Static task
static1
Behavioral task
behavioral1
Sample
de826a3eca8d489f67e61782b7c38b0a09f56323c14b046c515ff805452bcbff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de826a3eca8d489f67e61782b7c38b0a09f56323c14b046c515ff805452bcbff.exe
Resource
win10v2004-20220812-en
General
-
Target
de826a3eca8d489f67e61782b7c38b0a09f56323c14b046c515ff805452bcbff
-
Size
591KB
-
MD5
630ccf17940acc150c78be6aeee663b0
-
SHA1
07752920dbc0e201f7d4152726929de12feb7c96
-
SHA256
de826a3eca8d489f67e61782b7c38b0a09f56323c14b046c515ff805452bcbff
-
SHA512
5c0a0d313ec78b34d8f9ea0aa00f851cb48f6db5b122038daccef7a4177c276979924571a7e82acbc6bc6f8913cddaafce844665821efc7aa58861670de671e1
-
SSDEEP
6144:AecQotHRz7gQXob/IcFAf9SCJXBLcMJWzg3rvZSs6HxS8ex93xR:AeGhnXAr0pRLcn2wxdAzR
Malware Config
Signatures
Files
-
de826a3eca8d489f67e61782b7c38b0a09f56323c14b046c515ff805452bcbff.exe windows x86
ff2cc1fd1df01ba4852a89d1f8776491
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
CreateMutexA
GetBinaryTypeW
InterlockedDecrement
GetLocaleInfoA
GetShortPathNameA
GetTickCount
GetAtomNameA
lstrcmpA
CompareStringA
ResetEvent
GetDiskFreeSpaceA
GetModuleHandleA
FormatMessageA
SetStdHandle
GetLastError
VirtualQuery
GetProcAddress
lstrcpynA
CreateNamedPipeW
GetProcessHeap
InterlockedExchange
HeapValidate
FileTimeToLocalFileTime
GetSystemInfo
GetCurrentDirectoryW
GetLogicalDrives
GetFileType
lstrcmpiA
user32
GetCaretPos
GetMessageA
LoadImageA
SetFocus
IsZoomed
DispatchMessageA
CharToOemA
DialogBoxParamA
IsDialogMessageA
GetWindowLongA
CreateWindowExA
PeekMessageA
SetCursorPos
IsWindow
IsCharLowerW
DrawIcon
wsprintfA
authz
AuthzFreeResourceManager
AuthzFreeAuditEvent
AuthzFreeContext
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 552KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ