Static task
static1
Behavioral task
behavioral1
Sample
63a7bf7343b5ce094f0de80a09aa403b0a37c6e2386755aba05a1fbc063127bf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
63a7bf7343b5ce094f0de80a09aa403b0a37c6e2386755aba05a1fbc063127bf.exe
Resource
win10v2004-20220812-en
General
-
Target
63a7bf7343b5ce094f0de80a09aa403b0a37c6e2386755aba05a1fbc063127bf
-
Size
822KB
-
MD5
f0b9bae321f60f07b1a456489ffd37d4
-
SHA1
9dd06f9bd4284ab75356a3c25bdae7835d6d536a
-
SHA256
63a7bf7343b5ce094f0de80a09aa403b0a37c6e2386755aba05a1fbc063127bf
-
SHA512
bb82e70c71ce403b3ac5ff402e1bbbdf57019e60bb8799bbb26afb64ce5e6f8b5555ea6ff367425d8dc667e85422e14e31e2969bcc4e1aefd32e309e7dcb775e
-
SSDEEP
12288:sKtzVeVyIJ08L1P1VaShATqEWTEiam11mLFz5W7/n9EQZBxu1KJTAMVNKIuP2Qzn:buA0P1ogdaseFzERzHu1yA+KIK
Malware Config
Signatures
Files
-
63a7bf7343b5ce094f0de80a09aa403b0a37c6e2386755aba05a1fbc063127bf.exe windows x86
e5db080cb9830df78df55a366adaa091
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteFile
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
CompareStringA
lstrcpynA
ReadConsoleW
GetVolumeInformationA
GetLocalTime
GetFileType
lstrcpynA
GetTimeFormatA
lstrcmpW
GetDiskFreeSpaceW
VirtualProtectEx
VirtualFree
lstrcpynA
GetLastError
GetEnvironmentVariableA
GetModuleHandleA
GetCurrentProcessId
lstrcpynA
lstrcpynA
lstrcpynA
GetPrivateProfileIntW
lstrcatA
GetSystemTime
lstrcpynA
lstrcpynA
d3d9
PSGPSampleTexture
PSGPError
DebugSetLevel
Direct3DCreate9
Sections
.text Size: 20KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 798KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ