Static task
static1
Behavioral task
behavioral1
Sample
1b35feef71c4daa1978e9d2eb1ed9fbd22c54de5281524c441d2da6ca58da271.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1b35feef71c4daa1978e9d2eb1ed9fbd22c54de5281524c441d2da6ca58da271.exe
Resource
win10v2004-20220812-en
General
-
Target
1b35feef71c4daa1978e9d2eb1ed9fbd22c54de5281524c441d2da6ca58da271
-
Size
819KB
-
MD5
f02fd3e31cb347368edeba549213fc10
-
SHA1
261768525484dad3fe77a725d198259d800583e7
-
SHA256
1b35feef71c4daa1978e9d2eb1ed9fbd22c54de5281524c441d2da6ca58da271
-
SHA512
7d4e2fffbd0474d01c2082190157b35fdfb4e0fa641bf958beb5e12841b1a579c930db32f6945e8a7c97616e6190ac99863d718c029398a2342ec92f0511b729
-
SSDEEP
12288:Kcqw1vRu6Tg18Kr2fTQzl0JCITTei0U8KrqK3qb1AbqXezelwpoGv+Zg8UsCFa:zhhT1KhStvPmXeWe+ZDUsCFa
Malware Config
Signatures
Files
-
1b35feef71c4daa1978e9d2eb1ed9fbd22c54de5281524c441d2da6ca58da271.exe windows x86
60f76e0452f684890cfe23eab73fa87c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
VirtualFree
GetSystemTime
GetCurrentDirectoryA
lstrcpynA
lstrcmpW
lstrcpynA
GetDiskFreeSpaceW
lstrcpynA
ReadConsoleA
lstrcpynA
lstrcpynA
lstrcpynA
WriteFile
GetCurrentThreadId
SetThreadPriority
lstrcpynA
VirtualProtect
GetFileType
lstrcatA
GetPrivateProfileIntA
GetVolumeInformationA
FindFirstVolumeA
GetModuleHandleA
lstrcpynA
OpenMutexW
Heap32Next
lstrcpynA
lstrcpynA
d3d8
ValidatePixelShader
Direct3DCreate8
DebugSetMute
ValidateVertexShader
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 854B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 796KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ