Static task
static1
Behavioral task
behavioral1
Sample
c2d0d4cd15f8337d7ff3f268691e038fbc5f8d15d5c8c61c3d13803dd19508ae.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c2d0d4cd15f8337d7ff3f268691e038fbc5f8d15d5c8c61c3d13803dd19508ae.exe
Resource
win10v2004-20220812-en
General
-
Target
c2d0d4cd15f8337d7ff3f268691e038fbc5f8d15d5c8c61c3d13803dd19508ae
-
Size
819KB
-
MD5
97a7bf787917314b956ed0459d95d9e1
-
SHA1
c7bfcf41fdce2f498cedc6483d19cf206dd052d2
-
SHA256
c2d0d4cd15f8337d7ff3f268691e038fbc5f8d15d5c8c61c3d13803dd19508ae
-
SHA512
73ae818cc10f847ee4bc84ccafa75bdbbf5f7003882f3b67c8438886ebe8a8adf431aca17e7b735fd77b5221a39d80a64852ba8147596ae9aed01315471cb892
-
SSDEEP
24576:+ET//scp/Y/mmwGlckFiFQs+p3iIqBATF:3ccaOm5XyI/5
Malware Config
Signatures
Files
-
c2d0d4cd15f8337d7ff3f268691e038fbc5f8d15d5c8c61c3d13803dd19508ae.exe windows x86
26ee2c49e264c7328ab4dc81fae8ffdd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
lstrcpynA
SetThreadPriority
FindFirstVolumeA
lstrcpynA
lstrcpynA
Heap32Next
lstrcpynA
lstrcpynA
GetDiskFreeSpaceW
WriteFile
OpenMutexW
lstrcmpW
lstrcpynA
VirtualProtect
lstrcpynA
GetModuleHandleA
lstrcpynA
GetSystemTime
GetDriveTypeA
lstrcpynA
VirtualFree
GetPrivateProfileIntA
ReadConsoleA
GetFileType
GetCurrentThreadId
lstrcatA
GetVolumeInformationA
lstrcpynA
d3d8
DebugSetMute
ValidatePixelShader
Direct3DCreate8
ValidateVertexShader
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 854B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ