Static task
static1
Behavioral task
behavioral1
Sample
21bebc5d76364ab0925bbbfe225038ee04f8e59ab606a872cd7af5e1c690c3a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
21bebc5d76364ab0925bbbfe225038ee04f8e59ab606a872cd7af5e1c690c3a7.exe
Resource
win10v2004-20220812-en
General
-
Target
21bebc5d76364ab0925bbbfe225038ee04f8e59ab606a872cd7af5e1c690c3a7
-
Size
30KB
-
MD5
96de94d362bee1a57a2f293a7b0e8000
-
SHA1
373cd1dc7fc97332881043cd8179c0095c7c86ae
-
SHA256
21bebc5d76364ab0925bbbfe225038ee04f8e59ab606a872cd7af5e1c690c3a7
-
SHA512
e54199860e8f77ccf2f99c958d09fc4ed1072cc706d7d05ad5423d7c9846afcf9fbb1961a45eceeaa141e725325cc232ad2e9479f4e6b3f9c3e6a180d660aae0
-
SSDEEP
384:Y9Icz3kBWTHdGav99999999yi9wKKCMfxrZYkdzYHQ+GBgqPSSr:YRDzv99999999yiuKKCMfxrZY2+GmgSe
Malware Config
Signatures
Files
-
21bebc5d76364ab0925bbbfe225038ee04f8e59ab606a872cd7af5e1c690c3a7.exe windows x86
917348bda7a5234afc1adbb55fc54c1a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
FreeLibrary
VirtualProtect
VirtualAlloc
SetEnvironmentVariableA
GetEnvironmentVariableA
GetModuleHandleA
gdi32
CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
DeleteDC
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetBkColor
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
SelectObject
CreateFontIndirectA
GetTextExtentExPointA
SetMapMode
GetDeviceCaps
GetTextMetricsA
CreateFontA
RealizePalette
user32
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostQuitMessage
GetForegroundWindow
SetForegroundWindow
CreateMenu
GetSystemMenu
GetDoubleClickTime
UpdateWindow
GetQueueStatus
GetClipboardOwner
FindWindowA
imm32
ImmGetCompositionStringW
ImmSetCompositionFontA
ImmGetContext
ImmSetCompositionWindow
ole32
CoUninitialize
CoInitialize
CoCreateInstance
Sections
.data Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ