Static task
static1
Behavioral task
behavioral1
Sample
a830d0ec14ade932d7d73f4413af360e6ec9db5a4edacdd9a6d9cfff333e4f31.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a830d0ec14ade932d7d73f4413af360e6ec9db5a4edacdd9a6d9cfff333e4f31.exe
Resource
win10v2004-20221111-en
General
-
Target
a830d0ec14ade932d7d73f4413af360e6ec9db5a4edacdd9a6d9cfff333e4f31
-
Size
822KB
-
MD5
d777231bb9cc4cc22853f4d0e07df353
-
SHA1
6fe70be1e9485137a6c3c5f6396d308301b9db89
-
SHA256
a830d0ec14ade932d7d73f4413af360e6ec9db5a4edacdd9a6d9cfff333e4f31
-
SHA512
d4aa526246ed4e24d2047912ba705ff581ac607aae5042812d10f5d4c75ca1fea76ab217932e6be7e55821b9fa22cee7d787f6a77cc26f57ccf11fad545748dd
-
SSDEEP
12288:+wKtzVeVyIJ08L1P1VaShATqEWTEiam11mLFz5W7/n9EQZBxu1KJTAMVNKIuP2Qj:ouA0P1ogdaseFzERzHu1yA+KIK
Malware Config
Signatures
Files
-
a830d0ec14ade932d7d73f4413af360e6ec9db5a4edacdd9a6d9cfff333e4f31.exe windows x86
75445b85730bbc6f48e95fa4822d514b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcmpW
lstrcpynA
GetFileType
ReadConsoleW
CompareStringA
CreatePipe
GetPrivateProfileIntW
lstrcpynA
GetEnvironmentVariableW
lstrcpynA
lstrcpynA
GetModuleHandleA
GetLastError
WriteFile
lstrcpynA
lstrcatA
VirtualFree
GetVolumeInformationA
lstrcpynA
GetTimeFormatA
GetSystemTime
lstrcpynA
lstrcpynA
CreateMailslotA
lstrcpynA
GetDiskFreeSpaceW
VirtualProtectEx
GetCurrentDirectoryA
lstrcpynA
d3d9
Direct3DCreate9
PSGPSampleTexture
DebugSetLevel
PSGPError
Sections
.text Size: 20KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 798KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ