Static task
static1
Behavioral task
behavioral1
Sample
60acdc7415f80f72c504a0fe6e7534c40f2987b58d156ae8fc3fd3a97827788a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
60acdc7415f80f72c504a0fe6e7534c40f2987b58d156ae8fc3fd3a97827788a.exe
Resource
win10v2004-20220901-en
General
-
Target
60acdc7415f80f72c504a0fe6e7534c40f2987b58d156ae8fc3fd3a97827788a
-
Size
79KB
-
MD5
801841a1c98e61e3af7b21c3144988f0
-
SHA1
ce49d180daed007b6b3a4dbcae2408bc7b92cc02
-
SHA256
60acdc7415f80f72c504a0fe6e7534c40f2987b58d156ae8fc3fd3a97827788a
-
SHA512
e9fe4d17f5149335dc3d3193a105530237b93d3729e6347722635606cbfe33891fe31373101838d30666e20c8a4e08411fcce6319b1624549e1c073c6f071cb6
-
SSDEEP
1536:d+3Le8Ijge2LKEivuGWh3I5iLMfOuvHWHBjKV925DS4:d+be8IjfNWh45iLMWuv2Zc85D
Malware Config
Signatures
Files
-
60acdc7415f80f72c504a0fe6e7534c40f2987b58d156ae8fc3fd3a97827788a.exe windows x86
a00d4ea0a0ed44665938b1e0a9771930
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileAttributesExA
SetFileAttributesA
CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
Sleep
CreateFileA
GetVersion
GetProcAddress
GetModuleHandleW
GetLastError
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetModuleFileNameA
GetDriveTypeA
UnhandledExceptionFilter
user32
CharNextExA
DispatchMessageA
PeekMessageA
SendDlgItemMessageA
EnableMenuItem
GetSystemMenu
CreateDialogParamA
DestroyWindow
MessageBoxA
msvcrt
_errno
_mkdir
_write
_read
_eof
_tempnam
strpbrk
strspn
memcpy
atoi
isdigit
_chmod
strchr
_lseek
_chsize
tolower
getenv
_filelength
_stricmp
fgets
_iob
strncmp
exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
__doserrno
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
memset
?terminate@@YAXXZ
_controlfp
_vsnprintf
malloc
_strdup
free
_open
printf
_close
_unlink
isalpha
_getdrive
toupper
_stat
_initterm
comctl32
ord17
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lyqhpmz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE