Static task
static1
Behavioral task
behavioral1
Sample
713c760d89dd2a134777b1a3a3ed1c8f6217502ae3f0a18f4725d310e03e7f4c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
713c760d89dd2a134777b1a3a3ed1c8f6217502ae3f0a18f4725d310e03e7f4c.exe
Resource
win10v2004-20220812-en
General
-
Target
713c760d89dd2a134777b1a3a3ed1c8f6217502ae3f0a18f4725d310e03e7f4c
-
Size
204KB
-
MD5
7165843d9786cefc9d9b5aee4404da51
-
SHA1
1b18cb4adfbb468d71ea751b1a611e7417ef8d18
-
SHA256
713c760d89dd2a134777b1a3a3ed1c8f6217502ae3f0a18f4725d310e03e7f4c
-
SHA512
d1321c48b1236eac216f0b1683d6b4414f372cd965caa53d4cb82d5f16f8c97a782fe326dd7ad619a3ba88cea3effe272c1cba240d9352ba1fa0dabbabe358bc
-
SSDEEP
3072:R4mBomIxXOjTrQPkXYbdKptaz4rJSSU92GEn3ZpLLBQrECb:R+7kXgKi4rJDk2GEnur
Malware Config
Signatures
Files
-
713c760d89dd2a134777b1a3a3ed1c8f6217502ae3f0a18f4725d310e03e7f4c.exe windows x86
b20e37e19f7839035e4d4bc544788bb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hpqtap08
TAPASLink
user32
GetDesktopWindow
kernel32
GetStdHandle
SetHandleCount
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetProcAddress
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapAlloc
VirtualAlloc
HeapReAlloc
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PACK Size: 164KB - Virtual size: 420KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE