Static task
static1
Behavioral task
behavioral1
Sample
713e0fc8cb445d0a094c33347385b76d6a7d540fda15bec3ce66299d8c0e8cbc.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
713e0fc8cb445d0a094c33347385b76d6a7d540fda15bec3ce66299d8c0e8cbc.exe
Resource
win10-en-20211208
General
-
Target
713e0fc8cb445d0a094c33347385b76d6a7d540fda15bec3ce66299d8c0e8cbc
-
Size
92KB
-
MD5
a068bf4b31738a08ed06924c7bf37223
-
SHA1
e45b046dddea65f987e4a8e4b0fe47711fbb346c
-
SHA256
713e0fc8cb445d0a094c33347385b76d6a7d540fda15bec3ce66299d8c0e8cbc
-
SHA512
7e8bcb5e64138230631f4a05472c600457f24540c78fbbcec037b770954cf4cc27bc629431868525c01b989b5901cbad99c46608867e57154ecfecb1d88f62fb
-
SSDEEP
1536:NMXdWZ31xFf13d8I+l+UfQ1b1D4HHRFGVkrbLtyhGOkkLmPWXK2s9j+LtQ9qemft:N8WxdcIuVfQ1xD4Hx8VUXf/kLmuXga2w
Malware Config
Signatures
Files
-
713e0fc8cb445d0a094c33347385b76d6a7d540fda15bec3ce66299d8c0e8cbc.exe windows x86
cc87b6ab92bd37fc5350c568b41e7ea7
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
Sleep
GetCurrentProcess
LocalFree
LocalAlloc
FreeLibrary
GetFileSize
ReadFile
SetFilePointer
CloseHandle
CreateFileA
GetProcAddress
HeapAlloc
HeapFree
GetProcessHeap
LoadLibraryA
ntdll
memset
memcpy
NtQueryVirtualMemory
RtlUnwind
psapi
GetModuleFileNameExA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 842B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 922B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ