Static task
static1
Behavioral task
behavioral1
Sample
21f13cd2012951efa844bf9f2cc15c02eae8b4bb55c46ef2346d1556160c6dc4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
21f13cd2012951efa844bf9f2cc15c02eae8b4bb55c46ef2346d1556160c6dc4.exe
Resource
win10v2004-20220901-en
General
-
Target
21f13cd2012951efa844bf9f2cc15c02eae8b4bb55c46ef2346d1556160c6dc4
-
Size
73KB
-
MD5
6b101b746002cffc8b73af708142a3c5
-
SHA1
ac89bb163c06c84d1522f59033a8646c4f4fda05
-
SHA256
21f13cd2012951efa844bf9f2cc15c02eae8b4bb55c46ef2346d1556160c6dc4
-
SHA512
170a7ad58b18b03cc8d8e47d4ab22b76892736720bfe3dd9b60f8d84a7e969ace27d9892bad72e2517a0fc4969a4a2994f3da43d03b18fd67553a6eb8d8bccd1
-
SSDEEP
1536:+FN/MhI0c6AhNDRKBW0i65ZJXGJOCsk00eIEDWq6ZMiMK/:sv6MbM1jizsN0e4ZRMA
Malware Config
Signatures
Files
-
21f13cd2012951efa844bf9f2cc15c02eae8b4bb55c46ef2346d1556160c6dc4.exe windows x86
d62ee5bbd7533b427cf918f3af92ff8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetModuleHandleW
GetCurrentProcessId
ExitProcess
GetCommandLineW
VirtualAlloc
advapi32
AdjustTokenPrivileges
RegEnumValueW
RegCreateKeyExW
RegCreateKeyExA
RegDeleteValueW
RegQueryInfoKeyW
RegQueryValueExA
RegCreateKeyExA
gdi32
SetTextColor
CreateCompatibleDC
TextOutW
SetBkColor
DeleteObject
SelectObject
PatBlt
StretchBlt
CreateCompatibleDC
DeleteObject
CreateFontIndirectW
user32
GetWindowTextW
MessageBoxA
SetCursor
CheckDlgButton
DispatchMessageW
SetWindowLongW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ