Static task
static1
Behavioral task
behavioral1
Sample
01060e57b8df14aadc38b8534679b0b4d8cf18081f3d515687a630673823ef4c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
01060e57b8df14aadc38b8534679b0b4d8cf18081f3d515687a630673823ef4c.exe
Resource
win10v2004-20230221-en
General
-
Target
01060e57b8df14aadc38b8534679b0b4d8cf18081f3d515687a630673823ef4c
-
Size
88KB
-
MD5
2e854477a68f1b5599b378b6a3cbfc5b
-
SHA1
ed5cfc4ca140cf85c49d93cf50db8f67e83feb0e
-
SHA256
01060e57b8df14aadc38b8534679b0b4d8cf18081f3d515687a630673823ef4c
-
SHA512
a0efb6aeb0cad28a2ad0bc61a0db73800ac148daa9199bfb03579a6215344bbd8df54730812c49548d3e8148ed23996f4a4e35193054d68bbdd4d151c1260aac
-
SSDEEP
1536:spL/y9C5xfxbeIgXDbRqJF1iD/AJKc2/UNoCsAR:UG9C5PbeIWD1qpU/AJKh/UNowR
Malware Config
Signatures
Files
-
01060e57b8df14aadc38b8534679b0b4d8cf18081f3d515687a630673823ef4c.exe windows x86
6d7c669b4dacc91241e7d6cf98ac64c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
GetExitCodeProcess
GetLastError
Sleep
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
GetTickCount
GetTempFileNameA
GetWindowsDirectoryA
lstrcpynA
lstrcmpA
_lopen
GetSystemDirectoryA
MulDiv
GetCurrentProcess
GetVersionExA
GetTempPathA
FindFirstFileA
FindClose
FindNextFileA
GetShortPathNameA
DeleteFileA
CopyFileA
RemoveDirectoryA
SetFileAttributesA
_hread
GetFileAttributesA
MoveFileExA
GetCurrentDirectoryA
SetCurrentDirectoryA
WriteFile
VirtualFree
HeapCreate
GlobalHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
CloseHandle
GetModuleFileNameA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
GetOEMCP
GetACP
GetCPInfo
SetEndOfFile
GetStdHandle
SetHandleCount
SetStdHandle
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
MoveFileA
RtlUnwind
CreateFileA
GetStringTypeA
GetFileType
ReadFile
SetFilePointer
GetStringTypeW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GlobalUnlock
GlobalFree
lstrlenA
lstrcatA
WriteProfileStringA
OpenFile
_lread
_llseek
_lclose
lstrcmpiA
GetProcAddress
GetPrivateProfileStringA
WritePrivateProfileStringA
GlobalAlloc
FreeEnvironmentStringsA
GlobalLock
LoadLibraryA
FindResourceA
LoadResource
LockResource
lstrcpyA
FreeResource
FreeLibrary
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
HeapDestroy
user32
DdeConnect
DdeCreateStringHandleA
DdeFreeDataHandle
DdeUnaccessData
DdeAccessData
DdeUninitialize
DdeClientTransaction
DdeGetLastError
DdeDisconnect
DdeFreeStringHandle
DdeInitializeA
ExitWindowsEx
FindWindowA
LoadStringA
MessageBoxA
PostMessageA
GetDlgItemTextA
SetFocus
EndDialog
SetDlgItemTextA
GetDC
ReleaseDC
FillRect
GetDlgItem
InvalidateRect
ScreenToClient
OffsetRect
PeekMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
GetSysColor
CreateDialogParamA
ShowWindow
UpdateWindow
SendMessageA
GetWindow
SetWindowTextA
BeginPaint
EndPaint
GetParent
IsWindowVisible
GetDesktopWindow
GetWindowRect
MoveWindow
wsprintfA
CharUpperA
DialogBoxParamA
gdi32
CreateSolidBrush
GetObjectA
CreateFontIndirectA
DeleteObject
RemoveFontResourceA
GetDeviceCaps
advapi32
RegDeleteKeyA
DeleteService
QueryServiceStatus
ControlService
RegQueryValueExA
RegQueryValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
OpenSCManagerA
CloseServiceHandle
RegEnumKeyA
RegOpenKeyA
RegSetValueA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExA
RegDeleteValueA
OpenServiceA
shell32
SHChangeNotify
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteExA
ole32
OleUninitialize
OleInitialize
StringFromGUID2
oleaut32
LoadTypeLi
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ