Static task
static1
Behavioral task
behavioral1
Sample
13ba60220c786a3f550f10fd4f5f5df588adf473147eccdd44b47245e7670ed9.exe
Resource
win7-20221111-en
General
-
Target
13ba60220c786a3f550f10fd4f5f5df588adf473147eccdd44b47245e7670ed9
-
Size
7.6MB
-
MD5
b847ee24ebc4aa1c558c7f47dad6c346
-
SHA1
f6c09cfa86565f6ea7475152b1b1cc46876e559e
-
SHA256
13ba60220c786a3f550f10fd4f5f5df588adf473147eccdd44b47245e7670ed9
-
SHA512
5e7246ba6b0107490a186b8c66e517d1144d455de8399f71a63d251fc380abe19c857a582e65008d5fdfad34ecbe72daf1f79d964275b4cfc520e47d860f6d59
-
SSDEEP
196608:6imY1izhZH+p8xZ7Tsuk5JJytoctvwUsW0:iei9ZH+ez7TPGvyzIlX
Malware Config
Signatures
Files
-
13ba60220c786a3f550f10fd4f5f5df588adf473147eccdd44b47245e7670ed9.exe windows x86
bb7db9bdde22d56cffe7fd6f13032601
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetThreadDesktop
CharUpperBuffW
gdi32
BitBlt
advapi32
GetTokenInformation
shell32
SHFileOperationW
ole32
CreateStreamOnHGlobal
crypt32
CryptUnprotectData
wininet
HttpSendRequestExA
ws2_32
WSAStartup
Sections
.text Size: 604KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.A[' Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Pd} Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m? Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ