Static task
static1
Behavioral task
behavioral1
Sample
13f8ee446133ac61e8d6399d41529d32d0a60ed50608ce82c5b8acf0cc34dcf7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13f8ee446133ac61e8d6399d41529d32d0a60ed50608ce82c5b8acf0cc34dcf7.exe
Resource
win10v2004-20220812-en
General
-
Target
13f8ee446133ac61e8d6399d41529d32d0a60ed50608ce82c5b8acf0cc34dcf7
-
Size
432KB
-
MD5
cf2a6dd75e0065efa00d3b8c3fdba986
-
SHA1
692bd0f97e5943a0314ca065028271bac3910841
-
SHA256
13f8ee446133ac61e8d6399d41529d32d0a60ed50608ce82c5b8acf0cc34dcf7
-
SHA512
7732c284526d9c4ffcbd6d79618feafdb457e1975674934d25904fd9d49ae3151e38240534dd4ace157fe1e1cdcdf0857cab247524cc0529f2110b41020114ca
-
SSDEEP
12288:5GsKIzJpWP7Akrv4sg/I19Y0wcqQ2pWJR:5G83q7Ap5/Iw7cqNqR
Malware Config
Signatures
Files
-
13f8ee446133ac61e8d6399d41529d32d0a60ed50608ce82c5b8acf0cc34dcf7.exe windows x86
9d8d40b85eabde7ebd4f2d2e1823aa62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
VirtualAlloc
FindResourceA
Sleep
VirtualFree
WriteFile
HeapCreate
IsValidCodePage
CreateProcessA
SizeofResource
SetStdHandle
GetCurrentThreadId
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
GetConsoleCP
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
GetLastError
InterlockedIncrement
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
FindNextFileA
ResetEvent
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
SetErrorMode
GetWindowsDirectoryA
GetModuleHandleW
GetFileSize
GetStartupInfoA
DeleteFileA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
SetEndOfFile
CreateEventW
GetConsoleMode
VirtualQuery
GetVersion
InterlockedDecrement
TerminateProcess
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
InterlockedExchange
lstrcmpiA
GetCPInfo
GetTempPathA
FreeEnvironmentStringsW
LoadLibraryExW
CreateFileA
LocalAlloc
GetLocaleInfoA
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
HeapDestroy
FindFirstFileW
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
user32
BeginPaint
SetFocus
FillRect
SetTimer
GetSubMenu
RegisterClassA
EnableMenuItem
LoadStringA
IsWindowEnabled
TranslateMessage
PeekMessageA
EnableWindow
ShowWindow
KillTimer
GetParent
GetMessageA
DestroyWindow
ScreenToClient
GetClientRect
ReleaseDC
GetDC
DispatchMessageA
IsWindow
SetWindowPos
PostQuitMessage
DestroyMenu
GetSystemMetrics
GetWindowRect
SetCapture
SetWindowLongA
ReleaseCapture
EndDialog
SetWindowTextA
CheckMenuItem
GetWindowLongA
CreateWindowExA
GetDlgItem
ClientToScreen
LoadIconA
GetDesktopWindow
SetForegroundWindow
GetFocus
MessageBoxA
DialogBoxParamA
GetSysColor
IsWindowVisible
InvalidateRect
SendMessageA
UpdateWindow
SetCursor
oleaut32
SysAllocStringLen
SysStringLen
VariantClear
SysFreeString
msvcrt
_strcmpi
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
free
_exit
_cexit
Sections
.text Size: 296KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ