Static task
static1
Behavioral task
behavioral1
Sample
cc7bad3417eee5888cc5e11b78b9c1729576a130959007011cc42438efff0884.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cc7bad3417eee5888cc5e11b78b9c1729576a130959007011cc42438efff0884.exe
Resource
win10v2004-20220812-en
General
-
Target
cc7bad3417eee5888cc5e11b78b9c1729576a130959007011cc42438efff0884
-
Size
819KB
-
MD5
f6c33b774b5dbaa8c893e6d6225bbf07
-
SHA1
0d86c334e123067758603ec08873679993575057
-
SHA256
cc7bad3417eee5888cc5e11b78b9c1729576a130959007011cc42438efff0884
-
SHA512
7f3c756540d784a7b2bbe2421052aa71715bd2a3efd877f14ce331be53512437ccc19f62b99e37a9e9e6f989a5db5b7fc82d04edc43bb7a85e4ce5f147d6e24d
-
SSDEEP
24576:rywLKiDLq/Q2+VE0kBPn8QDdlG4JknevZ:ryfo2AkFvD40Z
Malware Config
Signatures
Files
-
cc7bad3417eee5888cc5e11b78b9c1729576a130959007011cc42438efff0884.exe windows x86
5193d5a7eef945d5e459b2dc496c0f9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceW
lstrcpynA
WriteFile
VirtualFree
GetCurrentThreadId
lstrcpynA
GetDriveTypeW
lstrcmpW
lstrcatA
GetFileType
SetThreadPriority
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
Heap32Next
lstrcpynA
lstrcpynA
GetCurrentDirectoryA
FindFirstVolumeW
lstrcpynA
lstrcpynA
lstrcpynA
GetSystemTime
GetModuleHandleA
OpenMutexW
lstrcpynA
ReadConsoleA
VirtualProtect
GetVolumeInformationA
d3d8
Direct3DCreate8
ValidatePixelShader
ValidateVertexShader
DebugSetMute
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ