Static task
static1
Behavioral task
behavioral1
Sample
9961566f989fcd91de3bac1724722e794f77245111c060701c3dac6a68ce1eef.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9961566f989fcd91de3bac1724722e794f77245111c060701c3dac6a68ce1eef.exe
Resource
win10v2004-20221111-en
General
-
Target
9961566f989fcd91de3bac1724722e794f77245111c060701c3dac6a68ce1eef
-
Size
822KB
-
MD5
5efc26782eeffd569a0ef8417067ebdd
-
SHA1
522cc61ab047447ad339a7c605c2015f7248541f
-
SHA256
9961566f989fcd91de3bac1724722e794f77245111c060701c3dac6a68ce1eef
-
SHA512
92462a04a7d811d5169f443a12a7d615caae6e62184a6f50ceb9b52575116e2dde0318a7fc702590ac0b52f05f81ba57d5e364a3a6f2240582ad2a6b05ff26be
-
SSDEEP
24576:9KPBJadId6WrQsxINovUwfGEXcHnKnZs8:MraiQqp+EXHnZs8
Malware Config
Signatures
Files
-
9961566f989fcd91de3bac1724722e794f77245111c060701c3dac6a68ce1eef.exe windows x86
254262796f50015879180bfbc9dfe969
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
GetCurrentProcessId
GetLastError
Heap32Next
lstrcpynA
GetSystemTime
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
GetModuleHandleA
GetPrivateProfileIntA
GetDiskFreeSpaceW
FindFirstVolumeW
GetVolumeInformationA
VirtualFree
lstrcpynA
VirtualProtectEx
GetCurrentDirectoryA
lstrcatA
GetDriveTypeW
lstrcpynA
lstrcpynA
lstrcmpW
OpenMutexW
WriteFile
ReadConsoleA
GetFileType
d3d8
ValidateVertexShader
Direct3DCreate8
ValidatePixelShader
DebugSetMute
Sections
.text Size: 19KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 798KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ