Static task
static1
Behavioral task
behavioral1
Sample
60b141fb00b007bd09ca53c5cd877aa8b6c74ee9050f6c8fad98b539c980f5ad.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
60b141fb00b007bd09ca53c5cd877aa8b6c74ee9050f6c8fad98b539c980f5ad.exe
Resource
win10v2004-20220901-en
General
-
Target
60b141fb00b007bd09ca53c5cd877aa8b6c74ee9050f6c8fad98b539c980f5ad
-
Size
201KB
-
MD5
5f9c0dea08fe525afa838dba82f46b29
-
SHA1
8f90085503a2842befb22baccc81f4e63c837f4d
-
SHA256
60b141fb00b007bd09ca53c5cd877aa8b6c74ee9050f6c8fad98b539c980f5ad
-
SHA512
c12ac5c101e2376153f340f7fa7e91759bcfefd5c42f956d3cc882c46e358eee249899027165a23413d6dbe05b6a826e668929cdf37f41ef6ff63fab95d47826
-
SSDEEP
6144:pd2+I+GTWiwghVIwRYqyOe7swmh0jzSjJJ9:XprAWsbIw4meu
Malware Config
Signatures
Files
-
60b141fb00b007bd09ca53c5cd877aa8b6c74ee9050f6c8fad98b539c980f5ad.exe windows x86
dd8b7d6b572302f6d85d9cfe7fdcd4d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
certcli
CAFreeCAProperty
CACertTypeSetSecurity
CAGetCAProperty
CAGetCertTypeKeySpec
CACreateCertType
CAEnumNextCertType
CARemoveCACertificateType
CASetCertTypeExtension
CAGetCertTypeExtensions
CAEnumCertTypes
CAEnumCertTypesForCA
CAUpdateCertType
CAGetCertTypePropertyEx
CAGetCertTypeFlags
CACertTypeGetSecurity
CAFreeCertTypeExtensions
CASetCertTypeFlags
CAFindCertTypeByName
CAUpdateCA
CAGetCertTypeProperty
CASetCertTypeKeySpec
CAFreeCertTypeProperty
CASetCertTypeProperty
CACloseCertType
CACloseCA
CAFindByName
CAAddCACertificateType
msvcrt
_purecall
__RTDynamicCast
_adjust_fdiv
wcsrchr
wcslen
_wcsicmp
memmove
wcschr
??1type_info@@UAE@XZ
wcstoul
mbstowcs
wcscmp
__dllonexit
?terminate@@YAXXZ
_wcsupr
malloc
??3@YAXPAX@Z
free
_except_handler3
_initterm
wcscpy
wcscat
_onexit
vswprintf
wcsstr
??2@YAPAXI@Z
kernel32
GlobalUnlock
GetStartupInfoA
GetDateFormatW
WideCharToMultiByte
InitializeCriticalSection
InterlockedIncrement
lstrcpyW
GetEnvironmentStringsW
lstrcmpiW
GlobalLock
LocalReAlloc
GetSystemWindowsDirectoryW
GlobalAlloc
GlobalFree
FormatMessageW
CloseHandle
FileTimeToSystemTime
GetModuleFileNameW
LoadLibraryW
GetSystemTimeAsFileTime
IsBadReadPtr
GetModuleHandleA
FileTimeToLocalFileTime
GetTickCount
SetLastError
RemoveDirectoryA
CreateFileW
GetCurrentProcess
GetComputerNameW
LocalFree
SetUnhandledExceptionFilter
DeleteCriticalSection
GetACP
InterlockedDecrement
lstrlenW
OutputDebugStringA
QueryPerformanceCounter
GetSystemDefaultLangID
OutputDebugStringW
GetLastError
user32
LoadImageW
MessageBoxW
GetWindowLongW
SetWindowLongW
SendDlgItemMessageW
RegisterClipboardFormatW
PostMessageW
LoadCursorW
SetFocus
InsertMenuItemW
EndDialog
ReleaseDC
EnableWindow
GetDC
LoadIconW
wsprintfW
SetWindowTextW
GetDlgItemTextA
SetCursor
WinHelpW
LoadStringW
SystemParametersInfoW
LoadBitmapW
GetDlgItem
DialogBoxParamW
GetParent
SendMessageW
SetDlgItemTextW
comctl32
PropertySheetW
CreatePropertySheetPageW
Sections
.text Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ