Static task
static1
Behavioral task
behavioral1
Sample
13fe61945f48776a2627521382194994c97cb33313044db0f999faa13aa76454.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13fe61945f48776a2627521382194994c97cb33313044db0f999faa13aa76454.exe
Resource
win10v2004-20220901-en
General
-
Target
13fe61945f48776a2627521382194994c97cb33313044db0f999faa13aa76454
-
Size
301KB
-
MD5
966d5d666207d07acc782eeda0e1a720
-
SHA1
dcba6f5c759f2e38f07008ba7e7470052a1d721c
-
SHA256
13fe61945f48776a2627521382194994c97cb33313044db0f999faa13aa76454
-
SHA512
18b31e5b10ce3c77300605c130443181cf946eac90ea359b986a349cb96ca2d554419f47a0c41e2b18813c360a7854d44e0a5cf1fcd8e7c12dc138e6d90b417c
-
SSDEEP
6144:ZO2zJaxOE5IKitXEyPQxuGXzEzkJBARWp7dSApSgwbS3M:Nz8D5IKFyknzEknN7FSg6
Malware Config
Signatures
Files
-
13fe61945f48776a2627521382194994c97cb33313044db0f999faa13aa76454.exe windows x86
b908890ddb1f629b8c58b15fa75e94f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
GetExitCodeProcess
HeapFree
GetLastError
SetEnvironmentVariableA
GetShortPathNameW
GetModuleHandleA
GetLogicalDrives
HeapCreate
SetFilePointer
lstrcmpiA
SetLastError
GetTickCount
lstrcatW
TlsAlloc
GetStringTypeW
GetConsoleTitleA
GetVersion
SetPriorityClass
GetModuleHandleW
GetStdHandle
IsValidCodePage
GetDriveTypeA
netshell
DllRegisterServer
DllCanUnloadNow
HrLaunchConnection
DllGetClassObject
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataz Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE