Static task
static1
Behavioral task
behavioral1
Sample
21aab12313ad2431f3541be2882fe778e1f434b1e0fb72358ea47b174cf20da6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
21aab12313ad2431f3541be2882fe778e1f434b1e0fb72358ea47b174cf20da6.exe
Resource
win10v2004-20220901-en
General
-
Target
21aab12313ad2431f3541be2882fe778e1f434b1e0fb72358ea47b174cf20da6
-
Size
303KB
-
MD5
07752bc3b8c8b5bfb25ae678ad8d4a30
-
SHA1
effb617d84ddbc99cb68aaaf2152a2ac0c6bb97a
-
SHA256
21aab12313ad2431f3541be2882fe778e1f434b1e0fb72358ea47b174cf20da6
-
SHA512
19b56ce238f278beba60aa8d5aabd5b0957c466ef23939e8f82d383cb7e606bed6a36fdbb5f82add2fdd8dee22fc42f20cc0f54a63d97640776fe2aa41c8439e
-
SSDEEP
6144:tpJUG6g2kCeT7aWNshsBdRN9PacAY923nBNjnIKgxrOTOZ3TvU:t3TvWttunVycInDDFgxyKtY
Malware Config
Signatures
Files
-
21aab12313ad2431f3541be2882fe778e1f434b1e0fb72358ea47b174cf20da6.exe windows x86
e945cb9c6a8c353076f34363fce8a7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsIconic
FrameRect
TabbedTextOutA
GetWindowContextHelpId
GetMenu
MessageBoxW
GetScrollBarInfo
GetKeyboardLayoutList
DrawTextA
DrawMenuBar
GetWindowTextLengthW
GetMenuItemID
DefWindowProcW
FillRect
GetMenuStringA
ReleaseCapture
IsWindow
CreateWindowExW
GetCaretBlinkTime
EnableMenuItem
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
ShellExecuteW
DragAcceptFiles
DragFinish
SHGetFileInfoA
ShellExecuteA
DragQueryFileA
ole32
CreateILockBytesOnHGlobal
advapi32
RegCloseKey
RegDeleteKeyA
RegCreateKeyW
RegSetValueExA
AdjustTokenPrivileges
RegOpenKeyExA
LookupPrivilegeValueA
RegCreateKeyExA
OpenProcessToken
gdi32
GetClipBox
CloseMetaFile
ExtTextOutW
GetKerningPairsW
CreateDCA
SetStretchBltMode
GetGraphicsMode
Arc
CreateCompatibleBitmap
SelectPalette
GetClipRgn
ArcTo
GetTextAlign
Polyline
GetEnhMetaFilePaletteEntries
CancelDC
SetMiterLimit
EnumMetaFile
GdiFlush
GetNearestColor
dbghelp
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
comctl32
ImageList_Add
ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy
InitCommonControlsEx
ImageList_Remove
version
GetFileVersionInfoSizeA
kernel32
HeapSize
GetStringTypeW
RtlUnwind
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCPInfo
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
GetLocaleInfoA
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetTickCount
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadProcessMemory
QueryPerformanceCounter
HeapFree
GetPriorityClass
LocalAlloc
GlobalUnfix
SetFileApisToANSI
GetFileType
WTSGetActiveConsoleSessionId
GetProfileStringA
BeginUpdateResourceW
GetShortPathNameW
GetCurrentDirectoryA
QueueUserWorkItem
ResetEvent
FlushFileBuffers
FatalAppExitA
TlsSetValue
GetFullPathNameA
GetFullPathNameW
GetLogicalDrives
GetExitCodeProcess
GetPrivateProfileStringA
GetFileSize
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ