Static task
static1
Behavioral task
behavioral1
Sample
60353041233ef3e58ea5aa3351b06cf218da727cce222fe483ea0e817f634ad0.exe
Resource
win7-20220414-en
General
-
Target
60353041233ef3e58ea5aa3351b06cf218da727cce222fe483ea0e817f634ad0
-
Size
268KB
-
MD5
7fc4fbaf58dbe28420dd8883cb1e20db
-
SHA1
ba57795d45fdab496231194477a56ae9c4df73d9
-
SHA256
60353041233ef3e58ea5aa3351b06cf218da727cce222fe483ea0e817f634ad0
-
SHA512
b168aa0dd1e156a37cff5721f9bef0f5fee15ba1005df310ef061d04d19eaaa057ba70fcf87f0b6026b1dbc4545b29816df8b7f23932cd9d97854374812aaa9a
-
SSDEEP
6144:e81kRAOsPTG+GMXLkFx1CFXNAL7KSuwuIWeqhi:f1kRqPTG+GM7kFx8FanuIWNhi
Malware Config
Signatures
Files
-
60353041233ef3e58ea5aa3351b06cf218da727cce222fe483ea0e817f634ad0.exe windows x86
19b16d7511af59a5ba6c64ccb1ad1bd0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
VirtualProtect
GetCurrentDirectoryA
Sleep
GetTempPathA
GetFileAttributesA
GetSystemDirectoryA
CloseHandle
GetStartupInfoA
CreateProcessA
GetTickCount
HeapSize
WriteConsoleW
ReadConsoleW
CreateFileW
GetProcessHeap
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLastError
GetStringTypeW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
GetFileType
HeapAlloc
HeapFree
ReadFile
SetFilePointerEx
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapReAlloc
FindClose
FindFirstFileExA
FindNextFileA
SetEndOfFile
ole32
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
CoInitialize
oledlg
ord10
ord2
ord1
ord9
ord5
Sections
.text Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 975KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ