32c268af5a7f7b4dc90b989c16fb01283171c54b0a1f5adde892b6adeaca791a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32c268af5a7f7b4dc90b989c16fb01283171c54b0a1f5adde892b6adeaca791a
Size

820KB
MD5

f705c501aa896ac6c76282f8782e0b4f
SHA1

745b0d3ebd4ff006d45394d83da028478737ee60
SHA256

32c268af5a7f7b4dc90b989c16fb01283171c54b0a1f5adde892b6adeaca791a
SHA512

5845d8e43dfe80874685885ba882aa594eb87d2e05258c006e6bebe1455e015249294644edceb3a068386215892c6dfd5c3459b07cba0a2480c2d3a5692501e9
SSDEEP

24576:NH5IhYC0l5gyFNiwus6E9ZLA+pCflxVa3hE6iK:NKhYCogEiZd6ZLnpCfHVax

Score

N/A

Malware Config

Signatures

Files

32c268af5a7f7b4dc90b989c16fb01283171c54b0a1f5adde892b6adeaca791a
.exe windows x86

f7f530f88bcc33c1b4671d38cda38943

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
Heap32Next
WriteFile
lstrcpynA
lstrcpynA
SetThreadPriority
VirtualFree
GetFileType
GetDiskFreeSpaceW
VirtualProtectEx
GetModuleHandleA
GetSystemTime
OpenMutexW
GetCurrentDirectoryA
lstrcpynA
lstrcpynA
lstrcpynA
ReadConsoleA
lstrcatA
lstrcpynA
GetPrivateProfileIntA
lstrcpynA
lstrcpynA
GetCurrentThreadId
FindFirstVolumeW
GetVolumeInformationA
lstrcpynA
lstrcpynA
GetDriveTypeW

d3d8

ValidateVertexShader
DebugSetMute
ValidatePixelShader
Direct3DCreate8

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 796KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ