Static task
static1
Behavioral task
behavioral1
Sample
d26b4dcf49e43220d225f3f899619dca028108949e0b987b7dcd321f83378537.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d26b4dcf49e43220d225f3f899619dca028108949e0b987b7dcd321f83378537.exe
Resource
win10v2004-20220812-en
General
-
Target
d26b4dcf49e43220d225f3f899619dca028108949e0b987b7dcd321f83378537
-
Size
154KB
-
MD5
52c5a1830e939a157b0d9cb84a9ebdbc
-
SHA1
b8abca5de3470193c796baf16f72c4d10a0830d7
-
SHA256
d26b4dcf49e43220d225f3f899619dca028108949e0b987b7dcd321f83378537
-
SHA512
9dd7529dfbc5d0bf86b9fa49e6cf4571a73f60f051287199891a794c13c2baab82a0174748f3a516054972261018922cd625b38c3b7f73fc3fc5ce8512d971a5
-
SSDEEP
3072:GDuc1c7ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfrl/:CsNkVsuaRaU6mHGl/
Malware Config
Signatures
Files
-
d26b4dcf49e43220d225f3f899619dca028108949e0b987b7dcd321f83378537.exe windows x86
4f3253d89c52698bfd4842d733fdc827
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
CreateFileA
CloseHandle
WriteFile
GetSystemDirectoryA
GetFileTime
SetFileTime
GetWindowsDirectoryA
lstrcatA
FreeLibrary
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alloy32 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alloy32 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE