Static task
static1
Behavioral task
behavioral1
Sample
2379b82dca5f869d41bea1c4d06a3c7acec981dabf190c3a60db7680f7de1cb3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2379b82dca5f869d41bea1c4d06a3c7acec981dabf190c3a60db7680f7de1cb3.exe
Resource
win10v2004-20220812-en
General
-
Target
2379b82dca5f869d41bea1c4d06a3c7acec981dabf190c3a60db7680f7de1cb3
-
Size
819KB
-
MD5
5f21e5540105672f600e9aa9b5c379af
-
SHA1
76c0d387939cf1e9e2c01850073cd1e9897e2993
-
SHA256
2379b82dca5f869d41bea1c4d06a3c7acec981dabf190c3a60db7680f7de1cb3
-
SHA512
94ae140dc23aa64372907312d8f9a5b476d3ffe9a718a71e675bb2aa1b01adec51dfd6882fb5d06ebbb57afc57acda85a3da5837bc0b3ced643c546ff6841846
-
SSDEEP
24576:3Bq+WeHSTyOTMi+WGXpztZFJOlavE3Uqzus:3Bq+ryy8GXppZelavEBP
Malware Config
Signatures
Files
-
2379b82dca5f869d41bea1c4d06a3c7acec981dabf190c3a60db7680f7de1cb3.exe windows x86
80d529427ad7c397e7a6c846b620a546
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
lstrcpynA
GetCurrentThreadId
GetDriveTypeW
VirtualFree
lstrcpynA
lstrcpynA
GetModuleHandleA
VirtualProtect
lstrcpynA
SetThreadPriority
Heap32Next
lstrcpynA
lstrcpynA
GetPrivateProfileIntA
lstrcatA
lstrcpynA
FindFirstVolumeA
ReadConsoleA
GetCurrentDirectoryA
GetDiskFreeSpaceW
GetFileType
GetSystemTime
WriteFile
lstrcpynA
lstrcmpW
lstrcpynA
lstrcpynA
OpenMutexW
d3d8
DebugSetMute
Direct3DCreate8
ValidatePixelShader
ValidateVertexShader
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 854B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ