Static task
static1
Behavioral task
behavioral1
Sample
21f2a1d1f368e52fa564e22c5711f4df46307ae9ec9f0d1b657d0ec47fe80443.exe
Resource
win7-20220812-en
General
-
Target
21f2a1d1f368e52fa564e22c5711f4df46307ae9ec9f0d1b657d0ec47fe80443
-
Size
261KB
-
MD5
5c173efc9d8eee3a4d0eb101841d0869
-
SHA1
17d2050186550aa4401964aabcfe217ac38edb2b
-
SHA256
21f2a1d1f368e52fa564e22c5711f4df46307ae9ec9f0d1b657d0ec47fe80443
-
SHA512
d617fd02db8ab7548e16499a572754bb750c943114df597f865db6fb1edd1943fa9f681b7b2712d5437a91e5fe648bd90c321c093a489109e1e1b27f0325b085
-
SSDEEP
6144:cDSQSlaYAiOMm0neGCKv33atdVfHFvyEYEv/eyJ05b1wM2:cDS/lFAzueGr/aVfIEYceo0By
Malware Config
Signatures
Files
-
21f2a1d1f368e52fa564e22c5711f4df46307ae9ec9f0d1b657d0ec47fe80443.exe windows x86
2fda39f0ce1fcc50606807d5434011ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumChildWindows
IsWindow
SendMessageA
CreateWindowExW
DestroyWindow
GetDlgItem
GetWindowThreadProcessId
newdev
UpdateDriverForPlugAndPlayDevicesW
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
GetACP
SetHandleCount
AddAtomA
HeapCreate
GetSystemInfo
VirtualQuery
GetEnvironmentStrings
GetFileType
GetCurrentProcess
GetCurrentProcessId
GetVersionExA
GetStdHandle
TlsAlloc
UnhandledExceptionFilter
SetLastError
GetOEMCP
TlsFree
FreeEnvironmentStringsA
TlsSetValue
HeapSize
TlsGetValue
TerminateProcess
EnumResourceNamesW
GetSystemTimeAsFileTime
GetStartupInfoA
VirtualFree
InterlockedExchange
GetCPInfo
FreeEnvironmentStringsW
lstrcatW
SetEndOfFile
GetModuleFileNameA
GetEnvironmentStringsW
WriteFile
GetLocaleInfoA
QueryPerformanceCounter
IsBadWritePtr
HeapDestroy
VirtualAlloc
SetUnhandledExceptionFilter
shell32
SHGetFolderPathW
iphlpapi
GetIpAddrTable
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
Sections
.text Size: 128KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ