Static task
static1
Behavioral task
behavioral1
Sample
13ead6d52dd686ce965af5bea4559925d5fc3da6ec1920503aea9f840ed22c03.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
13ead6d52dd686ce965af5bea4559925d5fc3da6ec1920503aea9f840ed22c03.exe
Resource
win10v2004-20220812-en
General
-
Target
13ead6d52dd686ce965af5bea4559925d5fc3da6ec1920503aea9f840ed22c03
-
Size
2.3MB
-
MD5
e679f944de5d8bd6b28e3caf8b014ae5
-
SHA1
d95662ae03166b221817d0f2af785c1fdd5c173f
-
SHA256
13ead6d52dd686ce965af5bea4559925d5fc3da6ec1920503aea9f840ed22c03
-
SHA512
175e7e2f91aa2e67ca9d4214a15f95c45b855cef1fea48d11ad19c6f60fcb14e954455c10acee496e462dea22dfd97b7809ab67e574415b3f57166cc5033329c
-
SSDEEP
49152:LC2IFpxa01u5+bpl/lSSbyaAZfWyrHbyxfBW3ZA20rQ9dMn8lIyjrK:W2ypxa0Vn/lSSbyBZfZzb65+ZAHrQ9do
Malware Config
Signatures
Files
-
13ead6d52dd686ce965af5bea4559925d5fc3da6ec1920503aea9f840ed22c03.exe windows x86
220754882351a8e30154f7df5ff2849c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CoTaskMemFree
comctl32
_TrackMouseEvent
shell32
ShellExecuteA
Sections
.text Size: 2.3MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE