Static task
static1
Behavioral task
behavioral1
Sample
38b60b4de402e9ed0057052cd0afcabeb5e29349c6690162adb34d34ed8d466e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
38b60b4de402e9ed0057052cd0afcabeb5e29349c6690162adb34d34ed8d466e.exe
Resource
win10v2004-20220812-en
General
-
Target
38b60b4de402e9ed0057052cd0afcabeb5e29349c6690162adb34d34ed8d466e
-
Size
37KB
-
MD5
6061fe18835352a2c6b55aac56633510
-
SHA1
9bb80debc5a8e7cf590c7ecccd49f137103b36f2
-
SHA256
38b60b4de402e9ed0057052cd0afcabeb5e29349c6690162adb34d34ed8d466e
-
SHA512
9328f90a986f1f85183acdcc16fef191acdef5c04c197ace4f6835071b4b07dac82a0afd0b4fd16353ee5187657aa4232fb4016cae9f27809a2d1986453618e4
-
SSDEEP
768:bOPxcQ1oGIJPq5FO8yPBuDfNcPEkiRNZRhjsGJQOel:YfUPq5Q8GBucPEkijZRNBKl
Malware Config
Signatures
Files
-
38b60b4de402e9ed0057052cd0afcabeb5e29349c6690162adb34d34ed8d466e.exe windows x86
8eed2e6a977d03087384133097c2660f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetMessageQueue
RegisterWindowMessageA
MessageBoxA
GetFocus
PostMessageA
kernel32
GetModuleHandleA
GetStartupInfoA
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
GetModuleFileNameA
nlsrtl33
ord2
ord11
ord203
ord201
ord175
ord117
ord6
ord3
ord4
uiw60
ord8005
ord8002
og60
ord4
nn60
ord4
ord132
ord28
ord85
ord136
ord131
msvcrt
__p__commode
_adjust_fdiv
__setusermatherr
exit
_controlfp
malloc
free
strlen
strcpy
strncmp
strcmp
memset
__getmainargs
__p__acmdln
_XcptFilter
_exit
__set_app_type
__p__fmode
_initterm
_except_handler3
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fnqhcyq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE