Static task
static1
Behavioral task
behavioral1
Sample
13a82f90c78be807d8bb01a497de926dbcb2c9c3ba19e6cc733bc57b2e0161bc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
13a82f90c78be807d8bb01a497de926dbcb2c9c3ba19e6cc733bc57b2e0161bc.exe
Resource
win10v2004-20220812-en
General
-
Target
13a82f90c78be807d8bb01a497de926dbcb2c9c3ba19e6cc733bc57b2e0161bc
-
Size
276KB
-
MD5
9205047860a84361ba66373284656490
-
SHA1
bfee556720a3e6fb07121c7f04e6a5e28532ac73
-
SHA256
13a82f90c78be807d8bb01a497de926dbcb2c9c3ba19e6cc733bc57b2e0161bc
-
SHA512
c6cae88f807d632d9224fd6d490eeb8f38c02104ffece0b0356b9d63bc00f381f38095ec37063e8d873592916fd41d8a13101f73173e02aa273edc6abaaf804f
-
SSDEEP
3072:61VnyLT12UiX9zuC5nwngkQ4hbTA0Ij86DhfCSo/WGHEfElm7mYb6oPJgkLsiS05:61V412UiXpX5wnZIjNo/pIlbjh1Tx
Malware Config
Signatures
Files
-
13a82f90c78be807d8bb01a497de926dbcb2c9c3ba19e6cc733bc57b2e0161bc.exe windows x86
e97509496f9576461532c0c2c1414196
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
PostThreadMessageW
RealGetWindowClass
TranslateMessage
DispatchMessageW
MsgWaitForMultipleObjects
PeekMessageW
kernel32
CreateFiberEx
FileTimeToSystemTime
TerminateJobObject
GetTempPathW
EnumResourceNamesW
FlushFileBuffers
LocalAlloc
SetEvent
RaiseException
shlwapi
wnsprintfW
ole32
CoAddRefServerProcess
CoUninitialize
CoInitialize
CoTaskMemFree
CoRegisterMessageFilter
StringFromGUID2
CoResumeClassObjects
CoRevokeClassObject
GetRunningObjectTable
CoRegisterClassObject
CoCreateInstance
CLSIDFromString
CreateStreamOnHGlobal
CreateClassMoniker
CoDisconnectObject
CoReleaseServerProcess
CoTaskMemAlloc
iphlpapi
NotifyRouteChange
rpcrt4
UuidCreate
advapi32
RegOpenKeyExA
EncryptFileW
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
DecryptFileW
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ