Static task
static1
Behavioral task
behavioral1
Sample
d22d9778d73394b9a949f7027a40d6818171fba304d628356cb838b2b29644f8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d22d9778d73394b9a949f7027a40d6818171fba304d628356cb838b2b29644f8.exe
Resource
win10v2004-20220901-en
General
-
Target
d22d9778d73394b9a949f7027a40d6818171fba304d628356cb838b2b29644f8
-
Size
819KB
-
MD5
8f2a16acceafc654820dbfc2b1ade477
-
SHA1
07f90cc10d9038d7b2bf35712e8fe45f3682761a
-
SHA256
d22d9778d73394b9a949f7027a40d6818171fba304d628356cb838b2b29644f8
-
SHA512
80cc519be983e1f2e6c76c7edabe7aac03124bfc647ae8d18c9ebd7fb7c286849f178f50432edbbd5e23de0bbd98545154ddc5001427c904629b8c7e42680c6b
-
SSDEEP
24576:bG7FeVrqdjxZoOEkkUEu2ZnrppxplzSwA6bhv/ug2Y8:bfVrqddokkUpQpptS16bV/uM8
Malware Config
Signatures
Files
-
d22d9778d73394b9a949f7027a40d6818171fba304d628356cb838b2b29644f8.exe windows x86
c50d7b38af45104ac28ecf12f6bc76e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
lstrcmpW
GetDriveTypeW
Heap32Next
VirtualProtect
lstrcpynA
lstrcpynA
FindFirstVolumeW
GetDiskFreeSpaceW
ReadConsoleA
GetModuleHandleA
lstrcpynA
lstrcpynA
lstrcpynA
SetThreadPriority
GetCurrentDirectoryA
lstrcpynA
GetVolumeInformationA
OpenMutexW
GetSystemTime
lstrcatA
GetFileType
lstrcpynA
VirtualFree
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
WriteFile
GetCurrentThreadId
d3d8
ValidatePixelShader
Direct3DCreate8
ValidateVertexShader
DebugSetMute
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ