Static task
static1
Behavioral task
behavioral1
Sample
660b94ff937c4243b19be5cb76cf8ddbdc5554af7c323ac0e57435ab7349299a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
660b94ff937c4243b19be5cb76cf8ddbdc5554af7c323ac0e57435ab7349299a.exe
Resource
win10v2004-20220812-en
General
-
Target
660b94ff937c4243b19be5cb76cf8ddbdc5554af7c323ac0e57435ab7349299a
-
Size
300KB
-
MD5
82694e642397c48088793d440b112800
-
SHA1
c0f0c2b966e946c4b4921e05fb5151daf64f7fa6
-
SHA256
660b94ff937c4243b19be5cb76cf8ddbdc5554af7c323ac0e57435ab7349299a
-
SHA512
015780706f19e8b2763df563a6867d95147532cb0fecee98080471205e6699e9e91c00a7df61ffae3d1604d8bfc43ed12cd79cb517661aecc39805c6b5b699ed
-
SSDEEP
6144:yWnY4hSfazGEut2vjS/P89dpPsgsQdeZH3RPZSFDF:x3Qf4GvUmPonPi7ZH34
Malware Config
Signatures
Files
-
660b94ff937c4243b19be5cb76cf8ddbdc5554af7c323ac0e57435ab7349299a.exe windows x86
ffd9f7b2bf203a3708f05ffb0f1eb438
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeW
IsValidCodePage
GetFileAttributesA
CancelIo
GetProcessHeap
CreateMailslotW
FindResourceA
GetModuleHandleA
GetCommandLineA
IsBadWritePtr
GetStdHandle
RemoveDirectoryA
CreateDirectoryA
MapViewOfFile
VirtualProtect
ResetEvent
HeapSize
GetLocaleInfoA
SetLastError
FindClose
GetExitCodeThread
user32
SetCursor
DispatchMessageA
wsprintfA
GetWindowLongW
PeekMessageA
GetCapture
LoadCursorA
IsDialogMessageA
PostMessageW
LoadImageW
GetWindowTextW
SetFocus
DestroyMenu
ipsmsnap
DllCanUnloadNow
DllGetClassObject
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE