Static task
static1
Behavioral task
behavioral1
Sample
60bad3321d0d49bc0e3faf1f7e5d2c208501602561bfdbd91a848b0e320650b1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
60bad3321d0d49bc0e3faf1f7e5d2c208501602561bfdbd91a848b0e320650b1.exe
Resource
win10v2004-20220901-en
General
-
Target
60bad3321d0d49bc0e3faf1f7e5d2c208501602561bfdbd91a848b0e320650b1
-
Size
22KB
-
MD5
866bbcbed886b2d55e37978fdff3afc2
-
SHA1
7356c66dceef32e0c308b45a1c40e915ce550dea
-
SHA256
60bad3321d0d49bc0e3faf1f7e5d2c208501602561bfdbd91a848b0e320650b1
-
SHA512
6be8750734876a693cd392e2a2f8b8fabb23f0f70a8e1fedf10d33f8c1bd56fa166f0e00f1e1a09dbf07c1d7fcedd59282f7b6b55b6e1a30de0aed3546f27050
-
SSDEEP
384:ErkYfU90X8fS9mk3yOu67AC+UglLJicnogC5qiTTPpNvUHXLTCVWlwWQfb3:Mgqfy01glLU3gCpOhs3
Malware Config
Signatures
Files
-
60bad3321d0d49bc0e3faf1f7e5d2c208501602561bfdbd91a848b0e320650b1.exe windows x86
a839e61d4b4dbbad7bb9ac884d75a856
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
free
__initenv
_cexit
_XcptFilter
_exit
_c_exit
strchr
__getmainargs
fgets
wcscat
wcstok
wcschr
_wcsupr
wcsncpy
swprintf
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_iob
sscanf
strspn
strpbrk
_stricmp
_itoa
wcscmp
wcsrchr
exit
wcscpy
_wcsicmp
wcslen
malloc
_except_handler3
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
kernel32
LocalAlloc
GetProfileIntA
GetProfileStringA
GetModuleHandleA
GetCPInfo
SetThreadLocale
GetSystemDefaultLangID
LoadLibraryW
GetCommandLineW
ReadConsoleW
GetSystemTime
GetThreadLocale
GetTimeFormatW
GetLastError
GetConsoleOutputCP
LocalFree
WriteConsoleW
WriteFile
GetStdHandle
GetFileType
WideCharToMultiByte
LoadLibraryExW
FreeLibrary
MultiByteToWideChar
FormatMessageW
netapi32
NetScheduleJobAdd
NetApiBufferFree
NetScheduleJobEnum
NetScheduleJobDel
NetScheduleJobGetInfo
I_NetNameValidate
shell32
CommandLineToArgvW
user32
wsprintfW
ntdll
NtQuerySystemTime
RtlTimeToSecondsSince1970
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ