Static task
static1
Behavioral task
behavioral1
Sample
a13a5fc5d8435746a107fa215569dff8.exe
Resource
win7-20230220-en
General
-
Target
a13a5fc5d8435746a107fa215569dff8.exe
-
Size
212KB
-
MD5
a13a5fc5d8435746a107fa215569dff8
-
SHA1
8a57abae4d0476a7a3bb8c2c1a13840764bacc64
-
SHA256
998b16d93ed1043b616cddfcae2cbe10b6f4ae05b9bbd1abed4a99ad11205444
-
SHA512
e741aaf040a9a5f8d46f2397731e475219c7a248d1b452ab60ddc192b187f048802456ccc10fe9ffbe0afd6f2039961fee0e7d1702d18516f29b62a7c27956ca
-
SSDEEP
3072:WB0TLZfEOrp49tv1WvDQR/Splb5YY7ibpyhuQ3xJIdBAKlpfhuekCj:I0TLFdVQR/Sp8Y4IhfqWMhL1j
Malware Config
Signatures
Files
-
a13a5fc5d8435746a107fa215569dff8.exe.exe windows x86
8b8924b9f5a673fd70977d21932a217f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateJobObjectW
FreeEnvironmentStringsA
GetModuleHandleW
FindNextVolumeMountPointA
GetConsoleAliasesA
FormatMessageA
SetHandleCount
FindResourceExA
GlobalAlloc
GetConsoleAliasExesLengthW
GetFileAttributesW
WriteConsoleW
GetBinaryTypeA
GetStringTypeExA
EnumSystemLocalesA
SetLastError
GetProcAddress
VirtualAlloc
OpenJobObjectA
LoadLibraryA
CreateSemaphoreW
InterlockedExchangeAdd
WriteProfileSectionW
EnumDateFormatsA
GetStringTypeW
RequestWakeupLatency
GetVersionExA
LocalSize
FindAtomW
GetWindowsDirectoryW
GetPrivateProfileSectionW
DebugBreak
CloseHandle
CreateFileA
GetConsoleOutputCP
WriteConsoleA
GetModuleHandleExA
EndUpdateResourceW
LockFileEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
ExitProcess
GetLastError
WriteFile
GetStdHandle
GetModuleFileNameA
HeapAlloc
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
HeapSize
GetLocaleInfoA
RaiseException
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
user32
LoadIconW
LoadMenuW
RedrawWindow
CharLowerBuffA
GetSysColorBrush
GetMenuInfo
GetCaretBlinkTime
gdi32
GetTextExtentPointI
advapi32
ReportEventW
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ