Static task
static1
Behavioral task
behavioral1
Sample
f13e04e02ed504b3ae282ba8063c4c3cf67a2120a5de2ce18512da2543f7a5bc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f13e04e02ed504b3ae282ba8063c4c3cf67a2120a5de2ce18512da2543f7a5bc.exe
Resource
win10v2004-20220812-en
General
-
Target
f13e04e02ed504b3ae282ba8063c4c3cf67a2120a5de2ce18512da2543f7a5bc
-
Size
148KB
-
MD5
492d045f1c7f7fb9451736e45e21b922
-
SHA1
009c15ced1c57315c0707c8be06a10a93232081c
-
SHA256
f13e04e02ed504b3ae282ba8063c4c3cf67a2120a5de2ce18512da2543f7a5bc
-
SHA512
d183d33e73780888e5d37a68fdf80b2f853fa16ba0266febaf3ec6710c32570a335c243c8eedb47b62f54489f98819040ef62c107f0a8bbc526930c7eedcb792
-
SSDEEP
3072:YPh6R8w26zbG5o2Ferr7qSP8jSn3WWTvLwy/xFTCxVF8:E3hdFe+oD3fvUyZkF
Malware Config
Signatures
Files
-
f13e04e02ed504b3ae282ba8063c4c3cf67a2120a5de2ce18512da2543f7a5bc.exe windows x86
cf312b0ad64732345d83e352a08ad448
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetLastError
ExitProcess
IsBadReadPtr
GetProcAddress
GetCommandLineA
LocalAlloc
ExitThread
GetACP
lstrlenW
LoadLibraryExA
GetModuleHandleA
user32
CallNextHookEx
CharNextW
CharNextA
CharUpperBuffA
CharLowerBuffA
CharLowerA
AdjustWindowRectEx
BeginPaint
CharToOemA
CallWindowProcA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Sections
CODE Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ