Static task
static1
Behavioral task
behavioral1
Sample
e0de8bdcf53d0a077d7472a21e67708f61d25df52e705d84da786ac6f3ff7e17.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e0de8bdcf53d0a077d7472a21e67708f61d25df52e705d84da786ac6f3ff7e17.exe
Resource
win10v2004-20221111-en
General
-
Target
e0de8bdcf53d0a077d7472a21e67708f61d25df52e705d84da786ac6f3ff7e17
-
Size
820KB
-
MD5
624ddd9c549a10f80cb8e72051c4b84c
-
SHA1
2123166eb1b9d4739fa1604e8e5928d2e31c0fe5
-
SHA256
e0de8bdcf53d0a077d7472a21e67708f61d25df52e705d84da786ac6f3ff7e17
-
SHA512
2d5ad62daf4875fa24e59cc8c6d0f461573fd89597f100e0676e95569e32919738b1e1a83988603c7228f48cd0162ed76fe6e7dba4d7ce44da0f58a33d4bf8ae
-
SSDEEP
24576:2HCAYXQkvEj7r5tFtWEzdt43XTektSK5b:DXFEXr5/tWEzdG3X/d5
Malware Config
Signatures
Files
-
e0de8bdcf53d0a077d7472a21e67708f61d25df52e705d84da786ac6f3ff7e17.exe windows x86
e9d01d2a5a91a82bd8155f6b1691cb5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
lstrcpynA
GetVolumeInformationA
GetFileType
GetPrivateProfileIntA
lstrcpynA
FindFirstVolumeW
lstrcpynA
GetCurrentThreadId
ReadConsoleA
lstrcpynA
lstrcatA
Heap32Next
GetDiskFreeSpaceW
SetThreadPriority
GetDriveTypeW
GetSystemTime
lstrcpynA
GetModuleHandleA
VirtualFree
lstrcpynA
OpenMutexW
lstrcpynA
WriteFile
lstrcpynA
VirtualProtectEx
lstrcpynA
lstrcpynA
lstrcmpW
d3d8
ValidateVertexShader
Direct3DCreate8
DebugSetMute
ValidatePixelShader
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ