Static task
static1
Behavioral task
behavioral1
Sample
13daac9e3d31fcef355ba3b80f7be38adff28d683db3d4d8384c392403db6d33.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13daac9e3d31fcef355ba3b80f7be38adff28d683db3d4d8384c392403db6d33.exe
Resource
win10v2004-20220901-en
General
-
Target
13daac9e3d31fcef355ba3b80f7be38adff28d683db3d4d8384c392403db6d33
-
Size
636KB
-
MD5
918ba9c8d8ccf17b02b5193db08e9fcc
-
SHA1
6974377225365070f569f662fbaf14d907f87689
-
SHA256
13daac9e3d31fcef355ba3b80f7be38adff28d683db3d4d8384c392403db6d33
-
SHA512
4473dfcfda1d4f0ec871f4c5e774139d5f3397c1eabb9fbb7fad6f1ebfe65572cd1d394f5f01dd04699b198b23285b93a29a59d8b2bd383b46e2d1d74e69565b
-
SSDEEP
12288:OhH+3KwNk6sFOHtuFySf1X5wAuyDEmjydkHEkzJEyMVz5SjHEe6:33JNk6fEFjZdDEDSHNqyYe6
Malware Config
Signatures
Files
-
13daac9e3d31fcef355ba3b80f7be38adff28d683db3d4d8384c392403db6d33.exe windows x86
3640ce3bb31652c9c70e0e12a1cde63c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
VirtualProtect
FindAtomA
HeapCreate
GetCurrentProcessId
GetSystemDirectoryA
GetModuleHandleA
FlushFileBuffers
OpenSemaphoreA
GetExpandedNameA
GetCurrentProcess
FormatMessageA
GetThreadPriority
GetCompressedFileSizeA
IsDebuggerPresent
GetACP
GlobalFree
GetStdHandle
WriteConsoleA
GetEnvironmentStringsA
GetCurrentThread
user32
SetActiveWindow
GetFocus
ShowWindow
GetCursorPos
GetParent
ReleaseDC
GetClassNameA
IsIconic
FillRect
wsprintfA
BeginPaint
SetForegroundWindow
GetDlgItem
GetWindowTextLengthA
FrameRect
DrawTextA
GetWindow
EndPaint
ValidateRgn
linkinfo
DestroyLinkInfo
GetCanonicalPathInfoA
IsValidLinkInfo
ResolveLinkInfoA
GetLinkInfoData
rtutils
LogEventW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ