Static task
static1
Behavioral task
behavioral1
Sample
f60280d70c54da9d932bbc9cce33a62f28e570d5f84afe461019a6ffa117bba2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f60280d70c54da9d932bbc9cce33a62f28e570d5f84afe461019a6ffa117bba2.exe
Resource
win10v2004-20220812-en
General
-
Target
f60280d70c54da9d932bbc9cce33a62f28e570d5f84afe461019a6ffa117bba2
-
Size
124KB
-
MD5
9be93ba69e8b0832ba7e186f307a8637
-
SHA1
b7384970d3ef0a6f5000c6ca23b729bb9a830f38
-
SHA256
f60280d70c54da9d932bbc9cce33a62f28e570d5f84afe461019a6ffa117bba2
-
SHA512
7b2e9adea7026a7070c7ea7052fae1cefae98fae9330541daa7d82301b226cb3c9c865525cd04e33032c309a6fc7d4d2820fb67bf29bb7a4795851d9b68aeb5c
-
SSDEEP
1536:4DcNWsgdfGDJ8HXH4RUhuR1hl8G/my0WzRPc5z9H2QxJ2bcelDs8nQKlukrf9:qsgdeDYX4RU8nftmy0EcHkZlOKQe
Malware Config
Signatures
Files
-
f60280d70c54da9d932bbc9cce33a62f28e570d5f84afe461019a6ffa117bba2.exe windows x86
f68f7a2ed9930e10f9350ed7fd74849c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
GradientFill
AlphaBlend
kernel32
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetProfileStringW
LocalFree
LocalAlloc
CloseHandle
CreatePipe
GetModuleHandleA
GetStartupInfoW
GetVersionExA
HeapFree
HeapAlloc
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 651KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CODE Size: 4KB - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ