Static task
static1
Behavioral task
behavioral1
Sample
b26f1bd40d9b36bb219bdd5ad990c6bdad1158a9d76176e030c28703cccb1871.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b26f1bd40d9b36bb219bdd5ad990c6bdad1158a9d76176e030c28703cccb1871.exe
Resource
win10v2004-20220812-en
General
-
Target
b26f1bd40d9b36bb219bdd5ad990c6bdad1158a9d76176e030c28703cccb1871
-
Size
383KB
-
MD5
91453250aac00a1f14b5217aa8647070
-
SHA1
b10b98c9ca602aac16b1c7859a306fe721f0de63
-
SHA256
b26f1bd40d9b36bb219bdd5ad990c6bdad1158a9d76176e030c28703cccb1871
-
SHA512
9e3a59443651ec8e90b5c878fa4c686369921bd7c7ff896d36ac70196d3c25a4da2e2605e0c68c44d3eb1a97f5aaffd58478288233532eac1706f8b357db5a6a
-
SSDEEP
6144:HXfh31OHAJmXfTt0UzTE3JJLVHyRUd8aMUaHRn1fTCib:R1HmX7t0yWD5MY8BUavT
Malware Config
Signatures
Files
-
b26f1bd40d9b36bb219bdd5ad990c6bdad1158a9d76176e030c28703cccb1871.exe windows x86
85898c9d9d7276a907c1b9ef6d5e428b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadStringA
SetRect
SendMessageA
OemToCharA
ReleaseDC
GetDC
EndPaint
BeginPaint
EndDialog
LoadBitmapA
GetSystemMetrics
SetWindowPos
UpdateWindow
ShowWindow
DestroyWindow
wsprintfA
GetSysColor
MessageBeep
MessageBoxA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
SetTimer
PeekMessageA
IsWindow
IsDialogMessageA
TranslateMessage
DispatchMessageA
KillTimer
SetWindowTextA
SetDlgItemTextA
DialogBoxParamA
CharLowerA
GetClientRect
CreateDialogParamA
CharUpperA
CharToOemA
CharPrevA
PostQuitMessage
DefWindowProcA
GetDlgItem
GetWindowTextA
InvalidateRect
IsWindowVisible
SetFocus
EnableWindow
PostMessageA
CharNextA
InflateRect
ScreenToClient
GetWindowRect
SetRectEmpty
ExitWindowsEx
FindWindowA
RegisterWindowMessageA
DdeGetData
DdeFreeDataHandle
DdeConnect
DdeClientTransaction
DdeGetLastError
DdeDisconnect
DdeFreeStringHandle
DdeUninitialize
DdeInitializeA
DdeCreateStringHandleA
GetClassInfoA
GetWindowLongA
GetWindow
GetClassNameA
FillRect
gdi32
SetPixel
DeleteObject
GetTextExtentPointA
GetSystemPaletteEntries
CreatePalette
CreateDIBitmap
CreateBitmap
SetBkColor
CreatePen
MoveToEx
LineTo
CreateCompatibleBitmap
SaveDC
CreateSolidBrush
GetStockObject
Rectangle
RestoreDC
GetDeviceCaps
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
SelectPalette
RealizePalette
GetObjectA
kernel32
SetErrorMode
CloseHandle
GetFileSize
SetFileTime
LocalFileTimeToFileTime
GetFileType
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
TerminateProcess
ExitProcess
HeapCreate
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
GlobalHandle
GlobalCompact
GlobalReAlloc
GetCurrentDirectoryA
_llseek
_lwrite
FileTimeToLocalFileTime
GetFileTime
Sleep
GetStdHandle
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
GetTickCount
GetModuleFileNameA
lstrcpyA
IsDBCSLeadByte
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersion
GlobalFree
GlobalUnlock
FreeResource
_lclose
_hwrite
OpenFile
lstrcatA
GetWindowsDirectoryA
GlobalLock
GlobalAlloc
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
GetSystemInfo
MoveFileExA
lstrcmpiA
GetCurrentProcess
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
FindFirstFileA
lstrlenA
WinExec
GetPrivateProfileSectionA
WritePrivateProfileStringA
GetProfileSectionA
WriteProfileStringA
WritePrivateProfileSectionA
WriteProfileSectionA
GetSystemDirectoryA
CreateFileA
FileTimeToDosDateTime
WriteFile
ReadFile
_lread
GetPrivateProfileStringA
DosDateTimeToFileTime
lstrcmpA
GetCurrentThread
SetEndOfFile
SetFilePointer
SetCurrentDirectoryA
MoveFileA
GetFileAttributesA
RemoveDirectoryA
CreateDirectoryA
GetDriveTypeA
GetDiskFreeSpaceA
GetLastError
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
advapi32
RegCloseKey
RegDeleteValueA
RegQueryValueExA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenThreadToken
OpenProcessToken
GetTokenInformation
EqualSid
RegEnumValueA
RegConnectRegistryA
InitializeSecurityDescriptor
RegSetValueExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
AllocateAndInitializeSid
SetSecurityDescriptorOwner
RegCreateKeyExA
FreeSid
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDList
Sections
.text Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 859B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
� Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE