynA
GetVolumeInformationA
lstrcpynA
lstrcpynA
OpenMutexW
GetCurrentDirectoryA
GetDiskFreeSpaceW
lstrcpynA
GetDriveTypeW
FindFirstVolumeW
lstrcpynA
SetThreadPriority
GetSystemTime
ReadConsoleA
GetPrivateProfileIntA
VirtualFree
GetCurrentThreadId
lstrcpynA
lstrcatA
lstrcpynA
lstrcpynA
GetModuleHandleA
lstrcmpW
GetFileType
lstrcpynA
WriteFile
VirtualProtectEx

d3d8

ValidateVertexShader
ValidatePixelShader
Direct3DCreate8
DebugSetMute

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 796KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ