Static task
static1
Behavioral task
behavioral1
Sample
21056b651b801663ee5e51cf946ab092307d5f14140f1d013277f62abba87ce2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
21056b651b801663ee5e51cf946ab092307d5f14140f1d013277f62abba87ce2.exe
Resource
win10v2004-20220901-en
General
-
Target
21056b651b801663ee5e51cf946ab092307d5f14140f1d013277f62abba87ce2
-
Size
56KB
-
MD5
28bee11de73b74e2a0e5c69d88854510
-
SHA1
3eb3201c6e4d6a5286f1d10ed4bbe0145e8a225b
-
SHA256
21056b651b801663ee5e51cf946ab092307d5f14140f1d013277f62abba87ce2
-
SHA512
f01d7a5f9b90089ee084e53717676a9e0590f345d64fd71f74053c5d0a002eb805890c02b0aa9b2fb07212e97c7fcced1f77f258fdc3528a1f5a0f60439029e5
-
SSDEEP
768:AqCPBRLsGVn3XSu9HGTaF6QZ9ypL0vzJDsOq2YAp:oZRvpy3TawKQwrJgOqH
Malware Config
Signatures
Files
-
21056b651b801663ee5e51cf946ab092307d5f14140f1d013277f62abba87ce2.exe windows x86
f002d20ad28f4c4db5d81d9d601d8a8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dbnmpntw
ConnectionRead
ConnectionWrite
ConnectionVer
kernel32
TlsGetValue
GetDateFormatW
SetCurrentDirectoryA
ExpandEnvironmentStringsA
WriteProcessMemory
HeapCreate
SystemTimeToFileTime
GetDiskFreeSpaceA
CreateNamedPipeW
SleepEx
GetTimeFormatA
GetNumberFormatA
GetProcessHeap
GetFullPathNameA
LoadLibraryA
GetAtomNameA
CompareStringA
GetPrivateProfileIntA
InterlockedExchange
CreateDirectoryA
shlwapi
PathCompactPathA
PathCombineA
UrlIsOpaqueA
UrlGetPartA
UrlHashA
UrlGetLocationA
UrlCombineA
PathCommonPrefixA
UrlIsA
UrlCanonicalizeA
themeui
DllCanUnloadNow
DllGetClassObject
DllInstall
DllCanUnloadNow
DllGetClassObject
user32
GetMessageA
IsZoomed
LoadImageW
CharToOemA
PeekMessageA
DispatchMessageA
SetFocus
wsprintfA
IsWindow
GetCaretPos
GetWindowLongA
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ