Static task
static1
Behavioral task
behavioral1
Sample
f21204aa0f30fa5db7fbde0e78e4cf3d10335d44a9f94a2ca5b4eb5503f5fed4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f21204aa0f30fa5db7fbde0e78e4cf3d10335d44a9f94a2ca5b4eb5503f5fed4.exe
Resource
win10v2004-20221111-en
General
-
Target
f21204aa0f30fa5db7fbde0e78e4cf3d10335d44a9f94a2ca5b4eb5503f5fed4
-
Size
39KB
-
MD5
3f06b100176282bd0ec003cf8d89d624
-
SHA1
ad8c3c65a7600836ffb6cc26ffc2990d0434dfbf
-
SHA256
f21204aa0f30fa5db7fbde0e78e4cf3d10335d44a9f94a2ca5b4eb5503f5fed4
-
SHA512
71000b59f4290d22a624907311a94a60d1a3e66715022f89e4ae9815b65f85f8394d90cc8ffb96afedbdcc2481c82499c2a0a029007d87f4663afaae8ce4daa4
-
SSDEEP
768:4NcUQ+ENsQyU4t0ywaPQkxQPgOQ25Ar9atePVu2jA9/nW654:4NcUQ+ENzyU4tJ1PQ+2p+VE9/W654
Malware Config
Signatures
Files
-
f21204aa0f30fa5db7fbde0e78e4cf3d10335d44a9f94a2ca5b4eb5503f5fed4.exe windows x86
698ae3fe4fdbef634c018ebd0b32d942
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
DeleteCriticalSection
EnterCriticalSection
GetCommandLineA
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
lstrcpyn
lstrlen
MultiByteToWideChar
OpenMutexA
OpenProcess
ResumeThread
Sleep
TerminateThread
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WinExec
user32
BeginPaint
GetDesktopWindow
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
IsWindow
KillTimer
LoadCursorA
LoadIconA
gdi32
SetPixel
SetPixel
SetStretchBltMode
SetTextColor
SetWindowOrgEx
shell32
DragQueryPoint
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE