Static task
static1
Behavioral task
behavioral1
Sample
426a828f3451669dd2fad104860fb1c1c98fb392afa44cf64a9b4d106e51963e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
426a828f3451669dd2fad104860fb1c1c98fb392afa44cf64a9b4d106e51963e.exe
Resource
win10v2004-20220901-en
General
-
Target
426a828f3451669dd2fad104860fb1c1c98fb392afa44cf64a9b4d106e51963e
-
Size
169KB
-
MD5
91e3930630150d756c47ded838811940
-
SHA1
82ea6a8b567031eae34dfd37c5e5b003f5396829
-
SHA256
426a828f3451669dd2fad104860fb1c1c98fb392afa44cf64a9b4d106e51963e
-
SHA512
7ed7d8d466682ed64325feab6d17e06adce5cf9675bf3a4a4f917aa5606e2f2b1489fd524e477b40a4f2f7bdbfeb87d6aa7f91cb80757b7f96165cd4454dc8fe
-
SSDEEP
3072:+W/iD3zdj3IwcSIN0IfyoJVSG9M0YFJqnu/PcC1RGM/MXnxxDJCQm:x/iD3zJ3IvSINDa+79M04J7PJRNU3x5m
Malware Config
Signatures
Files
-
426a828f3451669dd2fad104860fb1c1c98fb392afa44cf64a9b4d106e51963e.exe windows x86
aa856ce06f2a6f232c7c2fce757f253b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
advapi32
RegQueryValueExA
RegEnumKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegCloseKey
lz32
LZClose
LZCopy
LZOpenFileA
kernel32
CreateMutexA
CreateFileW
AddAtomW
GetTickCount
GlobalLock
GetTempFileNameA
QueryPerformanceCounter
InitializeCriticalSection
lstrlenA
WideCharToMultiByte
GetVolumeInformationA
GlobalFree
InterlockedDecrement
DeleteFileA
GlobalUnlock
CreateDirectoryA
CopyFileA
GetFileSize
ReleaseMutex
LocalFree
GetSystemTimeAsFileTime
ReadFile
GetVersionExA
InterlockedIncrement
GetCurrentThreadId
GetModuleFileNameA
EnumResourceNamesA
GetCurrentProcessId
SetFilePointer
LocalAlloc
CreateHardLinkW
DisableThreadLibraryCalls
GetModuleFileNameW
DeviceIoControl
CreateFileA
VirtualAlloc
SetFileAttributesA
GetFileAttributesA
GetTempPathA
VirtualFree
WaitForSingleObject
GetLastError
CloseHandle
MultiByteToWideChar
GetSystemTime
DeleteCriticalSection
Sleep
FreeLibrary
Sections
.text Size: 91KB - Virtual size: 486KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ