Static task
static1
Behavioral task
behavioral1
Sample
26c18573799f9a4a61d5b43e6c14934663f293c3391e97bacdaaddb20e2fe64e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
26c18573799f9a4a61d5b43e6c14934663f293c3391e97bacdaaddb20e2fe64e.exe
Resource
win10v2004-20220812-en
General
-
Target
26c18573799f9a4a61d5b43e6c14934663f293c3391e97bacdaaddb20e2fe64e
-
Size
73KB
-
MD5
65e74f02cc34aa444d3ca77bb1787e38
-
SHA1
5029b67f531379deddf242ac13aaec6439b23e5b
-
SHA256
26c18573799f9a4a61d5b43e6c14934663f293c3391e97bacdaaddb20e2fe64e
-
SHA512
c421315da5d9bcfef47fdac05ab427fc3e027851e33c93e880d36b81262594e2d358dc0e252a89ccb6112dd4c4ef151bf2190fca1585694e5497819f058a61ed
-
SSDEEP
1536:NYHQGu+40zddpSrPiNBug0BPAjgSaYwbQGtc6HZZw9lX3N3wT66vlmdW2H:NYwGu+40zdHeiNIg06jgRc6HPORN3wT0
Malware Config
Signatures
Files
-
26c18573799f9a4a61d5b43e6c14934663f293c3391e97bacdaaddb20e2fe64e.exe windows x86
fef3b9e613e574f4be017947dce80d67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateMutexA
ExitProcess
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleScreenBufferInfo
GetLastError
GetStdHandle
InterlockedIncrement
ReadConsoleOutputA
ReleaseMutex
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleTextAttribute
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
WriteConsoleOutputA
lstrcpyA
msvcrt
_close
_fileno
_fstat
_getch
_isatty
_lseek
_open
_read
_write
_HUGE
__getmainargs
__mb_cur_max
__p__environ
__set_app_type
_assert
_cexit
_errno
_fileno
_fmode
_fpreset
_iob
_isctype
_pctype
_setmode
abort
atexit
fclose
fflush
fread
free
fseek
fwrite
getc
malloc
memchr
memcpy
memmove
memset
signal
strcmp
strtol
strtoul
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1008B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE