Static task
static1
Behavioral task
behavioral1
Sample
21633e307600122e8d625fc2751d0858d532514ccc5f615d648534d3593e0fa8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
21633e307600122e8d625fc2751d0858d532514ccc5f615d648534d3593e0fa8.exe
Resource
win10v2004-20220812-en
General
-
Target
21633e307600122e8d625fc2751d0858d532514ccc5f615d648534d3593e0fa8
-
Size
143KB
-
MD5
4f7ef5d2db311fcb8b6db6af1a10e1e0
-
SHA1
c684b8c0a73b6547f6a8b0adf1e8aa33f5bf6322
-
SHA256
21633e307600122e8d625fc2751d0858d532514ccc5f615d648534d3593e0fa8
-
SHA512
a293eeff91ed23e7880f1309e1220921f6ae4d2c378b6d9cec7be62beb7bb4b7ed1c222e17371fb72bb50a86e8fd3bbdd41118d82cb11a94b438d4ddac795eb7
-
SSDEEP
3072:QBJu2D88ElzYyNhZk1EJZf++puf7XLtQRkRPVcxIq4I/Xfr9/v:1zYw5K0RkRdfQ/XR/
Malware Config
Signatures
Files
-
21633e307600122e8d625fc2751d0858d532514ccc5f615d648534d3593e0fa8.exe windows x86
286c4a73c9ae31fbedb2b4e12f8feb6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToDosDateTime
FileTimeToLocalFileTime
CloseHandle
GetFileInformationByHandle
GetLastError
CreateFileA
CreateDirectoryA
GetFileAttributesA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
LocalAlloc
LocalFree
ReadFile
WriteFile
SetFilePointer
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
msvcrt
printf
toupper
_strnicmp
_stricmp
isdigit
atoi
exit
_vsnprintf
strrchr
free
_tempnam
strchr
rand
srand
time
strncpy
memmove
_getch
isspace
fclose
fgets
fopen
malloc
_c_exit
_exit
_XcptFilter
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE