Static task
static1
Behavioral task
behavioral1
Sample
26c02d54eda20c7b1f6d7fc6c64fbf3b3e8b90cf7069918d862066b9a4882113.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
26c02d54eda20c7b1f6d7fc6c64fbf3b3e8b90cf7069918d862066b9a4882113.exe
Resource
win10v2004-20220812-en
General
-
Target
26c02d54eda20c7b1f6d7fc6c64fbf3b3e8b90cf7069918d862066b9a4882113
-
Size
330KB
-
MD5
7d15082cb8f91513c35ecf11ff2d1670
-
SHA1
6d61e7fd8c0b45db3337e82efb1f9fbbde815a6e
-
SHA256
26c02d54eda20c7b1f6d7fc6c64fbf3b3e8b90cf7069918d862066b9a4882113
-
SHA512
40159687ddf436f6f1f0c1dfa6c4e9216ab1cc587fa4c8b3e08953771170c163c3093c5830e93ca27061b3ac85c00fbd1ab38c37b2ae23ac9454a3c8c05faeee
-
SSDEEP
6144:8Q1OOOlTXpAyoqsZJQBLXFgZQFJo0HBIN3ufVwqsYuMbDaAwfwtT:IFX0qEylmQ/BceluMSp
Malware Config
Signatures
Files
-
26c02d54eda20c7b1f6d7fc6c64fbf3b3e8b90cf7069918d862066b9a4882113.exe windows x86
f7f1e32c03386b1574bb62507817cf02
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetStartupInfoA
HeapFree
LocalReAlloc
MultiByteToWideChar
SetCurrentDirectoryA
GetModuleHandleA
lstrcatA
lstrcpyA
lstrcpynA
VirtualAlloc
LoadLibraryA
GetCommandLineA
FreeLibrary
SetErrorMode
ExitProcess
user32
LoadIconW
LoadCursorW
gdi32
GetStockObject
advapi32
RegQueryValueExW
Sections
.text Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ