1b664f6b189229cb0b99d3ff579ad6137c8e63f76fe483b3ba384d77e26e8ce6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b664f6b189229cb0b99d3ff579ad6137c8e63f76fe483b3ba384d77e26e8ce6
Size

820KB
MD5

4c3c987e3a0e4b250d1ff8eef6104c51
SHA1

ed2570eeda8e43654d16ab0de6340b72c1490196
SHA256

1b664f6b189229cb0b99d3ff579ad6137c8e63f76fe483b3ba384d77e26e8ce6
SHA512

f96d20cdb516cbd950da73bddb5bbaaf11a639f453dd4b971e6381b0e3418ec068212812a3eeeca1d6392dc4624d45c691d0ee59a526e94640cbac409afaaa7c
SSDEEP

12288:tKe7n//kE15sRiAIwHdzJYqlwfh7mFs0AvlWTYMegkzAyZQg54uuf73VWAAK0yDP:tRL/cqCiAIwBy2aqAsTjvqDg73DoqP

Score

N/A

Malware Config

Signatures

Files

1b664f6b189229cb0b99d3ff579ad6137c8e63f76fe483b3ba384d77e26e8ce6
.exe windows x86

a449372ed1d6d5ad6bbf6f4afb289d9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
Heap32Next
lstrcpynA
lstrcpynA
ReadConsoleA
GetDriveTypeW
GetSystemTime
GetDiskFreeSpaceW
lstrcpynA
lstrcpynA
lstrcpynA
GetFileType
OpenMutexW
lstrcmpW
GetCurrentDirectoryA
FindFirstVolumeW
WriteFile
VirtualProtectEx
GetPrivateProfileIntA
SetThreadPriority
lstrcatA
GetModuleHandleA
lstrcpynA
VirtualFree
lstrcpynA
lstrcpynA
GetCurrentThreadId
lstrcpynA
GetVolumeInformationA

d3d8

Direct3DCreate8
ValidatePixelShader
ValidateVertexShader
DebugSetMute

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 796KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ