Static task
static1
Behavioral task
behavioral1
Sample
3f8112a5ba4b306ad651d683b0edd145b0c80b1040c38ecfded16908734c3774.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3f8112a5ba4b306ad651d683b0edd145b0c80b1040c38ecfded16908734c3774.exe
Resource
win10v2004-20220812-en
General
-
Target
3f8112a5ba4b306ad651d683b0edd145b0c80b1040c38ecfded16908734c3774
-
Size
33KB
-
MD5
39d3197cd68d566809c83a53be9469ef
-
SHA1
85d6507b281b912a3036eb86e7cfc6db79faa098
-
SHA256
3f8112a5ba4b306ad651d683b0edd145b0c80b1040c38ecfded16908734c3774
-
SHA512
456ec2ab49f07a8079f3d2a68fa2a021e9f24ef79923b8ffcb6395a66b953d64c4e00650d4e26e1216c9aef2728d572d306a09cea2a015272da23eb31626da18
-
SSDEEP
384:DegO+G8+sSQxWtGPwgvQGTtrnCh6hdnE/W4b7tn:qgfGzsSBgvQGZrCghdnEOyn
Malware Config
Signatures
Files
-
3f8112a5ba4b306ad651d683b0edd145b0c80b1040c38ecfded16908734c3774.exe windows x86
270283d80d944c69de5fa3182105b981
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
lstrcpynA
lstrcatA
GetPrivateProfileIntA
GetSystemTime
GetCurrentThreadId
lstrcpynA
WriteFile
GetCurrentDirectoryA
lstrcpynA
lstrcmpW
lstrcpynA
lstrcpynA
GetDiskFreeSpaceW
GetVolumeInformationA
VirtualFree
GetDriveTypeW
ReadConsoleA
lstrcpynA
SetThreadPriority
GetFileType
Heap32Next
VirtualProtectEx
lstrcpynA
lstrcpynA
OpenMutexW
GetModuleHandleA
lstrcpynA
FindFirstVolumeW
d3d8
ValidatePixelShader
ValidateVertexShader
Direct3DCreate8
DebugSetMute
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ