Static task
static1
Behavioral task
behavioral1
Sample
f03da0ef83b9c055223d6ac76d1869cba1b6ec9ca4fe91f7cb3642c9f751a50d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f03da0ef83b9c055223d6ac76d1869cba1b6ec9ca4fe91f7cb3642c9f751a50d.exe
Resource
win10v2004-20221111-en
General
-
Target
f03da0ef83b9c055223d6ac76d1869cba1b6ec9ca4fe91f7cb3642c9f751a50d
-
Size
822KB
-
MD5
2790b4037a6d709909e6b6e35679924b
-
SHA1
e9bf664ab4743ff72bfbdb81ab49c23dae578732
-
SHA256
f03da0ef83b9c055223d6ac76d1869cba1b6ec9ca4fe91f7cb3642c9f751a50d
-
SHA512
3005cb1c18df351dfa7ac5817492e3e67e864a341abdca935a4305662201b7847e1f877637c71a1b374082fbf3aa6160110cf1704e6691362dbb3677ff2b2a9f
-
SSDEEP
24576:C8/NR9H6BSxc8R+mpNCL59OwwMmfgBTV:t/p5carwf0MmY
Malware Config
Signatures
Files
-
f03da0ef83b9c055223d6ac76d1869cba1b6ec9ca4fe91f7cb3642c9f751a50d.exe windows x86
d7296c9decbe5ef9a130b26aa4d8b051
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocalTime
lstrcpynA
lstrcpynA
ReadConsoleW
lstrcpynA
lstrcpynA
GetCurrentProcessId
CompareStringA
lstrcpynA
lstrcpynA
GetDiskFreeSpaceW
lstrcatA
GetCurrentDirectoryA
lstrcpynA
GetEnvironmentVariableA
lstrcpynA
GetTimeFormatA
GetLastError
GetVolumeInformationA
WriteFile
GetSystemTime
GetFileType
lstrcpynA
lstrcmpW
VirtualProtectEx
GetPrivateProfileIntW
lstrcpynA
GetModuleHandleA
VirtualFree
d3d9
PSGPSampleTexture
PSGPError
DebugSetLevel
Direct3DCreate9
Sections
.text Size: 20KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 798KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ