Static task
static1
Behavioral task
behavioral1
Sample
21f6a593c9fc1f1cd99c928c41891f284ddf17743208e712fea25ea17cb4cb2e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
21f6a593c9fc1f1cd99c928c41891f284ddf17743208e712fea25ea17cb4cb2e.exe
Resource
win10v2004-20221111-en
General
-
Target
21f6a593c9fc1f1cd99c928c41891f284ddf17743208e712fea25ea17cb4cb2e
-
Size
2.1MB
-
MD5
0f8ac80afc626d290648b267a5088f82
-
SHA1
28b653a638c36095913485448ad355106ba0778e
-
SHA256
21f6a593c9fc1f1cd99c928c41891f284ddf17743208e712fea25ea17cb4cb2e
-
SHA512
6af7b8d129c55a138f4faeb9dc0956857c2c42811fbde5ad2be35da9bd89790258942b7f90c279cc7f69465d1ab04abd715e8eaf84d3e9627f97f912a2b8d7ec
-
SSDEEP
49152:cF3XLc/7GHoPs0r9w7ZUR1D6/M5qVMpnc2IVZhUcV5A+d5s0L6h:cRs7NUeWSDlqwcXZhU8rd5U
Malware Config
Signatures
Files
-
21f6a593c9fc1f1cd99c928c41891f284ddf17743208e712fea25ea17cb4cb2e.exe windows x86
1be00dfa152f5934fa1ef1b70e79f17a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
IsClipboardFormatAvailable
gdi32
CreateSolidBrush
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
RegEnumKeyExA
shell32
DragFinish
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
oledlg
ord8
ole32
OleInitialize
oleaut32
SysStringLen
gdiplus
GdipDrawImageI
imm32
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 2.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE