Static task
static1
Behavioral task
behavioral1
Sample
a7f0b6d34a6b564b52481e9b084c1a7e63ecb70087bcf0fe673e02212cd35990.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7f0b6d34a6b564b52481e9b084c1a7e63ecb70087bcf0fe673e02212cd35990.exe
Resource
win10v2004-20220812-en
General
-
Target
a7f0b6d34a6b564b52481e9b084c1a7e63ecb70087bcf0fe673e02212cd35990
-
Size
819KB
-
MD5
d70fa5785761c673cd239340d7741b3d
-
SHA1
94a7b81066304f31080a49adc02035c462c7a3e3
-
SHA256
a7f0b6d34a6b564b52481e9b084c1a7e63ecb70087bcf0fe673e02212cd35990
-
SHA512
55eb9383dfa962f9d94b20619c5f907bef78aad47d9519fd14e5667e4a30014750ff87c10e0104b0102955cd46c925125a46acc9c198a1b62bdba6b42de494ef
-
SSDEEP
24576:WULbRMu77/gjJXYiEyxyXcY2PDzYNxiHo:z70VLYcY2Do
Malware Config
Signatures
Files
-
a7f0b6d34a6b564b52481e9b084c1a7e63ecb70087bcf0fe673e02212cd35990.exe windows x86
980aa5e300757aedcd97df334c7d041e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstVolumeW
SetThreadPriority
lstrcpynA
lstrcmpW
GetSystemTime
GetCurrentDirectoryA
GetVolumeInformationA
GetDiskFreeSpaceW
lstrcpynA
lstrcatA
lstrcpynA
GetPrivateProfileIntA
lstrcpynA
OpenMutexW
VirtualFree
GetDriveTypeW
ReadConsoleA
lstrcpynA
lstrcpynA
WriteFile
GetFileType
VirtualProtectEx
GetCurrentProcess
lstrcpynA
lstrcpynA
Heap32Next
GetModuleHandleA
lstrcpynA
lstrcpynA
d3d8
Direct3DCreate8
ValidatePixelShader
ValidateVertexShader
DebugSetMute
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ