Static task
static1
Behavioral task
behavioral1
Sample
13517bccafaa4eb994d99c3bf1ea39f7af15a2eaf14787c133aa7f8ec8561d41.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
13517bccafaa4eb994d99c3bf1ea39f7af15a2eaf14787c133aa7f8ec8561d41.exe
Resource
win10v2004-20220812-en
General
-
Target
13517bccafaa4eb994d99c3bf1ea39f7af15a2eaf14787c133aa7f8ec8561d41
-
Size
28KB
-
MD5
45d43d63b0157761096bd715f7c9ef9c
-
SHA1
f597578e5d6e1b7d4df5145a4eddf1c422c9c043
-
SHA256
13517bccafaa4eb994d99c3bf1ea39f7af15a2eaf14787c133aa7f8ec8561d41
-
SHA512
ab7b71d6552d0e95545c7739ee0120cdb13c3effac127e1ce84839aae68c523fd586183678bb04865da4e583955b99e63f5b3e68f400b7c9f3319904ba0380bf
-
SSDEEP
768:xlqu3FG11xvqrIKA/lGK+cZahN/ez+pq7GMQ:/qaFJJA/MRpVMQ
Malware Config
Signatures
Files
-
13517bccafaa4eb994d99c3bf1ea39f7af15a2eaf14787c133aa7f8ec8561d41.exe windows x86
d23314c5bd8326712a667023f475bd80
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
RegisterConsoleIME
UnregisterConsoleIME
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
lstrlenW
lstrcpyW
lstrcatW
lstrcpynW
WideCharToMultiByte
GetSystemDirectoryW
SetCurrentDirectoryW
OpenEventW
SetEvent
CloseHandle
LocalAlloc
LocalFree
GetStartupInfoA
GetCurrentThreadId
user32
IsWindowEnabled
ActivateKeyboardLayout
PostMessageW
GetKeyboardLayoutList
SendMessageTimeoutW
PostQuitMessage
SetForegroundWindow
DefWindowProcW
EnableWindow
DestroyWindow
GetKeyState
GetKeyboardLayoutNameW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
LoadIconW
LoadCursorW
RegisterClassW
GetSystemMetrics
CreateWindowExW
UnregisterClassW
AttachThreadInput
ntdll
RtlLeaveCriticalSection
NtOpenProcessToken
RtlUnicodeToMultiByteSize
NtQueryInformationToken
NtClose
RtlInitializeCriticalSection
NtQueryVirtualMemory
RtlUnwind
RtlCopyLuid
RtlEnterCriticalSection
imm32
ImmGetContext
ImmReleaseContext
ImmGetConversionStatus
ImmGetGuideLineW
ImmSetConversionStatus
ImmSimulateHotKey
ImmGetIMEFileNameW
ImmEscapeW
ImmDisableTextFrameService
ImmGetOpenStatus
ImmNotifyIME
ImmGetCandidateListW
ImmGetCompositionStringW
ImmSetActiveContextConsoleIME
ImmTranslateMessage
ImmCallImeConsoleIME
ImmGetProperty
ImmCreateContext
ImmAssociateContext
ImmSetOpenStatus
ImmDestroyContext
ImmIsIME
gdi32
GetStockObject
msvcrt
_controlfp
__set_app_type
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE