Static task
static1
Behavioral task
behavioral1
Sample
c26bdf25e24bfc1a825c83b4524dcae9ab59529180d99096c371412297bb0b1d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c26bdf25e24bfc1a825c83b4524dcae9ab59529180d99096c371412297bb0b1d.exe
Resource
win10v2004-20220901-en
General
-
Target
c26bdf25e24bfc1a825c83b4524dcae9ab59529180d99096c371412297bb0b1d
-
Size
184KB
-
MD5
cb4ffd60fa084deb77031954fe49e69c
-
SHA1
cfc962854cc2d565541549c6efec2c1d19ed6d15
-
SHA256
c26bdf25e24bfc1a825c83b4524dcae9ab59529180d99096c371412297bb0b1d
-
SHA512
8ee110323a56541f5bdcc36370915054bfea4725c65bded7a210cd7e0b6ea3bcf93eed6fc7e17615f93fac48f5712dc193df438a39f60c335133c4c3e682dc1f
-
SSDEEP
3072:dDw+WMoM1w0IuyWrK94Arm3PfessV6atk8zVpk9mwBB0cCZXE/JwmmJvD:des1wCyWMPaHeV6aC8L+mw5CKJwVv
Malware Config
Signatures
Files
-
c26bdf25e24bfc1a825c83b4524dcae9ab59529180d99096c371412297bb0b1d.exe windows x86
1920e823c0179a9230bef40012643dc5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
LocalAlloc
LCMapStringW
HeapCreate
FormatMessageW
GetConsoleMode
GetFileType
CreateThread
LoadResource
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapAlloc
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
SetHandleCount
WriteFile
RtlUnwind
HeapFree
VirtualFree
GetCurrentThread
GetLastError
SetLastError
DeleteCriticalSection
GetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
GetStringTypeA
ExitProcess
GetVersion
GetModuleHandleA
GetCurrentProcessId
TlsGetValue
SizeofResource
SetUnhandledExceptionFilter
GetFileSize
FlushFileBuffers
GetTickCount
SetEndOfFile
GetCommandLineW
lstrlenW
GetSystemTimeAsFileTime
CreateEventA
lstrlenA
CreateFileW
GetFileAttributesW
GetCurrentProcess
HeapSize
CreateEventW
TlsFree
GlobalAlloc
GetProcessHeap
SetErrorMode
HeapDestroy
LoadLibraryW
TlsAlloc
LoadLibraryExW
GetStringTypeW
SetEvent
TlsSetValue
HeapReAlloc
FindFirstFileW
GetSystemInfo
GetFileAttributesA
GetACP
GetCPInfo
RegisterWaitForSingleObject
GlobalFree
FreeEnvironmentStringsW
SetStdHandle
GetCurrentThreadId
GetOEMCP
GetCommandLineA
Sleep
InitializeCriticalSection
VirtualAlloc
ole32
GetRunningObjectTable
CoLockObjectExternal
CoUninitialize
CoRevokeClassObject
RegisterDragDrop
CoDisconnectObject
RevokeDragDrop
ReleaseStgMedium
CLSIDFromProgID
CoInitialize
StringFromCLSID
CoQueryProxyBlanket
CoFreeUnusedLibraries
CLSIDFromString
CoRegisterMessageFilter
CreateBindCtx
StgCreateDocfileOnILockBytes
CoCreateGuid
CoInitializeSecurity
CoTaskMemFree
CreateILockBytesOnHGlobal
CoCreateInstance
CoTaskMemAlloc
CreateStreamOnHGlobal
CoGetClassObject
OleRun
OleInitialize
OleIsRunning
OleRegGetUserType
OleUninitialize
OleFlushClipboard
advapi32
OpenProcessToken
RegQueryInfoKeyW
EqualSid
RegQueryValueExW
RegQueryValueExA
RevertToSelf
InitializeSecurityDescriptor
RegCreateKeyExA
CryptReleaseContext
RegDeleteValueW
AdjustTokenPrivileges
AddAccessAllowedAceEx
GetLengthSid
CryptCreateHash
CryptGenRandom
RegDeleteKeyW
OpenServiceW
AllocateAndInitializeSid
RegDeleteKeyA
CryptHashData
DeregisterEventSource
CryptAcquireContextA
RegEnumKeyExW
RegCloseKey
OpenThreadToken
LookupPrivilegeValueA
GetTokenInformation
RegCreateKeyExW
RegSetValueExA
CryptAcquireContextW
RegEnumValueW
RegSetValueExW
RegEnumValueA
RegEnumKeyExA
AddAccessAllowedAce
SetSecurityDescriptorDacl
RegDeleteValueA
QueryServiceStatus
CloseServiceHandle
InitializeAcl
FreeSid
RegOpenKeyExA
CryptDestroyHash
RegOpenKeyExW
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ