Static task
static1
Behavioral task
behavioral1
Sample
e560f146a7948241738a202c6b4884c4719e0c3c23f8f372f48c627b18a35a40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e560f146a7948241738a202c6b4884c4719e0c3c23f8f372f48c627b18a35a40.exe
Resource
win10v2004-20221111-en
General
-
Target
e560f146a7948241738a202c6b4884c4719e0c3c23f8f372f48c627b18a35a40
-
Size
819KB
-
MD5
9814dcdef8c5a845a2679b1db5e1b1e6
-
SHA1
8d125fd37575bf0ed27966119ee274f1401b32a5
-
SHA256
e560f146a7948241738a202c6b4884c4719e0c3c23f8f372f48c627b18a35a40
-
SHA512
ba310bd7bc3b2bf43a92c65977618f8225419482bb074bf2c716ded8780f14a64c413044eecb15644ed450d000dbad4f131bec6e6752c9081e489efc43f14754
-
SSDEEP
24576:cf8O4ffTgK1Ffh9wnxeqlLp4Dweo+zeq:E8OikMUncqP9+zeq
Malware Config
Signatures
Files
-
e560f146a7948241738a202c6b4884c4719e0c3c23f8f372f48c627b18a35a40.exe windows x86
125c71fac1628041835d3b695370cfdd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetVolumeInformationA
ReadConsoleA
GetDiskFreeSpaceW
GetDriveTypeW
lstrcpynA
lstrcpynA
GetFileType
lstrcpynA
lstrcmpW
GetModuleHandleA
GetCurrentDirectoryA
VirtualFree
lstrcpynA
FindFirstVolumeA
OpenMutexW
lstrcpynA
lstrcpynA
VirtualProtect
GetPrivateProfileIntA
lstrcpynA
Heap32Next
WriteFile
lstrcpynA
SetThreadPriority
GetSystemTime
lstrcpynA
GetCurrentThreadId
lstrcpynA
d3d8
ValidatePixelShader
Direct3DCreate8
DebugSetMute
ValidateVertexShader
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 854B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ