Static task
static1
Behavioral task
behavioral1
Sample
26b3e50e28cbf599db868ad31db505df154385ab8ea4f3c9d33138411bae7a92.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
26b3e50e28cbf599db868ad31db505df154385ab8ea4f3c9d33138411bae7a92.exe
Resource
win10v2004-20220901-en
General
-
Target
26b3e50e28cbf599db868ad31db505df154385ab8ea4f3c9d33138411bae7a92
-
Size
777KB
-
MD5
6b7d94f237cc074b9433c43938656f00
-
SHA1
1c8bd8dc74b5d797c16f5318ec9030f28c773f48
-
SHA256
26b3e50e28cbf599db868ad31db505df154385ab8ea4f3c9d33138411bae7a92
-
SHA512
9c77291cae5e019eba021fdef1d6403efc5b8f9d9501f71d791f22d851939cbd89a0552be8fa7dde94d88c960fbc4964b36e447e3cfbf4005b486bc8f88607bd
-
SSDEEP
12288:uGIuPOagnvdFnsMa4/I54lHzpB6SCy0saT8w/Z9gU7bHdA1oAgnn4z:uGgagvrsMa4ASTpBDd0saPh61fgnY
Malware Config
Signatures
Files
-
26b3e50e28cbf599db868ad31db505df154385ab8ea4f3c9d33138411bae7a92.exe windows x86
af58cd87c7b4e77402135c318556cef5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadCodePtr
IsValidLocale
FindResourceA
WriteConsoleW
lstrcpyW
WriteConsoleW
WriteConsoleW
SetPriorityClass
lstrlenW
ReleaseMutex
IsBadStringPtrA
GetCurrentDirectoryA
GetLastError
GetFileSize
GetModuleHandleA
GetFileAttributesA
ReadFile
CloseHandle
HeapCreate
GetFileTime
GetStartupInfoA
msftedit
RichComboBoxWndProc
RichEditWndProc
SetCustomTextOutHandlerEx
RichListBoxWndProc
shell32
DragAcceptFiles
ShellMessageBoxW
StrChrA
ShellMessageBoxW
ExtractIconW
DuplicateIcon
FreeIconList
SHGetMalloc
ShellAboutA
SHGetFileInfoA
DragQueryFileA
ShellAboutA
SHGetFolderPathA
msasn1
ASN1BERDecEoid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 766KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE