Static task
static1
Behavioral task
behavioral1
Sample
21b37a3d5edd3596026f471492e7edc5652b8d9c86b1077bb8c7fa45fa2816d5.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
21b37a3d5edd3596026f471492e7edc5652b8d9c86b1077bb8c7fa45fa2816d5.dll
Resource
win10v2004-20220812-en
General
-
Target
21b37a3d5edd3596026f471492e7edc5652b8d9c86b1077bb8c7fa45fa2816d5
-
Size
62KB
-
MD5
297294c9d1b21c61ad1517cfe3103aac
-
SHA1
e6b0cd6068d976478a284fbc7c2cacb59c43757b
-
SHA256
21b37a3d5edd3596026f471492e7edc5652b8d9c86b1077bb8c7fa45fa2816d5
-
SHA512
18a95229db52b98d3e1405ec44ab6b4894fca33e430ee5c6612c83665a848b74490e81ccc91ecef3539ed134f8ca4a9b7a38c0cc9a1ce0a074bc8a58c69bf1eb
-
SSDEEP
1536:+oazD40Gk8QC3l3QsXXF4EWoktI9n6Pf1c/Juu8vrpZggFPVWB:+oazD40GZQ5Ie1oWI96agu8DpZDFPkB
Malware Config
Signatures
Files
-
21b37a3d5edd3596026f471492e7edc5652b8d9c86b1077bb8c7fa45fa2816d5.dll windows x86
f1a7c45fc327025cccf6d19a02df8176
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
EmptyClipboard
kernel32
GetCurrentProcessId
TerminateProcess
Sleep
LocalAlloc
LoadLibraryW
FreeLibrary
ExitProcess
DeleteCriticalSection
CloseHandle
CreateFileW
advapi32
RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegCloseKey
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
CODE Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ