Static task
static1
Behavioral task
behavioral1
Sample
e60062cf40a57df817007a3fb1bc2358a7ae9fedf64f96974902480bc32eafbe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e60062cf40a57df817007a3fb1bc2358a7ae9fedf64f96974902480bc32eafbe.exe
Resource
win10v2004-20220901-en
General
-
Target
e60062cf40a57df817007a3fb1bc2358a7ae9fedf64f96974902480bc32eafbe
-
Size
213KB
-
MD5
0b4c91c4fa2c797fd3181f313533cf90
-
SHA1
a930644408fcf3da3a9092b8f9b023886013c216
-
SHA256
e60062cf40a57df817007a3fb1bc2358a7ae9fedf64f96974902480bc32eafbe
-
SHA512
8fefe67b2233e880659720dc79d711f786a69de8711631be72146fbb05d4a2bd0a88c197a6237af417e3b395a8ee37c1253e935da4a10e41fe2ca8574c3c6848
-
SSDEEP
3072:w9Knl4Htp4SQgZUi4NgzU5gxdzMV9tF3aPwq1:wwl4NpYimwIbtF3aY
Malware Config
Signatures
Files
-
e60062cf40a57df817007a3fb1bc2358a7ae9fedf64f96974902480bc32eafbe.exe windows x86
f00d75f96ad5ba4723b707787fd0b88a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProfileStringA
GetNumberFormatW
lstrcpyA
SetFileApisToOEM
TransactNamedPipe
IsValidCodePage
CreateEventW
InterlockedExchangeAdd
GlobalAddAtomA
GetCPInfoExA
MoveFileW
SetEndOfFile
SetEnvironmentVariableA
GetStringTypeExW
DeleteFileW
GlobalFindAtomW
GetPrivateProfileStructA
ReplaceFileA
SetEvent
MoveFileExW
EnumResourceTypesA
CloseHandle
EnumTimeFormatsW
GetDevicePowerState
GetCurrentProcessId
GetSystemTimeAsFileTime
GetMailslotInfo
GetCalendarInfoW
FoldStringA
lstrcmpiA
GetTickCount
FreeEnvironmentStringsW
InitAtomTable
SetThreadAffinityMask
GlobalUnlock
user32
DrawFrame
SetMenuItemInfoW
MoveWindow
GetQueueStatus
Sections
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 340B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
epvybxb Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE