Static task
static1
Behavioral task
behavioral1
Sample
13b1fd5d826d412adc35321c484f428769663b007e21c7a4a47c627deb1aee6b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13b1fd5d826d412adc35321c484f428769663b007e21c7a4a47c627deb1aee6b.exe
Resource
win10v2004-20220812-en
General
-
Target
13b1fd5d826d412adc35321c484f428769663b007e21c7a4a47c627deb1aee6b
-
Size
769KB
-
MD5
05f25a116547af304bc657dcf211bf28
-
SHA1
0dc42906187ab4d10e2902d8983eacdde1d87e33
-
SHA256
13b1fd5d826d412adc35321c484f428769663b007e21c7a4a47c627deb1aee6b
-
SHA512
f4caf6fdafe3bb76b8d61da05097b90770c9b74bfc96d98c70e1b84ebcb9d4fa2563e1563f61e9574f21847084d364429af3e8f3af5100f1aa2acacb9baa0e4c
-
SSDEEP
12288:9LxHMvSkQeuyueMMI0mtMTwlSLr15bfh94aoz3zRl5D+mNeEOqy:9Lxsv3z5elvMslSLr1xtsamgoy
Malware Config
Signatures
Files
-
13b1fd5d826d412adc35321c484f428769663b007e21c7a4a47c627deb1aee6b.exe windows x86
6bd3bc1fbc2eaa3aafc8e5eff7e1f66c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
SetStdHandle
WriteFile
GetFileType
HeapFree
OpenEventW
GetModuleHandleA
CreateFileMappingW
Beep
WriteConsoleW
FindClose
CreateMutexA
ResetEvent
VirtualProtectEx
GetCommandLineA
RemoveDirectoryA
ReleaseSemaphore
CreateFileA
lstrlenA
DeleteFileA
CreateDirectoryW
RemoveDirectoryA
GetTickCount
FindClose
ReleaseMutex
user32
DestroyMenu
CreateIcon
GetSysColor
GetWindowLongA
IsZoomed
DestroyMenu
MessageBoxA
GetClassInfoA
DispatchMessageA
IsWindow
PeekMessageA
DrawTextW
FindWindowA
eappprxy
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
EapHostPeerEndSession
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ