36f40c6987eee18e775ef9c73de9c807b78a5a7ab9ccdb1b9ebe2b142017cbb2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36f40c6987eee18e775ef9c73de9c807b78a5a7ab9ccdb1b9ebe2b142017cbb2
Size

819KB
MD5

914d42779d88411417db8e668cd31b5a
SHA1

27aead0403ebf4e09686ed97ef885df24e364981
SHA256

36f40c6987eee18e775ef9c73de9c807b78a5a7ab9ccdb1b9ebe2b142017cbb2
SHA512

958cc274e09c84597054af657754bf5499bf6e5d03195ec18becc3db7c12e89a87941aa3c73a0d4af1812989482f8fb7c617df4766db2a1bf5d07debee50373f
SSDEEP

24576:pfl9s96fkJWK3GnPAFUaGcnkMwMpJxo6BB4:pdEJWK3qM0opJI

Score

N/A

Malware Config

Signatures

Files

36f40c6987eee18e775ef9c73de9c807b78a5a7ab9ccdb1b9ebe2b142017cbb2
.exe windows x86

f8441281f6b4256a4b38dc610c56e4d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
FindFirstVolumeA
GetModuleHandleA
VirtualFree
SetThreadPriority
WriteFile
lstrcpynA
GetDriveTypeA
VirtualProtect
Heap32Next
GetCurrentDirectoryA
ReadConsoleA
GetFileType
GetPrivateProfileIntA
GetSystemTime
lstrcpynA
GetDiskFreeSpaceW
lstrcatA
lstrcmpW
GetVolumeInformationA
lstrcpynA
lstrcpynA
OpenMutexW
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA

d3d8

Direct3DCreate8
DebugSetMute
ValidateVertexShader
ValidatePixelShader

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 796KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ