Static task
static1
Behavioral task
behavioral1
Sample
21d5001bfc550541c469545f9cfefbbb9a7db4ee86ca66428ecb15591097b3aa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
21d5001bfc550541c469545f9cfefbbb9a7db4ee86ca66428ecb15591097b3aa.exe
Resource
win10v2004-20220812-en
General
-
Target
21d5001bfc550541c469545f9cfefbbb9a7db4ee86ca66428ecb15591097b3aa
-
Size
65KB
-
MD5
1728ba0fe0ba61e31a958b9d0a489b54
-
SHA1
35a0cb85cb56fbed17331f34fc8cce74f24c4461
-
SHA256
21d5001bfc550541c469545f9cfefbbb9a7db4ee86ca66428ecb15591097b3aa
-
SHA512
fa495c805844b3f72c12c1918d3805e5a90839be856bdde45dbdea58f24ef22121f6ceedc3c8686a0b4a0987d42a4297c76f46395d06d6b9d18ce2d46c60508a
-
SSDEEP
768:ZH1VLCerjyRoW+P+DyCaCfG/XPSVJgHDKIZyGc+TcXfZnNpDJAXQz+0Ia:ZVVuYWvNa7PP7DKYyB+WZnNto2Z
Malware Config
Signatures
Files
-
21d5001bfc550541c469545f9cfefbbb9a7db4ee86ca66428ecb15591097b3aa.exe windows x86
a7d507cb6547e40bd0471503ed7af4cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MsgWaitForMultipleObjects
DispatchMessageA
OpenWindowStationA
GetDlgItemTextA
CloseDesktop
GetWindowTextA
SetProcessWindowStation
CloseWindowStation
GetMessageA
GetDlgItem
kernel32
lstrcmpiA
WideCharToMultiByte
FindClose
CreateFileA
GetLocalTime
CreateMutexW
CreateProcessW
SetFilePointer
InitializeCriticalSection
GetModuleHandleA
VirtualProtect
CreateThread
GlobalLock
VirtualAlloc
ReleaseMutex
lstrcatW
SetEvent
MultiByteToWideChar
CreateEventW
SetFileTime
lstrcmpiW
ResetEvent
FindFirstFileW
shlwapi
PathCombineW
PathFileExistsW
PathFindFileNameW
SHDeleteKeyA
wvnsprintfA
wvnsprintfW
wnsprintfW
wnsprintfA
advapi32
DuplicateTokenEx
RegQueryValueExA
CryptCreateHash
GetUserNameW
RegSetValueExA
CryptReleaseContext
RegDeleteValueA
RegEnumKeyExA
CryptGetHashParam
CryptAcquireContextW
RegCloseKey
RegCreateKeyExA
CryptHashData
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE