Static task
static1
Behavioral task
behavioral1
Sample
13c2eb5ab359470276f7e048133c9d07890f86b3f86aab11d948200e676fb6ce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13c2eb5ab359470276f7e048133c9d07890f86b3f86aab11d948200e676fb6ce.exe
Resource
win10v2004-20220901-en
General
-
Target
13c2eb5ab359470276f7e048133c9d07890f86b3f86aab11d948200e676fb6ce
-
Size
123KB
-
MD5
9015ef60f723b930191547769a6b3630
-
SHA1
681470cfbbabc951883acd18cf26760ff07e0d11
-
SHA256
13c2eb5ab359470276f7e048133c9d07890f86b3f86aab11d948200e676fb6ce
-
SHA512
43fdf353c89108db16867a4a5d6b6857fc01e367bdde77eb68c4dc62d68d58b6764d0b6f94198fb63f789ba76da74c84e006db0340e55984c51395efeff5028c
-
SSDEEP
1536:rZ0cg9kmAh62r+YrFWm3WFHTuRejB0y2rU6toX9KsECei1XinPYdGX/DZ6BjDFJ8:FRKksEFWm3Wt6O36toXdmQgOjZ6
Malware Config
Signatures
Files
-
13c2eb5ab359470276f7e048133c9d07890f86b3f86aab11d948200e676fb6ce.exe windows x86
f2a717e64369ff63f8063adc715a35b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
GlobalFree
FreeEnvironmentStringsA
lstrlenA
GetStringTypeA
GetModuleFileNameA
SetHandleCount
lstrcmpiW
WideCharToMultiByte
RemoveDirectoryA
GetFullPathNameA
GetModuleFileNameW
GetModuleHandleW
GetCurrentThreadId
GetLastError
VirtualFree
lstrcpyA
GetProcAddress
GetModuleHandleA
MulDiv
GlobalUnlock
GetOEMCP
SetErrorMode
GetFileAttributesA
LocalAlloc
GetCommandLineA
DeleteFileW
GetLocaleInfoA
GetCurrentProcessId
GetStartupInfoA
GetCurrentProcess
FreeEnvironmentStringsW
QueryPerformanceCounter
GetVersionExA
Sleep
GlobalLock
InterlockedIncrement
DeleteFileA
LoadLibraryW
SetLastError
LCMapStringA
SetUnhandledExceptionFilter
GetSystemInfo
WaitForSingleObject
GlobalAlloc
FormatMessageA
GetThreadLocale
CreateProcessA
GetFileType
UnhandledExceptionFilter
InterlockedDecrement
GetACP
ExitProcess
GetEnvironmentStringsW
msvcrt
_XcptFilter
__p__commode
_exit
_initterm
_adjust_fdiv
__set_app_type
__getmainargs
__p__fmode
_except_handler3
__setusermatherr
__p___initenv
_controlfp
user32
ShowWindow
IsIconic
ClientToScreen
IsWindowVisible
SystemParametersInfoA
GetKeyState
GetMenu
BeginPaint
GetClassInfoA
IsWindow
SetWindowPos
GetClientRect
GetMenuItemCount
CreateWindowExA
GetWindowPlacement
UnregisterClassA
ScreenToClient
PostQuitMessage
GetWindowRect
GetFocus
EndPaint
TranslateMessage
SetForegroundWindow
GetWindow
LoadCursorA
LoadIconA
SendMessageA
GetSubMenu
IsWindowEnabled
GetWindowTextA
RegisterWindowMessageA
UpdateWindow
MessageBoxA
CreatePopupMenu
CallWindowProcA
TrackPopupMenu
DestroyMenu
GetDesktopWindow
CharNextA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE