8be616348cfed2efabed1f89b8eb11b0e5c3631ba137db2355cb4ce1a370bd20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8be616348cfed2efabed1f89b8eb11b0e5c3631ba137db2355cb4ce1a370bd20
Size

818KB
MD5

beec4ddd294e98fa9aa804ae159e33cd
SHA1

86b301e44a59dcae028f249c2ecfa595aa78080f
SHA256

8be616348cfed2efabed1f89b8eb11b0e5c3631ba137db2355cb4ce1a370bd20
SHA512

7bda3d6c0211682383d3edd72cb050f8e5005a72ba5cd550b665f057e92fadcd1f440e5fc79b8e3505284323dccc50faecf73ba19bde1ae74db6d0290060f7fb
SSDEEP

12288:0wTvWRmO58rOw17YJGCsRxKLngxMoOMF1Gi0IqWTxrLbyQzf6qmwr+rxX4HBygYJ:XvWRm5lKxs7sGMoaIqWBHzf6OaFIBG5

Score

N/A

Malware Config

Signatures

Files

8be616348cfed2efabed1f89b8eb11b0e5c3631ba137db2355cb4ce1a370bd20
.exe windows x86

ed0eb2374603286d618b256ad7132105

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
GetModuleHandleA
FindFirstVolumeW
GetDiskFreeSpaceW
lstrcpynA
lstrcpynA
GetSystemTime
VirtualProtect
WriteFile
lstrcpynA
lstrcpynA
GetCurrentDirectoryA
VirtualFree
OpenMutexW
GetCurrentThreadId
Heap32Next
lstrcatA
lstrcpynA
GetFileType
GetDriveTypeW
lstrcmpW
lstrcpynA
GetVolumeInformationA
lstrcpynA
ReadConsoleA
lstrcpynA
lstrcpynA
lstrcpynA
SetThreadPriority

d3d8

ValidateVertexShader
ValidatePixelShader
DebugSetMute
Direct3DCreate8

Sections

.text
Size: 18KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ydata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ