Static task
static1
Behavioral task
behavioral1
Sample
2f2121cf25939e34b18bb9a2a4e12840c73afce4d1af334c4b4249a402931e7b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2f2121cf25939e34b18bb9a2a4e12840c73afce4d1af334c4b4249a402931e7b.exe
Resource
win10v2004-20220812-en
General
-
Target
2f2121cf25939e34b18bb9a2a4e12840c73afce4d1af334c4b4249a402931e7b
-
Size
295KB
-
MD5
2a7310edcc4705ad27a4a8af7f617734
-
SHA1
cad7f177431225f6d639fd04bda207489dad99e1
-
SHA256
2f2121cf25939e34b18bb9a2a4e12840c73afce4d1af334c4b4249a402931e7b
-
SHA512
17892e2701c22f3845c02673f133d6ec9d4f6c39ce0627f053539437824e97aa33cadc9ddccbaba02ec95296e8e9ca3f3d706ce96bbddcf67dc0be27b483e054
-
SSDEEP
6144:xkbvlMVFcMNoU6iThUKGBYwqcggYMtGprpGwksUIRK42j8ZJyc:GBiThCBY6gTM2rpx+Uyc
Malware Config
Signatures
Files
-
2f2121cf25939e34b18bb9a2a4e12840c73afce4d1af334c4b4249a402931e7b.exe windows x86
485b9c71634503b2acf868a178c7392e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
FileTimeToLocalFileTime
GetModuleFileNameA
lstrcmpiA
HeapCreate
GetExitCodeProcess
GetDriveTypeA
SetLastError
IsValidCodePage
GetStdHandle
lstrlenA
Sleep
GetLogicalDrives
GetModuleHandleA
lstrcmpiA
lstrcmpiA
SuspendThread
GetProcessHeap
lstrcmpiA
CreateWaitableTimerW
GetBinaryTypeW
CreateNamedPipeA
EndUpdateResourceW
printui
bPrinterSetup
bFolderRefresh
ConstructPrinterFriendlyName
PnPInterface
Sections
.text Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 286KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xml Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE