Static task
static1
Behavioral task
behavioral1
Sample
367b83d92f1b1cc65aed319626de0d2c20d5c5521113b9877f1bd7dbca715165.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
367b83d92f1b1cc65aed319626de0d2c20d5c5521113b9877f1bd7dbca715165.exe
Resource
win10v2004-20221111-en
General
-
Target
367b83d92f1b1cc65aed319626de0d2c20d5c5521113b9877f1bd7dbca715165
-
Size
819KB
-
MD5
5a7df920b485858e1044781318a3c007
-
SHA1
157df7a2f408e77afa21af6b8cab8e702f7e5f63
-
SHA256
367b83d92f1b1cc65aed319626de0d2c20d5c5521113b9877f1bd7dbca715165
-
SHA512
1396ac7a40cc1af8bf31a9a90a79095332429db1d00b99324b619733cd6ed33a155bc7f1d70a43a363f29f0371ccff4781705e679ba22ace63491ca1ffecfa71
-
SSDEEP
24576:KGVy963mVpEVxY/Yb/4CrSYFhiZH5mLIsGWA:Jy96WVDWjrSYjinTWA
Malware Config
Signatures
Files
-
367b83d92f1b1cc65aed319626de0d2c20d5c5521113b9877f1bd7dbca715165.exe windows x86
84f276d3331b4ce9c476d3f28d2466fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
VirtualProtect
GetSystemTime
ReadConsoleA
lstrcpynA
GetCurrentDirectoryA
GetDriveTypeA
Heap32Next
lstrcpynA
GetVolumeInformationA
OpenMutexW
GetFileType
lstrcmpW
lstrcpynA
GetDiskFreeSpaceW
lstrcpynA
lstrcpynA
SetThreadPriority
lstrcpynA
WriteFile
lstrcpynA
lstrcatA
lstrcpynA
FindFirstVolumeA
VirtualFree
GetCurrentThreadId
GetModuleHandleA
lstrcpynA
GetPrivateProfileIntA
d3d8
ValidatePixelShader
DebugSetMute
ValidateVertexShader
Direct3DCreate8
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 854B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ