Static task
static1
Behavioral task
behavioral1
Sample
726d7023203bb867bbf0914cae056eff74e2f9e9b8f88b6252a9109425f69dc5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
726d7023203bb867bbf0914cae056eff74e2f9e9b8f88b6252a9109425f69dc5.exe
Resource
win10v2004-20220812-en
General
-
Target
726d7023203bb867bbf0914cae056eff74e2f9e9b8f88b6252a9109425f69dc5
-
Size
297KB
-
MD5
bc1327dd69cba3fbca0925eb7f682ceb
-
SHA1
26fc632dee026c40d9a8341c077b914b3422a186
-
SHA256
726d7023203bb867bbf0914cae056eff74e2f9e9b8f88b6252a9109425f69dc5
-
SHA512
68c01ece72cc92b0ad132ae16af4c773af8c9f26034bedb5bb4c3a82a932f4fa94636c7f56db86ea7f3a4dc38c191b2c91196c6ff177820da06161b0e478a78c
-
SSDEEP
6144:nMy5hoTOpIOF0tyWWkhFV874d7Kn5blCQcV5Eueou4K:MaoTO09Wn7476blCQ05vdu
Malware Config
Signatures
Files
-
726d7023203bb867bbf0914cae056eff74e2f9e9b8f88b6252a9109425f69dc5.exe windows x86
85e33769822996df4700f5a458e060d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
GetDiskFreeSpaceW
CreateFileA
GetCommandLineW
HeapCreate
LocalFree
GetTickCount
GetExitCodeProcess
SuspendThread
GetModuleHandleA
GetSystemTime
SetEvent
LoadLibraryW
CreateThread
TlsGetValue
FindAtomA
CloseHandle
GetComputerNameA
SetLastError
ResetEvent
advapi32
RegQueryValueA
RegEnumValueA
IsTokenRestricted
CloseEventLog
CredFree
GetFileSecurityA
GetUserNameW
CreateServiceW
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
GetLengthSid
cryptui
WizardFree
CryptUIDlgSelectCA
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
LocalEnroll
powercfg.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ