Static task
static1
Behavioral task
behavioral1
Sample
9e07f3ba667d8410c458f2c6e34ce027d5727cd15bc20b56bba9cf503315c6a2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9e07f3ba667d8410c458f2c6e34ce027d5727cd15bc20b56bba9cf503315c6a2.exe
Resource
win10v2004-20220901-en
General
-
Target
9e07f3ba667d8410c458f2c6e34ce027d5727cd15bc20b56bba9cf503315c6a2
-
Size
822KB
-
MD5
ad17bab4d91d989fc5f2ceb25a6ce90e
-
SHA1
869f28fdaa4fc39fb0c35e9ca75a2a9a6a2125f1
-
SHA256
9e07f3ba667d8410c458f2c6e34ce027d5727cd15bc20b56bba9cf503315c6a2
-
SHA512
71cb705037a67bd54ab4e2a4a160313de42178e6a14fa9d9809685c29ef0a55ac54282bc87708c11601e7dd1a08ec2b6d23d808ffb53dd8cd2c2fe47e10f6dee
-
SSDEEP
24576:wfgj20LWkkSkjj1BaFqmJdJUAurGqasRpA4:7MPacmfFiNaOA
Malware Config
Signatures
Files
-
9e07f3ba667d8410c458f2c6e34ce027d5727cd15bc20b56bba9cf503315c6a2.exe windows x86
6e494ad6f42ba18b6cc22b67b218a15c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetFileType
lstrcmpW
lstrcpynA
lstrcpynA
lstrcpynA
ReadConsoleA
GetLastError
VirtualProtectEx
GetVolumeInformationA
Heap32Next
lstrcpynA
lstrcpynA
GetModuleHandleA
GetDiskFreeSpaceW
lstrcpynA
FindFirstVolumeW
GetSystemTime
lstrcatA
WriteFile
lstrcpynA
GetDriveTypeW
lstrcpynA
GetPrivateProfileIntA
GetCurrentDirectoryA
OpenMutexW
lstrcpynA
VirtualFree
lstrcpynA
d3d8
Direct3DCreate8
DebugSetMute
ValidatePixelShader
ValidateVertexShader
Sections
.text Size: 19KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 798KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ