Static task
static1
Behavioral task
behavioral1
Sample
e60f55841944876ebe73cc60214cf28633828190746469fa7cff546289ec3848.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e60f55841944876ebe73cc60214cf28633828190746469fa7cff546289ec3848.exe
Resource
win10v2004-20221111-en
General
-
Target
e60f55841944876ebe73cc60214cf28633828190746469fa7cff546289ec3848
-
Size
199KB
-
MD5
643468e51b9f1202817cb7c27ef51ac9
-
SHA1
412f880ef0a9bb9aa03a5ed3941320ab1302940d
-
SHA256
e60f55841944876ebe73cc60214cf28633828190746469fa7cff546289ec3848
-
SHA512
5f06660d2bd641ae913f58c5e22d0d33ba299bbba97e51dcd0ceb894155ecea81961e3eb5e775e60455e2d2fc2cdb27b33c3b58c31237fa66cf517fc4bb09e8d
-
SSDEEP
6144:0kKaPtMe6s2H6CbQyUWZ97AJe+hdnFdiskBGy6ScAvkC:JNtMFss6CbzZADdnFYNcancC
Malware Config
Signatures
Files
-
e60f55841944876ebe73cc60214cf28633828190746469fa7cff546289ec3848.exe windows x86
0493264954cd5100c5fa796a7d50d2fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
__p__fmode
__set_app_type
_controlfp
_cexit
_adjust_fdiv
_except_handler3
_XcptFilter
_exit
_c_exit
__setusermatherr
_initterm
__getmainargs
__initenv
_write
strchr
puts
exit
kernel32
FormatMessageA
LocalFree
GetModuleHandleA
GetLastError
user32
CharToOemBuffA
ws2_32
gethostname
WSAStartup
mswsock
s_perror
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 192KB - Virtual size: 1.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE