Static task
static1
Behavioral task
behavioral1
Sample
e9ae23535a13010eed2f40e99f874309b53fcdb2026e573299a8c44812f3ac57.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e9ae23535a13010eed2f40e99f874309b53fcdb2026e573299a8c44812f3ac57.exe
Resource
win10v2004-20221111-en
General
-
Target
e9ae23535a13010eed2f40e99f874309b53fcdb2026e573299a8c44812f3ac57
-
Size
822KB
-
MD5
3e568335f8cb98abdd160e39aaa0a394
-
SHA1
7dc715778525543773ef484c25491ae4555ca0fe
-
SHA256
e9ae23535a13010eed2f40e99f874309b53fcdb2026e573299a8c44812f3ac57
-
SHA512
3559762f779eb8b3074351c87f1feb6c697ea5fcc423d4bca5c2fb22891086aa4927b5c56431619576708abfd88ded57218a73dc35153f457972236ab9e8ef0a
-
SSDEEP
12288:zsXGkp4COxb1bxCWjmk8kmymwnLQC27sugemIQKqgDUjF+Zf4adhOeDyBiWwcFg4:YGkpFEJbcRobkC2PmpKyFE6jEWbtcG
Malware Config
Signatures
Files
-
e9ae23535a13010eed2f40e99f874309b53fcdb2026e573299a8c44812f3ac57.exe windows x86
6848f9e730af40884562cdbf68ab12cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
GetDiskFreeSpaceW
lstrcmpW
lstrcpynA
GetSystemTime
GetModuleHandleA
GetFileType
VirtualFree
lstrcpynA
lstrcpynA
lstrcpynA
GetVolumeInformationA
GetDriveTypeW
GetEnvironmentVariableA
ReadConsoleA
CompareStringA
lstrcatA
WriteFile
lstrcpynA
lstrcpynA
GetTimeFormatA
GetCurrentProcessId
lstrcpynA
lstrcpynA
VirtualProtectEx
GetLastError
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
d3d8
Direct3DCreate8
ValidatePixelShader
DebugSetMute
ValidateVertexShader
Sections
.text Size: 19KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 798KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ