Static task
static1
Behavioral task
behavioral1
Sample
f13b2ead2033888f45136641f7ca5e406d607435724bf1006fe5e4ae0a21c897.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f13b2ead2033888f45136641f7ca5e406d607435724bf1006fe5e4ae0a21c897.exe
Resource
win10v2004-20221111-en
General
-
Target
f13b2ead2033888f45136641f7ca5e406d607435724bf1006fe5e4ae0a21c897
-
Size
275KB
-
MD5
65a31304c51bc3602082ae0bc481b1c8
-
SHA1
8e1b7303ef931ec0a0d41c8ea0538b12060ea8f0
-
SHA256
f13b2ead2033888f45136641f7ca5e406d607435724bf1006fe5e4ae0a21c897
-
SHA512
4ee6d0234bee857ec49cc0843916d38d7a4377b3cf194bc242300ab6d24cf17565a5a4ee3c3e6f5d83b51326b461f972e53e7c03d16123f92a4d2deeb00c8cdb
-
SSDEEP
6144:auzPze86/hYtlWgQj5zF6CHiIkxifk0U2S7SdRaRhY+B6Z4:aUe8iylRQ5zKxcUhm6Y+B6q
Malware Config
Signatures
Files
-
f13b2ead2033888f45136641f7ca5e406d607435724bf1006fe5e4ae0a21c897.exe windows x86
cf002503c64c32b6d46e4c8f5fc8c19f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
HeapFree
GlobalFindAtomA
CreateFileA
MultiByteToWideChar
HeapAlloc
SetLastError
QueryPerformanceCounter
WideCharToMultiByte
FindResourceW
GetUserDefaultLCID
lstrcpyW
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetCurrentProcessId
GetLocalTime
GetCurrentProcess
GetTickCount
LoadLibraryW
lstrlenW
GetProcessHeap
SetUnhandledExceptionFilter
CloseHandle
psapi
GetPerformanceInfo
EnumPageFilesA
GetProcessImageFileNameA
EnumProcessModules
EmptyWorkingSet
EnumPageFilesW
olecli32
LeSaveToStream
LeRelease
LeQueryBounds
LeSetBounds
LeReconnect
LeQueryOpen
LeGetUpdateOptions
LeObjectLong
LeSetData
LeObjectConvert
LeQueryOutOfDate
Sections
.text Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ