Static task
static1
Behavioral task
behavioral1
Sample
421ec5d3e62d65f89c5343878a9696f8bda690f2094c041c4c654d69542977c0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
421ec5d3e62d65f89c5343878a9696f8bda690f2094c041c4c654d69542977c0.exe
Resource
win10v2004-20220812-en
General
-
Target
421ec5d3e62d65f89c5343878a9696f8bda690f2094c041c4c654d69542977c0
-
Size
221KB
-
MD5
135211be4c96e20829e0c977307b8ba5
-
SHA1
0e6d6c62906c8ae1cbe529edbe005a1cd7c97bb1
-
SHA256
421ec5d3e62d65f89c5343878a9696f8bda690f2094c041c4c654d69542977c0
-
SHA512
85f71cd7424a9857c56cf973936badc2b98a35a0c0fd958516cc4fa9b24ecb7baf5ee08747c3e5f4b4ab260f75ac7fc8f15f9d8f9346c49c6dcd4ce1e8b430f8
-
SSDEEP
3072:mTBh/uFmC0ADeeRziPpqVVDJ98Chym05vY6WkAU5ssxSQuBxQrilz/KADqMG+qyx:mTBtuoHAz3VV8Np5MmJcziyG+qyURu
Malware Config
Signatures
Files
-
421ec5d3e62d65f89c5343878a9696f8bda690f2094c041c4c654d69542977c0.exe windows x86
714c636691ec00794a45ddb1776887ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
HeapSize
InterlockedExchangeAdd
GetPrivateProfileIntW
GetTimeFormatA
EnterCriticalSection
HeapAlloc
LoadLibraryA
GetACP
TlsGetValue
GetPriorityClass
SetSystemTime
DeleteCriticalSection
GetEnvironmentStrings
WriteFile
SetLastError
GetCurrentThread
GetVersionExA
HeapCreate
CompareStringA
VirtualProtect
GetLocaleInfoA
HeapDestroy
GetLocaleInfoW
AddAtomA
IsValidCodePage
GetStringTypeW
GetUserDefaultLCID
GetProcAddress
FreeEnvironmentStringsA
GetTimeZoneInformation
HeapFree
GetPrivateProfileSectionW
GetLastError
GetSystemDirectoryW
IsValidLocale
VirtualQuery
TlsFree
LCMapStringA
UnhandledExceptionFilter
GetDateFormatA
LCMapStringW
FreeEnvironmentStringsW
GetSystemInfo
HeapReAlloc
TlsAlloc
ExitProcess
EnumSystemLocalesA
CompareStringW
VirtualAlloc
TerminateProcess
QueryPerformanceCounter
GetCurrentProcess
SetEnvironmentVariableA
GetModuleHandleA
GetStdHandle
LeaveCriticalSection
MultiByteToWideChar
GetCurrentThreadId
VirtualFree
InitializeCriticalSection
GetFileType
GetStringTypeA
GetCurrentProcessId
GetModuleFileNameA
SetHandleCount
GetEnvironmentStringsW
WriteProfileSectionA
GetTickCount
IsBadWritePtr
GetCPInfo
GetStartupInfoA
WideCharToMultiByte
TlsSetValue
RtlUnwind
GetOEMCP
GetSystemTimeAsFileTime
InterlockedExchange
user32
CreateMDIWindowA
DialogBoxParamW
GetSystemMetrics
GetFocus
SetMenuContextHelpId
GetWindowTextA
MapVirtualKeyExA
GetThreadDesktop
CallWindowProcA
GetDialogBaseUnits
RemovePropW
ChangeDisplaySettingsA
GetKeyboardType
FillRect
EnumDisplayDevicesA
OemToCharW
EnumDisplaySettingsExA
CharPrevExA
OemToCharBuffW
GetClipboardFormatNameA
CreateCaret
CallMsgFilter
shell32
SHInvokePrinterCommandA
DoEnvironmentSubstA
ShellExecuteA
InternalExtractIconListW
ShellHookProc
SHGetPathFromIDList
SHFileOperationA
SHGetFileInfoA
SHGetMalloc
InternalExtractIconListA
SHBrowseForFolderA
ExtractAssociatedIconA
SHFreeNameMappings
SHGetFileInfoW
DragAcceptFiles
DragQueryFileAorW
ShellExecuteExA
gdi32
CreateColorSpaceW
SetFontEnumeration
GetRgnBox
EnumEnhMetaFile
TranslateCharsetInfo
GetKerningPairs
SetStretchBltMode
GetCharWidth32W
OffsetViewportOrgEx
GetOutlineTextMetricsA
PolyDraw
GetTextExtentExPointA
SetMiterLimit
GetEnhMetaFileBits
AngleArc
CreatePolyPolygonRgn
GetDeviceGammaRamp
GetICMProfileW
SetLayout
GdiPlayJournal
SelectClipPath
FlattenPath
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 111KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ