Static task
static1
Behavioral task
behavioral1
Sample
a21b4aa56310c20c989b78211dd2da24f404fd3183e5b676deaab3a8eeb5c8ee.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a21b4aa56310c20c989b78211dd2da24f404fd3183e5b676deaab3a8eeb5c8ee.exe
Resource
win10v2004-20220812-en
General
-
Target
a21b4aa56310c20c989b78211dd2da24f404fd3183e5b676deaab3a8eeb5c8ee
-
Size
205KB
-
MD5
ed90dd299da013be7ed31821333316df
-
SHA1
4ca2da71c34c21f6cd17783aaca614e96919ed62
-
SHA256
a21b4aa56310c20c989b78211dd2da24f404fd3183e5b676deaab3a8eeb5c8ee
-
SHA512
9f25d5d45a384e2ce1cb56852e18e2139ab239b0207ea962d26d6293a880e720af638ee40cd712f5e029dc132ebfdea8e84cce3c4468e5c174bb44ab893aad0f
-
SSDEEP
6144:761jeQ+4O5XX+QOpFcDdYiso5iSM3Omlc67N:E7NO43pWgoYSNtqN
Malware Config
Signatures
Files
-
a21b4aa56310c20c989b78211dd2da24f404fd3183e5b676deaab3a8eeb5c8ee.exe windows x86
79cf11a0d49445dc1ae2c2904517a4e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueueUserAPC
DeleteTimerQueueEx
TerminateJobObject
GetConsoleAliasExesLengthW
DisconnectNamedPipe
FatalAppExitA
DeleteFileA
CreateFileMappingW
SetSystemPowerState
GetCommandLineW
SetFileAttributesW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 54KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE