Static task
static1
Behavioral task
behavioral1
Sample
b4f26a76d9bd3dfb89b57b6bc114792c6d7aa296b7b7e76ca61ae701bccd0192.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4f26a76d9bd3dfb89b57b6bc114792c6d7aa296b7b7e76ca61ae701bccd0192.exe
Resource
win10v2004-20220901-en
General
-
Target
b4f26a76d9bd3dfb89b57b6bc114792c6d7aa296b7b7e76ca61ae701bccd0192
-
Size
208KB
-
MD5
92093e5de57492c0926da8fd7f5ad16c
-
SHA1
c8623accb96b8d7d3c5f14d7c805c46d1006e771
-
SHA256
b4f26a76d9bd3dfb89b57b6bc114792c6d7aa296b7b7e76ca61ae701bccd0192
-
SHA512
bbcf971e24a4159b58540f4946b388d44732f74be63da5feea58528e9ca32c076fb42aee15de7c78d61bf4bc040659dede7872b8ae9daa5ec4ecd145d660f056
-
SSDEEP
3072:GS9YnDmBRjIZ6G5nq53g0neZ5qjpjmFB4P+wPHH0dU+KrVvwpQIWk3Qdb:GSCmP9sqg0eWjpjmFB2nPhrVSQZIQdb
Malware Config
Signatures
Files
-
b4f26a76d9bd3dfb89b57b6bc114792c6d7aa296b7b7e76ca61ae701bccd0192.exe windows x86
8cf3d4afdb6bdc00ce2721b8aa498510
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetProcessHeap
lstrcmpA
SystemTimeToFileTime
GetLocaleInfoW
GetSystemDefaultLCID
CreateFileA
SetLastError
GetEnvironmentStringsW
WideCharToMultiByte
QueryPerformanceCounter
lstrcpyA
CloseHandle
LoadResource
GetLocalTime
GetVolumeInformationA
GetTickCount
GetCurrentProcess
MultiByteToWideChar
FreeResource
GetOEMCP
LockResource
GetCurrentProcessId
QueryDosDeviceA
GetProcessId
lstrlenA
HeapAlloc
DeviceIoControl
HeapFree
LoadLibraryW
FindResourceA
advapi32
RegOpenKeyW
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegQueryValueExW
quartz
AMGetErrorTextA
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DBToAmpFactor
AMGetErrorTextW
DllUnregisterServer
AmpFactorToDB
user32
wsprintfA
CharNextA
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ