434fa656bd105abe5934ed56a8f986420e366b899ce6b5d8e2ef868d2bb6834d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

434fa656bd105abe5934ed56a8f986420e366b899ce6b5d8e2ef868d2bb6834d
Size

819KB
MD5

4475b2d54c8fd9a559fe7fe26108ceff
SHA1

676b9cb4482c2495f498070a5d8a6be73863294c
SHA256

434fa656bd105abe5934ed56a8f986420e366b899ce6b5d8e2ef868d2bb6834d
SHA512

c142f47fbd02338da3d758dc3cb5273f46e51d848d5e111bdb06d43e0312a03bd18fd729b242b443d81c0bc64bf9d92b04435f6dd936ab0bb65a16424f0ab6e0
SSDEEP

12288:ppbB/tBjhbRct73tnRMUuRTIs1Ib3FB+5yI5/vxdM2Mes10+CqNFJ1wPRLCbnYV+:dLGtnRMXRTS+gUv+Z0RU314ubncSqKP

Score

N/A

Malware Config

Signatures

Files

434fa656bd105abe5934ed56a8f986420e366b899ce6b5d8e2ef868d2bb6834d
.exe windows x86

34c43599066e93ad944f560f45d1f396

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeA
lstrcpynA
GetDriveTypeA
lstrcpynA
GetModuleHandleA
WriteFile
GetCurrentDirectoryA
lstrcpynA
Heap32Next
lstrcpynA
SetThreadPriority
lstrcatA
VirtualFree
lstrcpynA
lstrcpynA
lstrcpynA
GetVolumeInformationA
ReadConsoleA
GetDiskFreeSpaceW
VirtualProtect
lstrcpynA
lstrcmpW
OpenMutexW
GetSystemTime
GetFileType
GetPrivateProfileIntA
lstrcpynA
lstrcpynA
GetCurrentThreadId

d3d8

Direct3DCreate8
DebugSetMute
ValidatePixelShader
ValidateVertexShader

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 796KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ