Static task
static1
Behavioral task
behavioral1
Sample
821a08f51d4cf5396a8b2bc4fca9a3c58d3d4cd315681ef71f6de61c986ee572.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
821a08f51d4cf5396a8b2bc4fca9a3c58d3d4cd315681ef71f6de61c986ee572.exe
Resource
win10v2004-20220901-en
General
-
Target
821a08f51d4cf5396a8b2bc4fca9a3c58d3d4cd315681ef71f6de61c986ee572
-
Size
276KB
-
MD5
05fe1fc9e7bc1324c91d898d6ca37630
-
SHA1
0a852a02e7fb7a57443b653ab43171d4a9e5b798
-
SHA256
821a08f51d4cf5396a8b2bc4fca9a3c58d3d4cd315681ef71f6de61c986ee572
-
SHA512
b94045b9227f00f13144dc4faee961f809172cfe0267892646116f91ac3768179bce7ed3118c4b7d116ff42e6ca71b8e74813868690d0c2e99488d8aabbd5a26
-
SSDEEP
6144:Tu6oli/W29vKVwLkx+ZfYGRTlR6ufRhbKz:R/W29vKGLw+KG93Jw
Malware Config
Signatures
Files
-
821a08f51d4cf5396a8b2bc4fca9a3c58d3d4cd315681ef71f6de61c986ee572.exe windows x86
a21c5fb6dc3e6f882f56550157fe1441
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
GetModuleFileNameW
GetLocaleInfoW
LoadLibraryW
CloseHandle
SetFilePointer
ReadFile
GetLogicalDrives
GetConsoleMode
GetConsoleCP
WriteFile
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetStdHandle
CreateFileA
CreateFileW
GetFileSize
GetLastError
GlobalAlloc
GetProcessHeap
lstrcpyA
HeapCreate
GetModuleFileNameA
GetCurrentDirectoryW
HeapAlloc
GetConsoleWindow
FormatMessageA
lstrcpynA
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
SetLastError
SetEndOfFile
TlsFree
TlsSetValue
TlsGetValue
FlushFileBuffers
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapFree
RaiseException
RtlUnwind
GetProcAddress
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
IsProcessorFeaturePresent
TlsAlloc
user32
InvalidateRect
ReleaseDC
SendDlgItemMessageA
SetFocus
GetClientRect
GetDC
SendMessageA
IsWindow
GetWindow
CloseWindow
GetScrollInfo
SetScrollInfo
SetRect
MoveWindow
GetDlgItemTextW
DestroyAcceleratorTable
GetWindowLongA
LoadBitmapA
AppendMenuA
SetMenu
CheckDlgButton
SetWindowTextW
BeginPaint
EndPaint
SetTimer
KillTimer
DestroyWindow
LoadStringA
SendDlgItemMessageW
EnumDisplayMonitors
DialogBoxParamA
GetDlgItem
gdi32
CreateBrushIndirect
SetBkColor
CreatePen
SelectObject
SetTextColor
CreatePatternBrush
TextOutW
CreateCompatibleDC
GetBitmapBits
DeleteObject
GetObjectA
DeleteDC
CreateDIBSection
comdlg32
GetOpenFileNameA
GetFileTitleW
advapi32
LookupAccountSidW
CryptAcquireContextA
ConvertStringSidToSidW
shell32
SHGetFolderLocation
SHGetFileInfoA
ord155
oleaut32
VariantClear
VariantInit
ws2_32
WSACleanup
gethostbyname
htons
socket
WSAStartup
mpr
WNetGetUniversalNameA
msvfw32
MCIWndCreateA
comctl32
ord17
GetMUILanguage
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ