f62916168d85d1189550f8af23437c65819a9982a4ed76bc7e6e6a9f3df2ade7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f62916168d85d1189550f8af23437c65819a9982a4ed76bc7e6e6a9f3df2ade7
Size

819KB
MD5

a30f88f5390f011e3bb4f15265395190
SHA1

2bac161d1157396145c754938a5e4a78e7df7322
SHA256

f62916168d85d1189550f8af23437c65819a9982a4ed76bc7e6e6a9f3df2ade7
SHA512

0ea5f017e2515090365913ded936d7d1a24ff0ca8a55d0149ac870c4bf272876ce572fdc9e07d6d5aeef8c41ace656dc1ee51cd16671b16f1218c88b852faf8d
SSDEEP

24576:0KLt6676qRboksdnTciBGia1msDLSyXcG1WEoy0I8a0PB1Qr:386OATyTpn+msDuyXcqWEVt8a

Score

N/A

Malware Config

Signatures

Files

f62916168d85d1189550f8af23437c65819a9982a4ed76bc7e6e6a9f3df2ade7
.exe windows x86

1be73bdedafb8a73db31b415b06f12ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
lstrcatA
lstrcpynA
lstrcpynA
GetCurrentDirectoryA
ReadConsoleA
lstrcpynA
lstrcpynA
VirtualFree
lstrcpynA
FindFirstVolumeA
GetDriveTypeA
GetPrivateProfileIntA
GetFileType
lstrcpynA
GetCurrentThreadId
lstrcpynA
lstrcmpW
WriteFile
GetDiskFreeSpaceW
SetThreadPriority
GetModuleHandleA
lstrcpynA
lstrcpynA
OpenMutexW
GetVolumeInformationA
lstrcpynA
VirtualProtect
Heap32Next

d3d8

ValidatePixelShader
ValidateVertexShader
DebugSetMute
Direct3DCreate8

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 796KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ