Static task
static1
Behavioral task
behavioral1
Sample
c21e1f47d2baab45563f5c0fdcb477f25ad1d1921c1cabef62a6564d06957fdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c21e1f47d2baab45563f5c0fdcb477f25ad1d1921c1cabef62a6564d06957fdf.exe
Resource
win10v2004-20220812-en
General
-
Target
c21e1f47d2baab45563f5c0fdcb477f25ad1d1921c1cabef62a6564d06957fdf
-
Size
481KB
-
MD5
01d57137e6487931696a697fe6974d54
-
SHA1
7de5a17359a07938ec742770a15db51c80104a6f
-
SHA256
c21e1f47d2baab45563f5c0fdcb477f25ad1d1921c1cabef62a6564d06957fdf
-
SHA512
c98e2529e709977b57abe7c677cea3eddc2ba1fad1e305890c51223449c02ca30051e718e3a3a321a173c248898b4f1c6d45ca274eed53c05d531b54d64a2aec
-
SSDEEP
6144:qsEsr///fbTXmeKHCYp+Xu7brabiz2BJWIyeoTDKj5uejBdv:qst/XkCYp+6br52/WIyB65f
Malware Config
Signatures
Files
-
c21e1f47d2baab45563f5c0fdcb477f25ad1d1921c1cabef62a6564d06957fdf.exe windows x86
87e7e4eefdf5514bea443f5ce4f8e760
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winscard
SCardEstablishContext
SCardListReadersA
SCardReleaseContext
SCardFreeMemory
SCardGetStatusChangeA
SCardTransmit
g_rgSCardT1Pci
SCardConnectA
SCardDisconnect
kernel32
SetLastError
SetStdHandle
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
GetSystemTime
CloseHandle
ReadFile
SetFilePointer
GetFileSize
CreateFileA
WriteFile
GetLocalTime
GetLastError
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
RtlUnwind
WideCharToMultiByte
IsDebuggerPresent
MultiByteToWideChar
RaiseException
lstrlenA
GetProcAddress
LoadLibraryW
DecodePointer
EncodePointer
GetCommandLineA
HeapSetInformation
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapValidate
IsBadReadPtr
GetModuleFileNameW
CreateFileW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
GetModuleHandleW
InterlockedIncrement
IsValidLocale
InterlockedDecrement
GetCurrentThread
HeapFree
HeapAlloc
GetProcessHeap
VirtualQuery
FreeLibrary
GetStdHandle
GetLocaleInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
HeapReAlloc
HeapSize
HeapQueryInformation
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
SetConsoleCtrlHandler
InterlockedExchange
GetConsoleCP
LCMapStringW
GetStringTypeW
GetLocaleInfoA
Sections
.textbss Size: - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 377KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ