Static task
static1
Behavioral task
behavioral1
Sample
b2101451c286a578bcb6bfe4f11e127076e71b0dd8717fdc753d835e50121e21.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2101451c286a578bcb6bfe4f11e127076e71b0dd8717fdc753d835e50121e21.exe
Resource
win10v2004-20220812-en
General
-
Target
b2101451c286a578bcb6bfe4f11e127076e71b0dd8717fdc753d835e50121e21
-
Size
166KB
-
MD5
f3cd82f16a8228a647232f23150ea8dc
-
SHA1
64f058488f51ebea89e18205fd7099d5475b7665
-
SHA256
b2101451c286a578bcb6bfe4f11e127076e71b0dd8717fdc753d835e50121e21
-
SHA512
7e489eb26891f38f99dfa06b82ad1d226f5f0798c7506c3d5f2892a083df4c0a669e1e5a2c392d39e0edc9817828ce28cab9c82a2b59e1868789913cb6d8cb93
-
SSDEEP
1536:ABqwllIT75OKLjPn6A5muwXloYNPjtm6Oh8C:PwllIBOAjPnT5mFy0jsL8C
Malware Config
Signatures
Files
-
b2101451c286a578bcb6bfe4f11e127076e71b0dd8717fdc753d835e50121e21.exe windows x86
ce43e05a34fa828797ff138643c6628d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
lstrcpyW
InterlockedDecrement
EnterCriticalSection
lstrlenW
VirtualFree
SetUnhandledExceptionFilter
InterlockedDecrement
WriteFile
LocalAlloc
ExitProcess
HeapReAlloc
LeaveCriticalSection
lstrcpyW
SetFilePointer
GetCommandLineA
lstrcpyW
EnterCriticalSection
GetLastError
GetTickCount
ReadFile
LoadLibraryW
TerminateProcess
GetModuleFileNameA
HeapAlloc
lstrcpyW
GetStartupInfoW
CloseHandle
user32
SetWindowLongW
DispatchMessageA
SetCapture
SetFocus
SetCapture
GetWindowLongW
EndDialog
LoadStringA
GetKeyState
GetWindowLongW
ReleaseCapture
LoadStringW
UpdateWindow
ScreenToClient
LoadCursorW
MessageBeep
IsWindow
SetCursor
DialogBoxParamW
SendMessageA
LoadIconW
GetMenu
advapi32
RegSetValueExW
RegOpenKeyW
RegOpenKeyW
RegCreateKeyExW
RegDeleteValueW
FreeSid
RegDeleteKeyW
AddAccessAllowedAce
RegQueryValueExW
OpenProcessToken
GetTokenInformation
OpenProcessToken
AllocateAndInitializeSid
RegSetValueExA
gdi32
GetObjectW
GetDeviceCaps
CreateCompatibleDC
CreateBitmap
GetStockObject
CreateBitmap
DeleteDC
CreateCompatibleBitmap
SetTextColor
SelectObject
DeleteObject
CreateCompatibleDC
SetBkMode
GetDeviceCaps
CreateCompatibleBitmap
GetObjectW
LineTo
Sections
Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 1024B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE