Static task
static1
Behavioral task
behavioral1
Sample
ee440e642c26d4f44ec3f04383b957a39cbb653e7528058e0c510447cca1d36e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ee440e642c26d4f44ec3f04383b957a39cbb653e7528058e0c510447cca1d36e.exe
Resource
win10v2004-20220901-en
General
-
Target
ee440e642c26d4f44ec3f04383b957a39cbb653e7528058e0c510447cca1d36e
-
Size
821KB
-
MD5
ddfdb796afb28aa3586b0c0ff0d61323
-
SHA1
2749f7ff173ca7bcfcabf27f109eda0672e089a3
-
SHA256
ee440e642c26d4f44ec3f04383b957a39cbb653e7528058e0c510447cca1d36e
-
SHA512
03f150063c1ae5c61edb133acc13ea56bfb47fb29e7ba55541737c250790e032c46d45b897bd3c905735887c2603fb8c7b10f027675b080b222aa43a3bdd1649
-
SSDEEP
12288:JkLWOOUAD6+/X+oAziboH25Bp+MNUZVEt1uhPlk8sgooyBD2G8B1dQnfKpfNn+7:3OGmVoAG8HSBpXqVmu55sgoBfm1AKlY
Malware Config
Signatures
Files
-
ee440e642c26d4f44ec3f04383b957a39cbb653e7528058e0c510447cca1d36e.exe windows x86
515b9a191861641ddc5c1ff794a57fde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTimeFormatA
WriteFile
lstrcpynA
lstrcpynA
lstrcpynA
VirtualFree
CompareStringA
lstrcatA
GetEnvironmentVariableA
GetLastError
lstrcpynA
lstrcpynA
GetCurrentProcessId
GetDiskFreeSpaceW
lstrcmpW
GetLocalTime
GetPrivateProfileIntW
GetModuleHandleA
GetFileType
lstrcpynA
lstrcpynA
VirtualProtectEx
GetVolumeInformationA
lstrcpynA
lstrcpynA
ReadConsoleW
GetSystemTime
GetCurrentDirectoryA
lstrcpynA
d3d9
PSGPError
Direct3DCreate9
PSGPSampleTexture
DebugSetLevel
Sections
.text Size: 20KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 797KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ