40528bd57f0ff9e165f5c809cc201b450c5f2d7725cd6e2b5dafba031c560802 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40528bd57f0ff9e165f5c809cc201b450c5f2d7725cd6e2b5dafba031c560802
Size

819KB
MD5

3eb6b78845915bd07eef3c156aafcfab
SHA1

15f5566be80c64e414f91d5ce36c5ac8ad317133
SHA256

40528bd57f0ff9e165f5c809cc201b450c5f2d7725cd6e2b5dafba031c560802
SHA512

5f84dedcc8dd3e5f679cd11c646f09b754d8288925a123c003511a0200ba7bc3ee4d069a4e17dadf42b52ae6866480fe4c94bcf28fd1253b1bad218e22f11ec9
SSDEEP

12288:X+HhxfoVfY7wJqE0tD91/Wd6+TT6pMoKRgEwS2rhGqzNhp5Vz2kh8Vs52Kpc:83oY7wABX+dvTatag7GqzNhp59BcKpc

Score

N/A

Malware Config

Signatures

Files

40528bd57f0ff9e165f5c809cc201b450c5f2d7725cd6e2b5dafba031c560802
.exe windows x86

b0e965f39e712977f258749173ff0f2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
Heap32Next
GetFileType
VirtualFree
lstrcatA
lstrcpynA
lstrcpynA
lstrcpynA
GetVolumeInformationA
GetCurrentThreadId
OpenMutexW
ReadConsoleA
GetDriveTypeA
lstrcpynA
GetModuleHandleA
lstrcmpW
SetThreadPriority
WriteFile
GetSystemTime
lstrcpynA
GetCurrentDirectoryA
lstrcpynA
FindFirstVolumeA
GetDiskFreeSpaceW
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
GetPrivateProfileIntA

d3d8

DebugSetMute
ValidateVertexShader
ValidatePixelShader
Direct3DCreate8

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 796KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ