Static task
static1
Behavioral task
behavioral1
Sample
c60979959c8368344e07ec922151efc3e1c037cc924fa2e82ed9cbb5f8891092.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c60979959c8368344e07ec922151efc3e1c037cc924fa2e82ed9cbb5f8891092.exe
Resource
win10v2004-20220812-en
General
-
Target
c60979959c8368344e07ec922151efc3e1c037cc924fa2e82ed9cbb5f8891092
-
Size
312KB
-
MD5
0f4446fc8468d9ba1064938802b725f0
-
SHA1
0956941d8039de1480a3e156e27b4edb1f4fe518
-
SHA256
c60979959c8368344e07ec922151efc3e1c037cc924fa2e82ed9cbb5f8891092
-
SHA512
73d401a1a07d12c44d6ba1d25a55fed35566920d9075873043a4b1d33931c0c5b8654ebcfcd55e0b96fe4d45a010e4515b5c6e6c94462c5c4917fb82db549bee
-
SSDEEP
3072:ZbNiFb3LcrVMmg3yREQIiMTsR7dBkjReGRnlDrFG0GnKSLqotXeMyNyLvXso5Xst:HE34JMAREQI9TsrBk9eGLXs18yLvjd
Malware Config
Signatures
Files
-
c60979959c8368344e07ec922151efc3e1c037cc924fa2e82ed9cbb5f8891092.exe windows x86
5e51cb93feb3c61edb3ada611032cf65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
GlobalUnlock
FreeResource
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentDirectoryA
CreateFileA
GetFileSize
ReadFile
CloseHandle
OpenProcess
GetSystemInfo
VirtualQueryEx
ReadProcessMemory
lstrcmpW
lstrcmpA
FlushFileBuffers
GetConsoleOutputCP
WriteConsoleA
GetLastError
GetLocaleInfoA
Sleep
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
RtlUnwind
InitializeCriticalSection
LoadLibraryW
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
DebugBreak
GetConsoleMode
GetConsoleCP
SetFilePointer
WriteFile
GetFileType
CreateMutexW
GlobalAlloc
GetProcessHeap
SetStdHandle
HeapAlloc
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
RaiseException
SetLastError
TlsFree
GetModuleHandleA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
GetCPInfo
HeapValidate
IsBadReadPtr
GetCommandLineA
HeapFree
GetVersionExA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetModuleFileNameA
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InterlockedIncrement
InterlockedDecrement
GetProcAddress
ExitProcess
GetACP
GetOEMCP
user32
GetClassNameA
DispatchMessageW
UpdateWindow
SendMessageW
GetDC
GetClientRect
InvalidateRect
BeginPaint
ReleaseDC
EndPaint
CreateWindowExA
LoadIconW
LoadCursorW
RegisterClassExA
ShowWindow
DefWindowProcW
GetWindowTextA
SetWindowTextA
SetTimer
GetMessageW
SendMessageA
CreateWindowExW
SetForegroundWindow
SetFocus
SetWindowPos
GetWindowLongW
SetWindowLongW
GetWindowThreadProcessId
SetWindowRgn
GetClassNameW
GetWindow
GetForegroundWindow
CallWindowProcW
FrameRect
InflateRect
MoveWindow
TranslateMessage
gdi32
CreateSolidBrush
CreateRoundRectRgn
GetDeviceCaps
CreateFontIndirectA
ole32
CreateStreamOnHGlobal
gdiplus
GdiplusStartup
GdipGetImageWidth
GdipGetImageHeight
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectI
GdipLoadImageFromStream
GdipCloneImage
GdipDisposeImage
GdipFree
GdipAlloc
comctl32
_TrackMouseEvent
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetCrackUrlA
InternetReadFile
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ