Static task
static1
Behavioral task
behavioral1
Sample
28e99f0f316a808c09c9c66508ca206471d73ffe243ca50dfb4010fd0a48e01c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28e99f0f316a808c09c9c66508ca206471d73ffe243ca50dfb4010fd0a48e01c.exe
Resource
win10v2004-20220901-en
General
-
Target
28e99f0f316a808c09c9c66508ca206471d73ffe243ca50dfb4010fd0a48e01c
-
Size
820KB
-
MD5
e182fa987e2d1b2eaba4d71685673bfc
-
SHA1
369fb0b391c8ad59dc3f7f318e0c74a7f5958a0e
-
SHA256
28e99f0f316a808c09c9c66508ca206471d73ffe243ca50dfb4010fd0a48e01c
-
SHA512
2dc09710a403a3aac31dd4de2d3cd278fc43ba5888b3768571df031609daeef88a69172836b5a6e48664d7d5c0e50cb48bf4c7f6630c2b5f35b46b7c9d3f35a9
-
SSDEEP
24576:0CdxpZhDR9PHEgfmTy2L5GkJg9RjuBUPHZg:0wXthpiHL5DJm0CHS
Malware Config
Signatures
Files
-
28e99f0f316a808c09c9c66508ca206471d73ffe243ca50dfb4010fd0a48e01c.exe windows x86
7a417836def7bd8f5f1f85a041196409
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
lstrcpynA
lstrcatA
lstrcpynA
lstrcpynA
GetSystemTime
GetDiskFreeSpaceW
SetThreadPriority
WriteFile
GetVolumeInformationA
lstrcpynA
OpenMutexW
lstrcpynA
lstrcpynA
FindFirstVolumeW
lstrcpynA
Heap32Next
ReadConsoleA
GetPrivateProfileIntA
lstrcpynA
lstrcpynA
GetFileType
lstrcpynA
GetModuleHandleA
GetDriveTypeW
lstrcmpW
GetCurrentThreadId
VirtualProtectEx
GetCurrentDirectoryA
d3d8
Direct3DCreate8
ValidateVertexShader
DebugSetMute
ValidatePixelShader
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ