Static task
static1
Behavioral task
behavioral1
Sample
e810fab7df588a10acfe1719a7a92d9cf5ec1a5d791f6a83de76236c1e4414bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e810fab7df588a10acfe1719a7a92d9cf5ec1a5d791f6a83de76236c1e4414bb.exe
Resource
win10v2004-20220812-en
General
-
Target
e810fab7df588a10acfe1719a7a92d9cf5ec1a5d791f6a83de76236c1e4414bb
-
Size
819KB
-
MD5
bc0c3951b1382a2b3534e788fabbef88
-
SHA1
3bbc0c1aee8edee3b1847e68e5f5762744f5d669
-
SHA256
e810fab7df588a10acfe1719a7a92d9cf5ec1a5d791f6a83de76236c1e4414bb
-
SHA512
635f44cfc21b2e5a3f2f9af94c94b21fed02ed25198afb771c8b86c3d0509c5a9278b2d73e60e982fbf27b1e85c045f0629fbd9466f4d8c2fa9f97fc6bc6c1ec
-
SSDEEP
24576:bNEpVg3kI9nuAlTbVqcA4hpssdkTlUK+25u:hEgUI9nuKXrvxkNz
Malware Config
Signatures
Files
-
e810fab7df588a10acfe1719a7a92d9cf5ec1a5d791f6a83de76236c1e4414bb.exe windows x86
597afaf7da1cbea1a759a8f5206590e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexW
lstrcpynA
lstrcpynA
Heap32Next
lstrcpynA
lstrcpynA
GetCurrentDirectoryA
FindFirstVolumeW
WriteFile
GetSystemTime
SetThreadPriority
lstrcmpW
lstrcpynA
lstrcpynA
VirtualFree
GetPrivateProfileIntA
lstrcpynA
lstrcpynA
GetCurrentProcessId
GetDiskFreeSpaceW
lstrcpynA
lstrcatA
GetVolumeInformationA
VirtualProtectEx
GetModuleHandleA
lstrcpynA
GetFileType
ReadConsoleA
GetDriveTypeW
d3d8
ValidatePixelShader
ValidateVertexShader
DebugSetMute
Direct3DCreate8
Sections
.text Size: 18KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ