Static task
static1
Behavioral task
behavioral1
Sample
21127e0a2d3065dde52231149ac8b272df07a81c5602ba8228ef310607c7331f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
21127e0a2d3065dde52231149ac8b272df07a81c5602ba8228ef310607c7331f.exe
Resource
win10v2004-20220812-en
General
-
Target
21127e0a2d3065dde52231149ac8b272df07a81c5602ba8228ef310607c7331f
-
Size
98KB
-
MD5
4d4f4839dfd1a4adedb4e79a04f9ccc0
-
SHA1
9c914fcc3939722c1a872c94cfd24e752d47a813
-
SHA256
21127e0a2d3065dde52231149ac8b272df07a81c5602ba8228ef310607c7331f
-
SHA512
b981ab7ca69d4c2dd02ed1841e9a56060684beb1949b5914a7ab469410cdfa5e706d02d56d3edf5d9aa00db62c085f64a732d206b90e525f4f6b0d048ed2aa98
-
SSDEEP
1536:nRGg1DRFFZuj9RGg1DRFFZujFMTcTuJY+kS6AUdajYeby1Hlu:gg1HFZumg1HFZuwcCoHAC
Malware Config
Signatures
Files
-
21127e0a2d3065dde52231149ac8b272df07a81c5602ba8228ef310607c7331f.exe windows x86
c99a6e79266f242a1b420f8d52799c41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CloseHandle
CreateFileW
CompareStringW
GlobalFree
GetLastError
GlobalAlloc
LocalFree
WriteFile
LocalAlloc
WideCharToMultiByte
GetStdHandle
GetConsoleOutputCP
GetModuleHandleW
SetConsoleCtrlHandler
ExpandEnvironmentStringsW
GetCommandLineW
SetEvent
WaitForSingleObject
CreateEventW
FormatMessageW
HeapSetInformation
SetThreadUILanguage
InterlockedExchange
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
msvcrt
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_XcptFilter
_except_handler4_common
_exit
_cexit
__getmainargs
exit
_itow
wcschr
_wcsupr
wcsstr
getchar
_getwch
__iob_func
fputwc
memset
_initterm
rasapi32
RasGetEapUserIdentityW
RasEnumConnectionsW
RasGetErrorStringW
RasGetEntryPropertiesW
RasGetConnectStatusW
RasDialW
RasFreeEapUserIdentityW
RasHangUpW
user32
LoadStringW
shell32
CommandLineToArgvW
ntdll
WinSqmSetDWORD
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wdpcsba Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE