Static task
static1
Behavioral task
behavioral1
Sample
3f84af031abeb44e659906ee9047054da586b0e7fcf29674b2be75394def15be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f84af031abeb44e659906ee9047054da586b0e7fcf29674b2be75394def15be.exe
Resource
win10v2004-20220901-en
General
-
Target
3f84af031abeb44e659906ee9047054da586b0e7fcf29674b2be75394def15be
-
Size
820KB
-
MD5
11fa706e97eb1ccf431d13688b6052e9
-
SHA1
48b1c4f2af3bf1e314be69184eb85287727dbca1
-
SHA256
3f84af031abeb44e659906ee9047054da586b0e7fcf29674b2be75394def15be
-
SHA512
f1a1c4284bb01d31e6124fb600b45428d549639428def661de7b14ecbbd62f78a58f1469d3c22944dc96e8ca11af0e47aef1c67f79cb2ee5316782740df55863
-
SSDEEP
12288:n8FWiaPkToGrnb4o6rSsf60oZaOzvPAeDxx00iCsZuKWYLReWGFk+0DLDZkXeuIZ:3i3vrbMwPA+xx3iCs8jHNFivDCBIF86
Malware Config
Signatures
Files
-
3f84af031abeb44e659906ee9047054da586b0e7fcf29674b2be75394def15be.exe windows x86
c2f23076205bfd14ddc5fe34f3340fb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleA
GetFileType
GetSystemTime
lstrcpynA
GetCurrentThreadId
GetDiskFreeSpaceW
GetCurrentDirectoryA
lstrcpynA
GetVolumeInformationA
lstrcpynA
lstrcpynA
lstrcpynA
OpenMutexW
SetThreadPriority
lstrcpynA
GetModuleHandleA
lstrcpynA
Heap32Next
lstrcpynA
VirtualProtectEx
WriteFile
lstrcpynA
VirtualFree
FindFirstVolumeW
lstrcpynA
GetDriveTypeW
GetPrivateProfileIntA
lstrcatA
lstrcmpW
d3d8
ValidatePixelShader
Direct3DCreate8
DebugSetMute
ValidateVertexShader
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ