Static task
static1
Behavioral task
behavioral1
Sample
f13699174261ae242195a07268743c28778ad1c8651aa7b5e372bd47de72295d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f13699174261ae242195a07268743c28778ad1c8651aa7b5e372bd47de72295d.exe
Resource
win10v2004-20220812-en
General
-
Target
f13699174261ae242195a07268743c28778ad1c8651aa7b5e372bd47de72295d
-
Size
151KB
-
MD5
dcd5c5bed97782bc8c746809ab3e1ca4
-
SHA1
e92510e8e7f6845e39344b361cf528978e678c8f
-
SHA256
f13699174261ae242195a07268743c28778ad1c8651aa7b5e372bd47de72295d
-
SHA512
77a5fea62ed89117c11f50473c3d15a11d6fde4dab5f403e517dbd922f08952702c262f497fd5d571b3feb195b2abefdc66cdb63f75062dcfe3ead34f6d64686
-
SSDEEP
3072:WZukZAU45o2hw6IHH4kytdMucAQaeDlI5cgrg4gLDhYNR0vo+TD+scCqRkbdkAR:WZ145zw6OH4kCdMVDlISx4qDCUw+TD+u
Malware Config
Signatures
Files
-
f13699174261ae242195a07268743c28778ad1c8651aa7b5e372bd47de72295d.exe windows x86
abab2473748deacee1af12cb9f7309e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
advapi32
RegSetValueExA
StartServiceA
QueryServiceConfig2A
gdi32
StretchBlt
shell32
ShellExecuteA
SHGetSpecialFolderPathA
winmm
mciSendCommandA
imagehlp
MakeSureDirectoryPathExists
wsock32
WSACleanup
avicap32
capGetDriverDescriptionA
advpack
IsNTAdmin
Sections
Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE