Static task
static1
Behavioral task
behavioral1
Sample
6e37cd7ddc62680d7eb890d7f3d6f1e48307ea196ed77ba14245dbd7ba0fbcd4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6e37cd7ddc62680d7eb890d7f3d6f1e48307ea196ed77ba14245dbd7ba0fbcd4.exe
Resource
win10v2004-20220901-en
General
-
Target
6e37cd7ddc62680d7eb890d7f3d6f1e48307ea196ed77ba14245dbd7ba0fbcd4
-
Size
819KB
-
MD5
709fa18c77b825505af299d941c49653
-
SHA1
04ee07da3409c0878f6462ba7de67cfbb9f08d90
-
SHA256
6e37cd7ddc62680d7eb890d7f3d6f1e48307ea196ed77ba14245dbd7ba0fbcd4
-
SHA512
02faff186fce900f4ce6cacf55576844cb89aff1bfb35b4cdd1e8b2282e6ed18c25e27bf2830cb063ed0e423719d101017fe7763449602cf4922cc2e6e597e0f
-
SSDEEP
12288:PM9t+6btjbf0w5QU2Oczokqyv+2nCsaVFonDv5Y4ba+XkHePR79LffJKFAEFX:U9DbVL2UELgs6wDv5Y3aAERRsFX
Malware Config
Signatures
Files
-
6e37cd7ddc62680d7eb890d7f3d6f1e48307ea196ed77ba14245dbd7ba0fbcd4.exe windows x86
5eb88f863ee4d2d45b2307f42e298b6e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
GetVolumeInformationA
OpenMutexW
lstrcpynA
lstrcpynA
lstrcpynA
GetSystemTime
lstrcpynA
ReadConsoleA
WriteFile
FindFirstVolumeW
GetDiskFreeSpaceW
VirtualProtectEx
GetCurrentThreadId
lstrcmpW
lstrcpynA
GetModuleHandleA
lstrcpynA
GetPrivateProfileIntA
lstrcpynA
lstrcatA
GetDriveTypeW
lstrcpynA
Heap32Next
lstrcpynA
lstrcpynA
VirtualFree
SetThreadPriority
GetFileType
d3d8
DebugSetMute
ValidateVertexShader
ValidatePixelShader
Direct3DCreate8
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ