Static task
static1
Behavioral task
behavioral1
Sample
21de28db3ad1a8f37c75daf03be5e6c4d706b8ab3afa8392d49c6d59ac092ae7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
21de28db3ad1a8f37c75daf03be5e6c4d706b8ab3afa8392d49c6d59ac092ae7.exe
Resource
win10v2004-20221111-en
General
-
Target
21de28db3ad1a8f37c75daf03be5e6c4d706b8ab3afa8392d49c6d59ac092ae7
-
Size
25KB
-
MD5
57c678211dda0d349e2d9d2a25116a19
-
SHA1
77971234309f22074587833f1284bb4dc66923a4
-
SHA256
21de28db3ad1a8f37c75daf03be5e6c4d706b8ab3afa8392d49c6d59ac092ae7
-
SHA512
c83b19fd53177e43d4f69c7a7a6d55bdd9220034ec46eebf732b1e34271e0af6f608509931440c1ade08816b1919e4ca57328acccc2c5ce1fd2d71e6f31f7c51
-
SSDEEP
384:hUmKnSZYRuVh7f0EYw+BrkylhOLX4+l6BU0NTy93SKUW:9uSZwuLD0xw3qOLo/lTyM7W
Malware Config
Signatures
Files
-
21de28db3ad1a8f37c75daf03be5e6c4d706b8ab3afa8392d49c6d59ac092ae7.exe windows x86
bd347a04412fe01f49633bafc4b156b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
Sleep
CopyFileA
lstrcpyA
GetLastError
GetWindowsDirectoryA
DeleteFileA
GetTickCount
WaitForSingleObject
GetModuleFileNameA
GetSystemDirectoryA
GetModuleHandleA
GetCommandLineA
mfc42
ord404
ord823
ord3790
ord825
ord5207
ord389
ord665
ord1979
ord6385
ord353
ord800
ord939
ord540
ord561
ord815
ord2614
ord2818
ord922
ord924
ord537
ord6663
ord2764
ord4202
ord5186
ord354
ord941
ord1105
ord5442
ord3318
ord1575
msvcrt
sprintf
exit
__dllonexit
_onexit
_exit
_XcptFilter
__p___initenv
time
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
srand
rand
_except_handler3
__getmainargs
__CxxFrameHandler
_stricmp
msvcp60
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ