Static task
static1
Behavioral task
behavioral1
Sample
f26b421dc51c4e36810163ea1d8e91c2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f26b421dc51c4e36810163ea1d8e91c2.exe
Resource
win10v2004-20220812-en
General
-
Target
f26b421dc51c4e36810163ea1d8e91c2
-
Size
27KB
-
MD5
f26b421dc51c4e36810163ea1d8e91c2
-
SHA1
7f0dd9a7776677fe15a299e654f104cac138a0ab
-
SHA256
34b4a192def5e2b4c189717d6bc892028167472a5363db1cc1d63ccbeb6755fd
-
SHA512
0e20c381c811d4744bb21cbd359344a560e77a9dc04e978cf321f0524a9319ed3290e12537857168d3c39df5c08770b1c4f7054bd77bf9a20c4fb94347ddc292
-
SSDEEP
384:BGkj2hrdl9pRtn6koKs1bz905rAuHLBUr/BwWVR0J7aKCtMZmb5y:BGZlmBwrAcUrZwWrm7nCtMZ/
Malware Config
Signatures
Files
-
f26b421dc51c4e36810163ea1d8e91c2.exe windows x86
9cb9594db9397a9fe1ed875f18aed563
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
CreateEventW
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary
GetTickCount
GetTempPathW
FlushFileBuffers
CreateFileW
IsBadReadPtr
CreateDirectoryW
CreateThread
GetCurrentProcessId
GlobalUnlock
GlobalLock
GetModuleHandleW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
LoadLibraryW
SetStdHandle
WriteConsoleW
DeleteCriticalSection
WaitForMultipleObjects
SetEvent
TryEnterCriticalSection
GetPrivateProfileIntW
GetPrivateProfileStringW
GetVolumeInformationW
lstrcpyW
user32
GetMessageA
DefWindowProcA
PostQuitMessage
InvalidateRect
SetWindowPos
EndPaint
GetWindowTextA
GetWindowTextLengthA
GetClientRect
BeginPaint
SetWindowTextA
MsgWaitForMultipleObjects
IsWindow
CreateCaret
ShowCaret
HideCaret
DestroyCaret
GetKeyboardState
LoadIconA
RegisterClassA
msacm32
acmStreamOpen
gdi32
GetDeviceCaps
winmm
waveOutClose
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ