Static task
static1
Behavioral task
behavioral1
Sample
c13ebc5bfc377c890e5077e82308505addbb2cbcf67dd57c71d5fedd3f90c9fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c13ebc5bfc377c890e5077e82308505addbb2cbcf67dd57c71d5fedd3f90c9fb.exe
Resource
win10v2004-20220901-en
General
-
Target
c13ebc5bfc377c890e5077e82308505addbb2cbcf67dd57c71d5fedd3f90c9fb
-
Size
24KB
-
MD5
5743b126bebd622f848f15c063ce58b0
-
SHA1
348145ba58f6de51ea4e3520f7dbb6ec34272fdc
-
SHA256
c13ebc5bfc377c890e5077e82308505addbb2cbcf67dd57c71d5fedd3f90c9fb
-
SHA512
d5de117f5e598f1f7e5a69a05663dc0d9f2d5e547051b3a9360fd16f6c22d84252a5c64bf83381a2312c948e2e93cd1d6694164f775abddc8224a81ca51041fe
-
SSDEEP
384:SFyZqCzIxDNZTACpBRbKQJYHzHMOgj4aOmUzNYN3UmvuY0q:SoZqCktTYHWj48vSq
Malware Config
Signatures
Files
-
c13ebc5bfc377c890e5077e82308505addbb2cbcf67dd57c71d5fedd3f90c9fb.exe windows x86
12b006f8a365e2866b9f61cef54195b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cfgmgr32
CM_Get_DevNode_Status
newdev
UpdateDriverForPlugAndPlayDevicesW
setupapi
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
SetupDiGetClassDevsW
SetupDiCreateDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiOpenDeviceInfoW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupCopyOEMInfW
shell32
CommandLineToArgvW
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__wgetmainargs
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_wcmdln
exit
_XcptFilter
_exit
_wcsicmp
strlen
strstr
wcslen
wcscpy
wcscat
swprintf
__p__fmode
kernel32
GetStartupInfoW
GetModuleHandleW
LocalFree
LocalAlloc
GlobalAlloc
lstrlenW
lstrcmpiW
SetLastError
GetLastError
SetFilePointer
WriteFile
GetVersionExW
GetEnvironmentVariableW
GetCommandLineW
GetFullPathNameW
GlobalFree
CreateFileW
ReadFile
CloseHandle
WideCharToMultiByte
FindFirstFileW
FindNextFileW
FindClose
GetWindowsDirectoryW
SetFileAttributesW
DeleteFileW
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ