Static task
static1
Behavioral task
behavioral1
Sample
0caa6908f721759752758a1ea5045033e7f20d84c3a9228c0759eb2d2ead88fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0caa6908f721759752758a1ea5045033e7f20d84c3a9228c0759eb2d2ead88fd.exe
Resource
win10v2004-20220812-en
General
-
Target
0caa6908f721759752758a1ea5045033e7f20d84c3a9228c0759eb2d2ead88fd
-
Size
822KB
-
MD5
8ef6f178da18428c77bcdaf641f057cb
-
SHA1
52240eebfd77708351a27747e90e334905094563
-
SHA256
0caa6908f721759752758a1ea5045033e7f20d84c3a9228c0759eb2d2ead88fd
-
SHA512
1672c60ccf9faf6d956c2890561969789937a089d7ff9f82d3f1a484d373363dfde98f98c7f26936ecc200804b8999d13d3548f9e2464b64e5cbd14660a727af
-
SSDEEP
24576:z6jzcpR2i5q0fcwVaWk6nal13bqx0m/bdViPawVr7:2PH0fhVaF6nGW+m/bdgai
Malware Config
Signatures
Files
-
0caa6908f721759752758a1ea5045033e7f20d84c3a9228c0759eb2d2ead88fd.exe windows x86
f3281e706d87521ca46ae41032a191f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
lstrcmpW
lstrcatA
GetLastError
WriteFile
GetLocalTime
lstrcpynA
lstrcpynA
lstrcpynA
GetVolumeInformationA
lstrcpynA
lstrcpynA
lstrcpynA
ReadConsoleW
VirtualFree
GetSystemTime
GetFileType
GetModuleHandleA
GetTimeFormatA
GetPrivateProfileIntW
CompareStringA
lstrcpynA
GetCurrentProcessId
GetDiskFreeSpaceW
VirtualProtectEx
lstrcpynA
GetEnvironmentVariableA
d3d9
PSGPError
Direct3DCreate9
DebugSetLevel
PSGPSampleTexture
Sections
.text Size: 20KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 798KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ