Static task
static1
Behavioral task
behavioral1
Sample
821af98c7b31d37300152f94630e07bfdfda9d4280e586b9d9ec1156699dad06.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
821af98c7b31d37300152f94630e07bfdfda9d4280e586b9d9ec1156699dad06.exe
Resource
win10v2004-20220812-en
General
-
Target
821af98c7b31d37300152f94630e07bfdfda9d4280e586b9d9ec1156699dad06
-
Size
20KB
-
MD5
4f6b5cf0730417cfef7d43186e38f36b
-
SHA1
f40f9f1221fbe65eba036e3acd2928c43f2827fb
-
SHA256
821af98c7b31d37300152f94630e07bfdfda9d4280e586b9d9ec1156699dad06
-
SHA512
47d03168dd470d374ecdfd1a6ff52f6345fa7cfb86c7646c633d4701fb4af6765be877d16494ec59cdb6ab15aba9aa8c9a05c4d2b755a0c0cc3d15d75b8c5f00
-
SSDEEP
384:MxQ0OxfQVnIhdLscfdbIfhNg5Sx9XrMtjPT4V:MxY3hKc83gMx9XrMtj
Malware Config
Signatures
Files
-
821af98c7b31d37300152f94630e07bfdfda9d4280e586b9d9ec1156699dad06.exe windows x86
26d104a9e307809824e401c8beb291c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp60
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
kernel32
FindResourceA
LoadResource
LockResource
SizeofResource
GetSystemDirectoryA
WinExec
CloseHandle
WriteFile
ExitProcess
CreateFileA
msvcrt
_onexit
__dllonexit
__CxxFrameHandler
free
advapi32
RegOpenKeyA
RegSetValueExA
RegCloseKey
Sections
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qnk Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE