Static task
static1
Behavioral task
behavioral1
Sample
c13c8c9ec6407bc6c39bb01a66078848cc47877fda1cd2485ac6db5c90618279.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c13c8c9ec6407bc6c39bb01a66078848cc47877fda1cd2485ac6db5c90618279.exe
Resource
win10v2004-20220812-en
General
-
Target
c13c8c9ec6407bc6c39bb01a66078848cc47877fda1cd2485ac6db5c90618279
-
Size
142KB
-
MD5
a7c2888b687c44248359563708feb2f8
-
SHA1
36515f3af868033c3a8c3f3726ff3beb61e1f135
-
SHA256
c13c8c9ec6407bc6c39bb01a66078848cc47877fda1cd2485ac6db5c90618279
-
SHA512
7d9c9113e40ce1a146eb69d35a4b749896e4b8bc02579e707d1353f80542a2f93ca5fd538f54169a19120124b71968ac9fb53af070cc8700800016f741c5d5f3
-
SSDEEP
3072:8tT05rkpUaVlL4XyVduKi1ZcbiTJ1joYlRn+QelN:IT05PXyVdu3ZwiTJOYr+QeX
Malware Config
Signatures
Files
-
c13c8c9ec6407bc6c39bb01a66078848cc47877fda1cd2485ac6db5c90618279.exe windows x86
5772d99cbab96c664893be8a081dae37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
HeapDestroy
HeapSize
GetConsoleOutputCP
LoadResource
FindFirstFileW
TlsGetValue
WideCharToMultiByte
FindClose
GetConsoleMode
HeapCreate
TlsAlloc
EnterCriticalSection
GlobalSize
InterlockedCompareExchange
FileTimeToLocalFileTime
GetSystemInfo
RaiseException
LoadLibraryW
lstrcpyW
WriteConsoleW
InterlockedExchange
ReadFile
GetTimeFormatW
GetCurrentDirectoryA
WaitForMultipleObjects
TlsSetValue
HeapFree
GetProcessHeap
GetModuleHandleA
GetCurrentDirectoryW
FreeEnvironmentStringsA
GetProcAddress
SetUnhandledExceptionFilter
lstrcatW
CreateThread
SetEvent
CompareStringA
LoadLibraryA
lstrlenW
SetLastError
GetStringTypeA
LocalUnlock
lstrcmpiW
GetLocaleInfoW
GetModuleFileNameW
ExpandEnvironmentStringsW
HeapAlloc
VirtualFree
CompareStringW
CreateEventW
CloseHandle
SetHandleCount
GetFullPathNameW
FileTimeToSystemTime
LocalLock
InterlockedIncrement
FlushFileBuffers
GetOEMCP
HeapReAlloc
DeleteCriticalSection
GetTickCount
GlobalFree
GetDriveTypeW
GetModuleHandleW
LocalAlloc
QueryPerformanceCounter
GetVersionExW
GetCurrentProcessId
GetLocaleInfoA
GetConsoleCP
GlobalAlloc
GetEnvironmentStrings
TerminateProcess
GetStartupInfoA
GetEnvironmentStringsW
WriteConsoleA
GetTempPathW
GetTimeZoneInformation
CopyFileW
GlobalLock
EnumSystemLocalesA
GetCPInfo
CreateFileA
InterlockedDecrement
lstrcpynW
VirtualQuery
RtlUnwind
IsBadWritePtr
GetStringTypeW
GetFileType
GetLastError
FreeEnvironmentStringsW
GetModuleFileNameA
WriteFile
GetVersionExA
TlsFree
SetEndOfFile
GetCurrentProcess
lstrcmpW
GlobalUnlock
SetCurrentDirectoryW
LeaveCriticalSection
GetCommandLineA
LCMapStringA
DeleteFileW
PeekNamedPipe
GetCurrentThreadId
GetDateFormatA
SetFilePointer
VirtualAlloc
CreatePipe
InitializeCriticalSection
MultiByteToWideChar
GetUserDefaultLCID
GetExitCodeProcess
UnhandledExceptionFilter
GetFileAttributesW
GetACP
IsValidLocale
CreateProcessW
FindResourceW
OpenEventW
VirtualProtect
LCMapStringW
SetFileAttributesW
MoveFileW
SetEnvironmentVariableA
CreateFileW
MulDiv
CreateDirectoryW
ExitProcess
FormatMessageW
IsValidCodePage
GetDateFormatW
GetStdHandle
WaitForSingleObject
GetDriveTypeA
GetSystemTimeAsFileTime
TerminateThread
Sleep
user32
GetDlgItemInt
CloseClipboard
GetMenuItemCount
GetDC
GetMenuItemID
GetWindowLongW
OpenClipboard
ShowWindow
GetKeyState
DestroyMenu
SetCapture
SetDlgItemTextW
SetMenu
DialogBoxParamW
RegisterClassExW
GetWindowPlacement
CharLowerW
FillRect
LoadMenuW
PeekMessageW
ShowCaret
MonitorFromWindow
DrawEdge
IsZoomed
SetFocus
CreateMenu
ModifyMenuW
FindWindowW
TrackPopupMenu
SetScrollInfo
TranslateMessage
GetKeyboardState
CreateDialogIndirectParamW
IsWindow
ScreenToClient
ClientToScreen
InflateRect
SetWindowPos
AppendMenuW
MessageBoxW
GetSysColor
DispatchMessageW
GetSystemMetrics
DestroyWindow
DestroyAcceleratorTable
mouse_event
HideCaret
DrawFocusRect
DrawFrameControl
SetForegroundWindow
DrawTextExW
InvalidateRect
GetActiveWindow
CreateDialogParamW
DeleteMenu
GetDlgCtrlID
GetClassNameW
PostQuitMessage
InsertMenuItemW
RemoveMenu
GetParent
SetWindowLongW
SendDlgItemMessageW
SetMenuItemInfoW
SystemParametersInfoW
GetDlgItemTextW
ScrollWindow
GetWindowTextW
ReleaseDC
SetCaretPos
DrawIcon
GetMenuStringW
InsertMenuW
BeginDeferWindowPos
EndDialog
GetClipboardData
SetScrollRange
RegisterClassW
SetScrollPos
IsWindowUnicode
WindowFromPoint
CreatePopupMenu
UnhookWindowsHookEx
GetFocus
SetClipboardData
GetSubMenu
CreateAcceleratorTableW
CreateWindowExW
CreateCursor
FrameRect
SendMessageW
GetCapture
RegisterWindowMessageW
DestroyCursor
CharUpperW
IsDialogMessageW
EnableMenuItem
MoveWindow
GetScrollRange
IsDialogMessageA
CallWindowProcW
DestroyIcon
GetScrollPos
LoadStringW
DestroyCaret
RedrawWindow
SetDlgItemInt
CreateCaret
RealChildWindowFromPoint
EndDeferWindowPos
DrawMenuBar
GetMenu
DeferWindowPos
EnableWindow
IsClipboardFormatAvailable
BeginPaint
GetMessageA
PostMessageW
GetDlgItem
ToAscii
GetClientRect
DragDetect
GetMenuState
wsprintfW
SetWindowPlacement
GetWindowRect
MapWindowPoints
ReleaseCapture
ShowScrollBar
gdi32
CreateFontW
SetTextColor
SetROP2
DPtoLP
BitBlt
GetROP2
GetTextExtentPointW
GetObjectW
CreatePen
PatBlt
ExtTextOutW
SelectObject
GetTextMetricsW
EnumFontFamiliesExW
SaveDC
DeleteDC
GetPixel
LineTo
SetBkColor
DeleteObject
EndPage
CreateCompatibleDC
OffsetWindowOrgEx
CreateSolidBrush
SetWindowOrgEx
SetTextAlign
CreateCompatibleBitmap
GetTextExtentPoint32W
GetDeviceCaps
RemoveFontResourceW
SetBrushOrgEx
CreateHatchBrush
CreateFontIndirectW
MoveToEx
AddFontResourceW
RestoreDC
Rectangle
CreateBitmap
StartPage
GetStockObject
EndDoc
CreatePatternBrush
SetBkMode
StartDocW
comdlg32
ChooseColorW
ReplaceTextW
PrintDlgW
ReplaceTextA
GetSaveFileNameW
ChooseFontA
GetFileTitleW
FindTextW
GetFileTitleA
PrintDlgA
PageSetupDlgW
GetOpenFileNameA
FindTextA
ChooseColorA
GetSaveFileNameA
PageSetupDlgA
ChooseFontW
GetOpenFileNameW
ole32
StgOpenAsyncDocfileOnIFillLockBytes
WriteClassStm
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ