Static task
static1
Behavioral task
behavioral1
Sample
b60e0f0d32968d1aba695e9b544f8b94abbf2b77c841ff79ad03eb858a58f686.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b60e0f0d32968d1aba695e9b544f8b94abbf2b77c841ff79ad03eb858a58f686.exe
Resource
win10v2004-20220812-en
General
-
Target
b60e0f0d32968d1aba695e9b544f8b94abbf2b77c841ff79ad03eb858a58f686
-
Size
198KB
-
MD5
434bae9505afabc7427eb6a4629053d0
-
SHA1
f9f9d25715945973f0c3cd0ddc633a3eee686aa9
-
SHA256
b60e0f0d32968d1aba695e9b544f8b94abbf2b77c841ff79ad03eb858a58f686
-
SHA512
670ab622dd77f97a59d53ba3c4270cd93939e3ac719e6199b9c3229a0dee5bb84a8d8b7ee855052963fac4d563cc9be3fd078269e30e7f4303c37702db71c5d8
-
SSDEEP
3072:rH+mrh42ya4kcFoWZHlWzzXGOJlBpPlPlU6Va0Th+7dUchBUp:r9rh42xcTHlrMXRlPr+7dd
Malware Config
Signatures
Files
-
b60e0f0d32968d1aba695e9b544f8b94abbf2b77c841ff79ad03eb858a58f686.exe windows x86
f9cb13eaf34ee76d9832e3edb319c9e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
SHGetSpecialFolderPathA
kernel32
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
LockResource
LoadResource
CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetModuleHandleA
advapi32
RegSetValueExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 1024B - Virtual size: 734B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 542B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE