Static task
static1
Behavioral task
behavioral1
Sample
ffeec5a8c69d70e2f72989541ebea1fb8b32f1db9e66a57e6f4bb76bf11e897d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ffeec5a8c69d70e2f72989541ebea1fb8b32f1db9e66a57e6f4bb76bf11e897d.exe
Resource
win10v2004-20220901-en
General
-
Target
ffeec5a8c69d70e2f72989541ebea1fb8b32f1db9e66a57e6f4bb76bf11e897d
-
Size
820KB
-
MD5
801beaae62ed0f969035c54221537b9e
-
SHA1
40f38d19b7e7ff29bb779ccfeba627b4cb3bdb38
-
SHA256
ffeec5a8c69d70e2f72989541ebea1fb8b32f1db9e66a57e6f4bb76bf11e897d
-
SHA512
b996e74130886dc051875032f9ac7ffc10c254391379e84e56ec06ad0bd6a504fbf08c477161eb61b565e3a2c7b7e3a66f462fdee96c594e0277e5c1432b788e
-
SSDEEP
24576:1jipzzN4ZnPDugdocYoYdepa1uN50rfH:1j6g1dotooesIa
Malware Config
Signatures
Files
-
ffeec5a8c69d70e2f72989541ebea1fb8b32f1db9e66a57e6f4bb76bf11e897d.exe windows x86
a2397ba7ada75ec6a9a1b7d385c8c5dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
lstrcpynA
lstrcatA
Heap32Next
lstrcpynA
WriteFile
GetModuleHandleA
lstrcpynA
SetThreadPriority
GetPrivateProfileIntA
GetDriveTypeW
lstrcpynA
VirtualFree
GetFileType
lstrcpynA
lstrcpynA
GetDiskFreeSpaceW
lstrcpynA
ReadConsoleA
lstrcmpW
GetVolumeInformationA
lstrcpynA
lstrcpynA
FindFirstVolumeW
GetCurrentDirectoryA
lstrcpynA
GetCurrentThreadId
GetSystemTime
OpenMutexW
d3d8
Direct3DCreate8
ValidatePixelShader
DebugSetMute
ValidateVertexShader
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ