Static task
static1
Behavioral task
behavioral1
Sample
13b2b09f6d7d5f313a34a9052735e044adc0385361f1c870408f70007a94d400.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13b2b09f6d7d5f313a34a9052735e044adc0385361f1c870408f70007a94d400.exe
Resource
win10v2004-20221111-en
General
-
Target
13b2b09f6d7d5f313a34a9052735e044adc0385361f1c870408f70007a94d400
-
Size
70KB
-
MD5
01efa37e154fada83b3ecc55501f72ca
-
SHA1
dfbf23b7155c9fe2bd5e975ad721f155351b30a4
-
SHA256
13b2b09f6d7d5f313a34a9052735e044adc0385361f1c870408f70007a94d400
-
SHA512
688de86584ab3092530a6f3a5dc41b1d46c34bdc94337a4ac93b8a3affddaaa2ccc2155459273bc5bfa173ae09e6d2c611c6ca1bcfff5dc3f9c0e92428451979
-
SSDEEP
1536:yaW6MjijaTpXSi6Xonc2PqGZJW+vYizmvPgWvTQCdH8h:nNeWXon/pHWYmHgwTQCl
Malware Config
Signatures
Files
-
13b2b09f6d7d5f313a34a9052735e044adc0385361f1c870408f70007a94d400.exe windows x86
d62d46b46eae68f657ad4e204b83b650
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
glu32
gluBeginSurface
gluBeginTrim
gluQuadricCallback
gluGetTessProperty
ole32
CoGetTreatAsClass
OleCreateLinkFromDataEx
OleRegEnumVerbs
OleRegGetMiscStatus
PropVariantClear
IsAccelerator
CoFreeAllLibraries
OleQueryCreateFromData
ReleaseStgMedium
CreateDataAdviseHolder
PropVariantCopy
CoLockObjectExternal
comctl32
PropertySheetW
InitCommonControlsEx
FlatSB_EnableScrollBar
FlatSB_GetScrollProp
ord6
ord17
ord5
FlatSB_SetScrollPos
FlatSB_GetScrollInfo
FlatSB_SetScrollInfo
CreateStatusWindowW
UninitializeFlatSB
urlmon
CreateFormatEnumerator
kernel32
GetModuleHandleA
GetProcAddress
SetEvent
OpenSemaphoreA
ResetEvent
GetStdHandle
GetCurrentProcess
VirtualAlloc
GetExitCodeThread
SetHandleInformation
ReleaseMutex
GetEnvironmentVariableA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
LCMapStringA
LCMapStringW
winspool.drv
AddPrinterConnectionA
EnumPrintProcessorsA
GetPrinterDriverA
GetPrinterA
avifil32
AVIStreamInfoA
AVIStreamEndStreaming
AVIFileInfoW
AVIStreamOpenFromFileA
AVIStreamRelease
AVIFileGetStream
EditStreamSetNameW
EditStreamSetInfoA
msvfw32
DrawDibDraw
ICCompressorFree
DrawDibGetPalette
GetSaveFileNamePreviewW
avicap32
capCreateCaptureWindowA
ws2_32
bind
getprotobynumber
accept
getsockname
listen
closesocket
getservbyname
htons
cryptui
CryptUIDlgViewContext
CryptUIWizDigitalSign
CryptUIWizExport
CryptUIWizImport
setupapi
SetupGetMultiSzFieldW
SetupDiEnumDeviceInfo
SetupDiDrawMiniIcon
SetupQueueDeleteSectionA
SetupDiLoadClassIcon
comdlg32
ChooseFontW
ChooseColorA
PrintDlgW
GetSaveFileNameW
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ