Static task
static1
Behavioral task
behavioral1
Sample
f60436acf0ed83c5537c538de261692cf69b4952b349b62ef3f037831a16660e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f60436acf0ed83c5537c538de261692cf69b4952b349b62ef3f037831a16660e.exe
Resource
win10v2004-20220812-en
General
-
Target
f60436acf0ed83c5537c538de261692cf69b4952b349b62ef3f037831a16660e
-
Size
135KB
-
MD5
0efb5b5312e3bc8f64410a66bea9fab0
-
SHA1
8d4aff8ca0e103e569b332938271dc2c8eeb351d
-
SHA256
f60436acf0ed83c5537c538de261692cf69b4952b349b62ef3f037831a16660e
-
SHA512
5dc0cce30fb64c793a87cd6f8547509d874bded8407a80deccd23fb67b48e19ccf5407fbe789f0fd3e07f05fbf1288fc51ed130ac4c441dbd8565bf3c48c056f
-
SSDEEP
3072:6Q0kMPr2ENjyAYNVMkGC5InhE+jIB+FB9H8wvrvHiDQipJZOPnnN5wJVW:NlArDRDk2E+EIFB9H8WuDQInOE
Malware Config
Signatures
Files
-
f60436acf0ed83c5537c538de261692cf69b4952b349b62ef3f037831a16660e.exe windows x86
91d57720a119d8b9f099deec4276c60b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlZeroMemory
GetPrivateProfileSectionA
CreateFileA
GetTempFileNameA
CreateWaitableTimerW
GlobalFlags
GlobalFree
OpenFileMappingA
GlobalGetAtomNameW
SetThreadPriorityBoost
GetFullPathNameA
FindResourceA
InterlockedDecrement
SetCalendarInfoA
FindResourceExW
WriteProfileSectionW
FatalExit
SetThreadAffinityMask
TransactNamedPipe
SetFilePointer
WaitNamedPipeA
GetTimeZoneInformation
FormatMessageA
FindResourceExA
GlobalAddAtomA
GetModuleHandleA
SuspendThread
TlsAlloc
OutputDebugStringW
GetStdHandle
GetVolumeNameForVolumeMountPointA
GetProcessAffinityMask
GetUserDefaultUILanguage
CloseHandle
GetThreadSelectorEntry
user32
DdeSetQualityOfService
CharPrevExA
EnumDesktopsA
SetMessageQueue
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 471B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ