Static task
static1
Behavioral task
behavioral1
Sample
821b5573adac35f9e38cc857f214174fcc6edaf739ef0a527229f0d009d3e6a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
821b5573adac35f9e38cc857f214174fcc6edaf739ef0a527229f0d009d3e6a6.exe
Resource
win10v2004-20221111-en
General
-
Target
821b5573adac35f9e38cc857f214174fcc6edaf739ef0a527229f0d009d3e6a6
-
Size
210KB
-
MD5
c588b16bec5079f042259340bc6796f6
-
SHA1
56426d532ee7d2100b384cd78b292782d23af14e
-
SHA256
821b5573adac35f9e38cc857f214174fcc6edaf739ef0a527229f0d009d3e6a6
-
SHA512
05f31a4b03e40213000596b89aa525c11e1ef00f2fc83e6176adbeab56b7f786a4e422a747499787a5b16304d6565511b5d5464e8aa8c05ddce8da318216cb31
-
SSDEEP
6144:U9NSXX5YxY2dPET2ndZL/bf+a8VG8MCuB/Kh12PZ:U9o5aYqPETqdZ7+tMlBc1WZ
Malware Config
Signatures
Files
-
821b5573adac35f9e38cc857f214174fcc6edaf739ef0a527229f0d009d3e6a6.exe windows x86
2f47f1f30ce8788e3f60f402ebf5a5e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
floor
ceil
strlen
realloc
__p__iob
free
_fileno
_setmode
malloc
calloc
fread
ferror
fseek
ftell
_fstat
feof
fclose
fopen
qsort
memmove
fprintf
_CIlog
frexp
memchr
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
HeapReAlloc
TlsSetValue
WaitForMultipleObjects
EnterCriticalSection
CloseHandle
LeaveCriticalSection
GetCurrentThreadId
InitializeCriticalSection
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
user32
CallWindowProcA
winmm
mciSendCommandA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.. Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
..aer Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ