Static task
static1
Behavioral task
behavioral1
Sample
0321eceaebe49820dee248503dde41998af14c348cb0385c8be4483984087a7c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0321eceaebe49820dee248503dde41998af14c348cb0385c8be4483984087a7c.exe
Resource
win10v2004-20220812-en
General
-
Target
0321eceaebe49820dee248503dde41998af14c348cb0385c8be4483984087a7c
-
Size
203KB
-
MD5
0d5b44a213d31dcd07d3978922b6346e
-
SHA1
6b560b3ecf260e942ee0d5b2e11b3ca78ff35677
-
SHA256
0321eceaebe49820dee248503dde41998af14c348cb0385c8be4483984087a7c
-
SHA512
55d8d79ef1bc1d6a703d3a9a1f31ab500f18ad85f2252d5d5610b83c11a917bdec6711f47b649abaf2f8a4939fd84fd7c4cd92e670ec5d1ad89ba557ec49d4f6
-
SSDEEP
1536:R2PwdIzh37E5t8lNiKmnoyFIK2dFpZvdQEE4JZPwmYj07dQ2qdPGx:6lLE5t8biKmnoG2dfZCl4vPaCdA8
Malware Config
Signatures
Files
-
0321eceaebe49820dee248503dde41998af14c348cb0385c8be4483984087a7c.exe windows x86
2d1b318cc9d682308de067ba804fb141
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
LCMapStringA
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
HeapAlloc
ExitProcess
GetVersion
GetCommandLineA
GetStringTypeW
GetProcAddress
CreateFileA
DeviceIoControl
LocalAlloc
LocalFree
lstrcatA
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcmpiA
GetTickCount
lstrcpyA
WaitForMultipleObjects
SetEvent
WaitForSingleObject
CloseHandle
SearchPathA
lstrcmpA
CreateMutexA
GetLastError
GetVersionExA
Sleep
CreateEventA
CreateThread
WinExec
GetCPInfo
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
user32
GetMessageA
DispatchMessageA
LoadStringA
LoadImageA
CreateWindowExA
ShowWindow
TranslateMessage
TrackPopupMenu
CharUpperA
GetSysColor
SystemParametersInfoA
GetDC
RegisterClassA
ReleaseDC
CreatePopupMenu
InsertMenuItemA
GetCursorPos
GetMenuCheckMarkDimensions
DestroyMenu
PostQuitMessage
PostMessageA
SetForegroundWindow
DefWindowProcA
GetDesktopWindow
GetWindow
GetClassNameA
SendMessageA
LoadIconA
LoadCursorA
gdi32
CreateCompatibleDC
BitBlt
DeleteDC
CreatePen
MoveToEx
CreateBrushIndirect
Rectangle
GetTextColor
SetTextColor
GetBkMode
SetBkMode
GetTextAlign
SetTextAlign
ExtTextOutA
CreateFontIndirectA
SelectObject
GetTextExtentPoint32A
DeleteObject
LineTo
advapi32
RegEnumKeyA
RegDeleteValueA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
shell32
Shell_NotifyIconA
setupapi
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsA
SetupDiDestroyDeviceInfoList
winmm
mixerClose
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerGetNumDevs
mixerGetID
mixerGetDevCapsA
mixerOpen
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 157KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE