Static task
static1
Behavioral task
behavioral1
Sample
0b60e8315ae0e3a4073dd8aded9829900baed8aee716ad8024246265d83e0a47.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0b60e8315ae0e3a4073dd8aded9829900baed8aee716ad8024246265d83e0a47.exe
Resource
win10v2004-20220812-en
General
-
Target
0b60e8315ae0e3a4073dd8aded9829900baed8aee716ad8024246265d83e0a47
-
Size
65KB
-
MD5
8d4fb7c8d0d9c5f1e18642616f4bcb89
-
SHA1
a8ab417106c39cef33d7f9d792aca148c1469e5b
-
SHA256
0b60e8315ae0e3a4073dd8aded9829900baed8aee716ad8024246265d83e0a47
-
SHA512
4d06bc372dc5cd2cbdfbc5599903401dcb96fed03ace82ee944e95823b3461b92348063d725aa83c34771696bc4d70b5a7840dbb08df14d8c7ea0b8071140f90
-
SSDEEP
1536:NwblRhvwzxvzdd0S7AxZPfNaqtAwcduFaMql8hUl:WbpUzdR2ABZ8s
Malware Config
Signatures
Files
-
0b60e8315ae0e3a4073dd8aded9829900baed8aee716ad8024246265d83e0a47.exe windows x86
b6f5508190de349bf7411233baa18a41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddLocalAlternateComputerNameA
IsValidLanguageGroup
LZDone
Thread32First
GetStdHandle
FindNextVolumeA
lstrcpynW
HeapCompact
CloseProfileUserMapping
InterlockedExchange
GetModuleHandleExW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE