Static task
static1
Behavioral task
behavioral1
Sample
26385c7682123445d3637212f7a8949cd441885f20af82c64b71f60bfb78c71c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
26385c7682123445d3637212f7a8949cd441885f20af82c64b71f60bfb78c71c.exe
Resource
win10v2004-20220901-en
General
-
Target
26385c7682123445d3637212f7a8949cd441885f20af82c64b71f60bfb78c71c
-
Size
157KB
-
MD5
63ca34a2b2fbeb8bc040f3f423e21607
-
SHA1
49d6efd6d5696e2ddb383a785e7b44b14fcb4e36
-
SHA256
26385c7682123445d3637212f7a8949cd441885f20af82c64b71f60bfb78c71c
-
SHA512
751e22f9bd7da7da4e62dcbd6eb1abe530a9918fe91b207896cb7689c23a186432e939ecd600dc8b7fc4aeef0c72a247fce1cba1b000a5c888d3092f6dd34368
-
SSDEEP
3072:ywndi/4BhGwAt9vYeaU1z6bZKEHB+QohU+pScBxU31Gvjp5YLKMKzF8haf:Bi/4hGwMueaQ+5h+rTpSjFqsg
Malware Config
Signatures
Files
-
26385c7682123445d3637212f7a8949cd441885f20af82c64b71f60bfb78c71c.exe windows x86
38bd161a9ca15058a83f271098b421c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
SetEvent
ResetEvent
WriteConsoleA
FindResourceA
FindResourceW
LoadResource
SizeofResource
LockResource
FreeResource
CreateFileA
ReadFile
WriteFile
GetFileSize
SetEndOfFile
CloseHandle
GetStartupInfoA
lstrcatA
GetCPInfo
CreateThread
GetCurrentThreadId
GetCurrentThread
ResumeThread
ExitThread
TerminateThread
HeapAlloc
HeapCreate
HeapDestroy
GetProcessHeap
HeapReAlloc
HeapSize
HeapFree
CreateFileW
GetWindowsDirectoryA
SetThreadPriority
GetExitCodeThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LoadLibraryA
GetProcAddress
UnmapViewOfFile
MapViewOfFile
FindFirstFileA
FindNextFileA
FindClose
IsValidCodePage
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
LocalFileTimeToFileTime
GetFullPathNameA
IsBadWritePtr
GetVersionExW
GlobalHandle
LoadLibraryW
LoadLibraryExA
SetCurrentDirectoryA
GetSystemDefaultLCID
SetLastError
WritePrivateProfileStringA
LoadLibraryExW
CreateEventW
GetStringTypeA
lstrcmpA
GetSystemTimeAsFileTime
WideCharToMultiByte
GetExitCodeProcess
GetLocaleInfoW
CreateMutexA
ReleaseMutex
CompareStringW
IsDBCSLeadByte
GetPrivateProfileStringA
GetFileAttributesA
TerminateProcess
lstrcpynA
GetShortPathNameA
OpenProcess
Sleep
lstrcmpiA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RaiseException
OpenMutexA
DeviceIoControl
SetFileAttributesW
FindFirstFileW
FindNextFileW
RtlUnwind
FreeEnvironmentStringsA
SetHandleCount
GetEnvironmentVariableA
GetTickCount
GetLocalTime
MulDiv
VirtualQuery
FormatMessageA
WaitForSingleObject
SetEnvironmentVariableA
SetFilePointer
IsBadCodePtr
GetStringTypeExA
GetStdHandle
GetFileAttributesW
GetModuleFileNameA
InterlockedExchange
ExitProcess
CopyFileA
FileTimeToDosDateTime
GetCurrentDirectoryA
ExpandEnvironmentStringsA
VirtualAlloc
msvcrt
wcschr
strpbrk
_pctype
signal
_get_osfhandle
__getmainargs
__pioinfo
_getcwd
ctime
fputc
rewind
_iob
_fileno
isspace
swprintf
fclose
__lc_codepage
memmove
_initterm
localeconv
towupper
ungetc
rand
printf
_purecall
iswspace
_ftol
strncat
strerror
wcscspn
_onexit
strcspn
_XcptFilter
iswdigit
_acmdln
__set_app_type
sin
remove
_lseeki64
_itoa
__dllonexit
sqrt
wcstol
fwrite
_mkdir
isleadbyte
__p___initenv
isdigit
_stat
_wtoi
_snwprintf
_lock
_getpid
_setmode
gmtime
localtime
fread
vsprintf
clearerr
_except_handler3
atexit
_CIsqrt
cos
_flsbuf
bsearch
memcmp
wcsncmp
strcmp
wcsstr
_adjust_fdiv
sprintf
_open_osfhandle
_filelengthi64
_c_exit
_wtol
_fullpath
__initenv
rename
_fdopen
swscanf
__setusermatherr
sscanf
srand
_strdup
strncmp
_close
strrchr
time
atoi
strstr
_lseek
strchr
__CxxFrameHandler
__badioinfo
_CIpow
iswctype
wcsrchr
_controlfp
__p__commode
_dup
_pipe
_unlink
_getch
wctomb
clock
memset
fgets
qsort
strtol
_amsg_exit
atol
_exit
memcpy
malloc
__mb_cur_max
_chmod
_itow
log
towlower
floor
wcstombs
_ultoa
_errno
_wcsnicmp
fputs
ftell
_strlwr
strtoul
_vsnprintf
putchar
_wcslwr
_fstat
_mbscmp
_umask
longjmp
_vsnwprintf
wcsncpy
_read
_unlock
calloc
perror
puts
_beginthreadex
_utime
_ismbblead
strncpy
__p__environ
fflush
_filbuf
memchr
_dup2
_mbsicmp
strspn
toupper
strcat
fprintf
fseek
abort
wcscat
fsetpos
_wcsupr
_setjmp
fgetpos
__p__fmode
setlocale
_kbhit
_stricmp
free
_isctype
wcstoul
_putenv
exit
getenv
_snprintf
_strcmpi
_assert
_strnicmp
strcpy
_write
_wcsicmp
_isatty
tolower
ceil
fopen
_mktemp
realloc
isxdigit
_wfopen
strtok
wcslen
_osver
fgetc
_cexit
user32
ScreenToClient
GetDC
GetScrollRange
DrawIcon
DrawEdge
SetPropA
SystemParametersInfoA
GetMenuItemID
GetDesktopWindow
WaitMessage
DispatchMessageA
SetScrollRange
GetMenuItemCount
FrameRect
FindWindowA
OemToCharA
GetWindowPlacement
GetSystemMenu
GetSystemMetrics
ReleaseDC
SetFocus
SetTimer
GetDCEx
DrawMenuBar
EnableWindow
IsDialogMessageA
GetWindowTextA
InsertMenuItemA
GetWindowDC
IsWindow
GetMenu
RegisterClassA
ReleaseCapture
AdjustWindowRectEx
MapWindowPoints
SetWindowPos
LoadStringA
SetMenu
GetSysColorBrush
wsprintfA
CharNextA
IsWindowVisible
GetCursorPos
InvalidateRect
DrawIconEx
EnumThreadWindows
ScrollWindow
GetMessageA
SetScrollInfo
SetWindowTextA
SetCapture
DestroyIcon
ShowOwnedPopups
SetClassLongA
TranslateMessage
SetWindowLongA
DeleteMenu
IsZoomed
GetLastActivePopup
SetWindowPlacement
IsWindowEnabled
GetWindowLongA
RemoveMenu
SetWindowsHookExA
GetPropA
PostQuitMessage
LoadIconA
GetActiveWindow
GetClientRect
InsertMenuA
GetClassNameA
CallWindowProcA
SetCursor
GetIconInfo
EmptyClipboard
PeekMessageA
WindowFromPoint
GetTopWindow
ClientToScreen
GetWindowThreadProcessId
PostMessageA
MessageBeep
LoadCursorA
CreateWindowExA
IntersectRect
MessageBoxA
CreateMenu
CreatePopupMenu
GetScrollInfo
UnhookWindowsHookEx
EndPaint
CheckMenuItem
SetRect
GetWindowRect
IsChild
GetParent
FillRect
CharLowerA
IsIconic
GetScrollPos
GetForegroundWindow
GetCapture
GetMenuState
DestroyMenu
RegisterClipboardFormatA
EnumWindows
GetMenuStringA
DestroyCursor
DrawTextA
ShowWindow
DialogBoxParamA
CallNextHookEx
GetDlgItem
CloseClipboard
SendDlgItemMessageA
GetKeyboardType
RemovePropA
LoadBitmapA
OpenClipboard
OffsetRect
DestroyWindow
GetFocus
EnableMenuItem
DrawFrameControl
ShowCursor
SetClipboardData
SetForegroundWindow
BeginPaint
WinHelpA
InflateRect
GetKeyState
SetActiveWindow
UpdateWindow
RegisterWindowMessageA
GetSysColor
IsRectEmpty
KillTimer
SendMessageA
RedrawWindow
GetWindow
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE