Static task
static1
Behavioral task
behavioral1
Sample
5f590f99ca01263928f2d52581ee4a203632e697f12de12ba7b1b00f0447a19b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5f590f99ca01263928f2d52581ee4a203632e697f12de12ba7b1b00f0447a19b.exe
Resource
win10v2004-20221111-en
General
-
Target
5f590f99ca01263928f2d52581ee4a203632e697f12de12ba7b1b00f0447a19b
-
Size
822KB
-
MD5
7991e695366c212cc46310e11fa76451
-
SHA1
65cd281d4c2435ab7a6760179ff721a14f7a323a
-
SHA256
5f590f99ca01263928f2d52581ee4a203632e697f12de12ba7b1b00f0447a19b
-
SHA512
ca77507541eba8f70cec532672c9203ad012d4d9653a654ef854958645e8d703201f27b4d171c1c00eafea384c3660388f61f3639d8fa4930f7d3eecfe661106
-
SSDEEP
12288:HDUs7/gmwR1NG9TWE2zIBb59CpqzL9VWNncanoa3xoP7kR1:As7XwJSKFSCQOroMxoPAR
Malware Config
Signatures
Files
-
5f590f99ca01263928f2d52581ee4a203632e697f12de12ba7b1b00f0447a19b.exe windows x86
338bc7d86f173ec869140ed74fbc33d7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpynA
VirtualProtectEx
VirtualFree
lstrcpynA
lstrcmpW
lstrcpynA
lstrcpynA
GetTimeFormatA
WriteFile
GetSystemTime
GetCurrentDirectoryA
GetEnvironmentVariableA
lstrcpynA
GetPrivateProfileIntW
lstrcpynA
GetLastError
GetDiskFreeSpaceW
GetModuleHandleA
GetCurrentProcessId
CompareStringA
GetLocalTime
lstrcpynA
lstrcpynA
lstrcpynA
ReadConsoleW
GetFileType
lstrcpynA
lstrcatA
GetVolumeInformationA
d3d9
PSGPSampleTexture
PSGPError
Direct3DCreate9
DebugSetLevel
Sections
.text Size: 20KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 798KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ