Static task
static1
Behavioral task
behavioral1
Sample
c60b29a2eb4729dafbc8a5595eb4ee65691d7321a05d2d7730258458cf310fe9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c60b29a2eb4729dafbc8a5595eb4ee65691d7321a05d2d7730258458cf310fe9.exe
Resource
win10v2004-20221111-en
General
-
Target
c60b29a2eb4729dafbc8a5595eb4ee65691d7321a05d2d7730258458cf310fe9
-
Size
66KB
-
MD5
c8df726e898195a5594a6e08417dbed7
-
SHA1
6fe27befebf47214809b8681c23152b1f10fa8de
-
SHA256
c60b29a2eb4729dafbc8a5595eb4ee65691d7321a05d2d7730258458cf310fe9
-
SHA512
683fb5754a1bf808d1623d7a5d5ab61ecd17214edbd614b014f3889b7f651cf53707c6f9d7d82974d27af44eee5392d88920069d3257c034497f691bd1ac68c1
-
SSDEEP
1536:LhudSE0T9tcv4OhMJjLnq2Ai8wFs6jikx1buqJxxVfBd:LhudSv9tcQdLq2Vo8buG1fL
Malware Config
Signatures
Files
-
c60b29a2eb4729dafbc8a5595eb4ee65691d7321a05d2d7730258458cf310fe9.exe windows x86
8eb052708b4489e83fd9b65442f14297
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
GetConsoleTitleA
RegisterWaitForSingleObject
VirtualProtectEx
IsBadStringPtrA
FindNextChangeNotification
DeleteFileW
MoveFileExW
GetBinaryTypeW
GetUserDefaultUILanguage
SetProcessShutdownParameters
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE