Static task
static1
Behavioral task
behavioral1
Sample
64751b6ea39b5a3e6af20a1097b91d6727c8a489fe76c7c6e08ccb83be421f12.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
64751b6ea39b5a3e6af20a1097b91d6727c8a489fe76c7c6e08ccb83be421f12.exe
Resource
win10v2004-20220901-en
General
-
Target
64751b6ea39b5a3e6af20a1097b91d6727c8a489fe76c7c6e08ccb83be421f12
-
Size
820KB
-
MD5
0c2231b3bdc20f26ad932c3f9e35baa7
-
SHA1
14f3a8af89d4e8ec32d64e56f29b4162f8a71345
-
SHA256
64751b6ea39b5a3e6af20a1097b91d6727c8a489fe76c7c6e08ccb83be421f12
-
SHA512
210269f30f5fa6058e870556d5d8d091e568612edc7812b5d96d7d50e6cb5280dfec5d3cda47407b460361adf9e38efec791715fa7a56ede96b3c31b54cc84c2
-
SSDEEP
12288:tWrOIpq1HE+ZUN4ZBsqU676OuaNjKWjLe58iD8dnocYnoCWhgH9xngjsZmCAoP1x:tipzzN4ZnPDugdocYoYdepa1uN50rfH
Malware Config
Signatures
Files
-
64751b6ea39b5a3e6af20a1097b91d6727c8a489fe76c7c6e08ccb83be421f12.exe windows x86
57ef64cc0eb8d6ebb0648c3e7e9f3784
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
GetDriveTypeW
WriteFile
GetCurrentThreadId
GetVolumeInformationA
lstrcpynA
lstrcpynA
GetSystemTime
VirtualProtectEx
lstrcpynA
VirtualFree
GetFileType
GetModuleHandleA
SetThreadPriority
OpenMutexW
GetCurrentDirectoryA
lstrcpynA
ReadConsoleA
lstrcatA
Heap32Next
lstrcmpW
lstrcpynA
lstrcpynA
lstrcpynA
FindFirstVolumeW
GetDiskFreeSpaceW
d3d8
ValidatePixelShader
DebugSetMute
ValidateVertexShader
Direct3DCreate8
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ