Static task
static1
Behavioral task
behavioral1
Sample
926bb0ec742f228a3f8533c67ae8c0ed5f93bd1c891c9ddc03e8cc84fb7ad07f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
926bb0ec742f228a3f8533c67ae8c0ed5f93bd1c891c9ddc03e8cc84fb7ad07f.exe
Resource
win10v2004-20220901-en
General
-
Target
926bb0ec742f228a3f8533c67ae8c0ed5f93bd1c891c9ddc03e8cc84fb7ad07f
-
Size
206KB
-
MD5
7c1a3b278ef47d7bdef79631985f1e50
-
SHA1
1c78671490b6ece0beedf0dc86991d493fa2674b
-
SHA256
926bb0ec742f228a3f8533c67ae8c0ed5f93bd1c891c9ddc03e8cc84fb7ad07f
-
SHA512
6b9c7a559cd30f11a63527974250f10d2c4a62dc96844cbca1dd4298f0eff160392a11a61fe582984654580780df7e01402656581ab68d90af335f139b777613
-
SSDEEP
3072:j8x4SYq62Y/g3p3NWq7Z70xeQkm7qL7HfpAprApaC/H+dbBxrCebJWAO1yzHBvvY:jbRgZ9WQmsrm5AEG+eebEWhvvY
Malware Config
Signatures
Files
-
926bb0ec742f228a3f8533c67ae8c0ed5f93bd1c891c9ddc03e8cc84fb7ad07f.exe windows x86
e15eae193f6423016c542127bed9c7f0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SystemTimeToFileTime
CreateFileA
WideCharToMultiByte
GetSystemDefaultLCID
MultiByteToWideChar
HeapFree
SetUnhandledExceptionFilter
GetLocaleInfoW
SetLastError
CloseHandle
GetEnvironmentStringsW
lstrlenA
FindResourceA
GetLocalTime
QueryPerformanceCounter
GetProcessHeap
lstrcpyA
lstrcmpA
GetVolumeInformationA
GetSystemTimeAsFileTime
FreeResource
GetOEMCP
LoadLibraryW
GetUserDefaultLCID
LockResource
LoadResource
QueryDosDeviceA
HeapAlloc
GetTickCount
GetCurrentProcess
GetCurrentProcessId
DeviceIoControl
advapi32
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyW
RegCloseKey
quartz
DllRegisterServer
DllUnregisterServer
DBToAmpFactor
AMGetErrorTextW
DllCanUnloadNow
DllGetClassObject
AMGetErrorTextA
AmpFactorToDB
user32
CharNextA
wsprintfA
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ