Static task
static1
Behavioral task
behavioral1
Sample
0e60a6cbaf737a00bb0c53efc86bc472fc25d65eb46c794cd7673c2f172bf340.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0e60a6cbaf737a00bb0c53efc86bc472fc25d65eb46c794cd7673c2f172bf340.exe
Resource
win10v2004-20220901-en
General
-
Target
0e60a6cbaf737a00bb0c53efc86bc472fc25d65eb46c794cd7673c2f172bf340
-
Size
45KB
-
MD5
b105cf65c9cb39dbbf8205ae808e32bb
-
SHA1
1f20329faa47ee177d66554f7630b41523dff13c
-
SHA256
0e60a6cbaf737a00bb0c53efc86bc472fc25d65eb46c794cd7673c2f172bf340
-
SHA512
03939320f8f327ae5a037c3190571e763c14499d82cf80175c8427e65b898221be236a45f039350e4e6c102d69c8b27a7d4984f9f9234951ce7b5bbccf01fd67
-
SSDEEP
768:STsHctAojzDYr+t2FuV//IavC0x7M86pT7KHPdwkcFIk06hkHt2xVD:STsO/H8uVIPG+p3EEIJ6uwVD
Malware Config
Signatures
Files
-
0e60a6cbaf737a00bb0c53efc86bc472fc25d65eb46c794cd7673c2f172bf340.exe windows x86
77ff6043d59f7b4efca2b7cb507537c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MulDiv
GetFullPathNameW
GetACP
GetDateFormatW
GetTimeFormatW
GlobalLock
GlobalUnlock
GetCommandLineW
HeapAlloc
VirtualAlloc
LoadLibraryA
VirtualProtect
GetProcAddress
GetCurrentProcessId
FoldStringW
GetModuleHandleA
lstrcmpW
FindFirstFileW
FindClose
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GlobalAlloc
user32
SetCursor
SetWindowPos
GetWindowTextW
CreateDialogParamW
DialogBoxParamW
EnableWindow
SetForegroundWindow
FindWindowW
GetSystemMetrics
MoveWindow
SendMessageW
CharNextW
CheckMenuItem
CloseClipboard
IsClipboardFormatAvailable
GetMenuState
EnableMenuItem
OpenClipboard
advapi32
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
IsTextUnicode
RegOpenKeyExW
RegCreateKeyW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegOpenKeyA
OpenSCManagerW
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ