Static task
static1
Behavioral task
behavioral1
Sample
26d47f1a4bdd59b4c897ea19f8cf729a407939addfd2515d5e6610c445372d32.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
26d47f1a4bdd59b4c897ea19f8cf729a407939addfd2515d5e6610c445372d32.exe
Resource
win10v2004-20220901-en
General
-
Target
26d47f1a4bdd59b4c897ea19f8cf729a407939addfd2515d5e6610c445372d32
-
Size
394KB
-
MD5
4ac7c2f7b0c48b8905e5a98a823e0c00
-
SHA1
7387673710c8197d8dafecf96ee2a0e259702aa8
-
SHA256
26d47f1a4bdd59b4c897ea19f8cf729a407939addfd2515d5e6610c445372d32
-
SHA512
e38d192be641a530c062d7a99722de67c45b1c11c753a6a7361edfe291e4af844e5f272f7aa15a7843cf910d21395eb7542dea0fb243f4f8f0ae65e42d61006a
-
SSDEEP
12288:CaPeGxhD5NOZ2i269yeJ6CCDFDT7YwmD5geV:3mKlgZ2Nm6CYf7YwmD5g
Malware Config
Signatures
Files
-
26d47f1a4bdd59b4c897ea19f8cf729a407939addfd2515d5e6610c445372d32.exe windows x86
7ddc57ced555bd1968183b6e1c56a64a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyA
GetLastError
GetFileSize
CreateMutexA
WriteConsoleW
GetCurrentDirectoryW
ReadFile
WriteConsoleW
FindResourceA
ReleaseMutex
WriteConsoleW
GetModuleHandleA
IsBadStringPtrW
CloseHandle
IsValidLocale
SetFileAttributesA
HeapCreate
GetStartupInfoA
lstrcpyW
GetFileTime
FormatMessageA
msi
MsiAdvertiseProductA
MsiCloseHandle
MsiCloseAllHandles
MsiCreateRecord
user32
IsCharLowerA
SetCursorPos
PeekMessageW
DispatchMessageA
IsZoomed
wsprintfW
GetWindowTextA
GetWindowLongW
IsWindow
SetFocus
PostMessageW
LoadCursorW
IsDialogMessageA
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 383KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qedit Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE