Static task
static1
Behavioral task
behavioral1
Sample
f21159d8a4163d93b11b7a3b95a7209f7e562d35120ccfb6dbe8c95b44b9136c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f21159d8a4163d93b11b7a3b95a7209f7e562d35120ccfb6dbe8c95b44b9136c.exe
Resource
win10v2004-20220812-en
General
-
Target
f21159d8a4163d93b11b7a3b95a7209f7e562d35120ccfb6dbe8c95b44b9136c
-
Size
328KB
-
MD5
7101afb3fd99da5a7623d117bc4ecf28
-
SHA1
4169a510426d7bf447c662d64d16ee2fa83ba807
-
SHA256
f21159d8a4163d93b11b7a3b95a7209f7e562d35120ccfb6dbe8c95b44b9136c
-
SHA512
928dc023d47bdc6df53a8c15db7534c145c335b9bb5d8ee1c743f5a9dcd31b10480c98f0a66f1e6f8b4096cd8125086fe82bb119d90957cb4a58c51deecf3cf7
-
SSDEEP
6144:Cl25NNhRvldJfpqZwuSydYcq2ZjqXooW7oKvFbDhDz79fq:RlnRqWu9dK2ZQZW7oEXhDX9S
Malware Config
Signatures
Files
-
f21159d8a4163d93b11b7a3b95a7209f7e562d35120ccfb6dbe8c95b44b9136c.exe windows x86
e6535ae5e31a6fad5e14ad93130df8bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
FindClose
TlsGetValue
GetTickCount
CloseHandle
GetCommandLineA
GetComputerNameA
Sleep
GetLastError
GetExitCodeProcess
GetModuleHandleA
SearchPathA
GetDriveTypeA
CreateSemaphoreA
GetModuleFileNameA
DeleteCriticalSection
SetLastError
CreateMutexA
VirtualProtect
FreeConsole
shell32
SHGetMalloc
DragAcceptFiles
StrChrA
ShellAboutA
ShellMessageBoxA
DragQueryPoint
SHGetDiskFreeSpaceA
DragQueryFileA
SHFree
SHAlloc
DragFinish
SheChangeDirA
SHGetSettings
SHGetNewLinkInfo
mgmtapi
SnmpMgrRequest
SnmpMgrClose
SnmpMgrOpen
SnmpMgrGetTrap
SnmpMgrCtl
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ