Static task
static1
Behavioral task
behavioral1
Sample
26224e53b8e70615e4f9b961a05e71bc14a5b3681471fffa89737e5763bb666e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
26224e53b8e70615e4f9b961a05e71bc14a5b3681471fffa89737e5763bb666e.exe
Resource
win10v2004-20220812-en
General
-
Target
26224e53b8e70615e4f9b961a05e71bc14a5b3681471fffa89737e5763bb666e
-
Size
346KB
-
MD5
a1dfba79932d12f41d6c309244da2fa0
-
SHA1
9ecd15d83a5c10e14c4ad561a88ecf98d7ece316
-
SHA256
26224e53b8e70615e4f9b961a05e71bc14a5b3681471fffa89737e5763bb666e
-
SHA512
891b68fd243efa82747648310eec2e34130d7998a8e44bf68f7b49cbe9acf4cd28fe322fed5d09f3efeada87e3ec787f5bf3cf008270aa7a94d0b3282a6e3b44
-
SSDEEP
6144:VVhgKvpmP41bBihJzQChZgOaSNVJTdToNSJaIbcKFxh4jvHg3Hy:VVtmnoOaSN7dsZ2cKLSDA3S
Malware Config
Signatures
Files
-
26224e53b8e70615e4f9b961a05e71bc14a5b3681471fffa89737e5763bb666e.exe windows x86
093af0ebdfca2504625d611c2e507782
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetCommandLineW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MultiByteToWideChar
OpenProcess
PeekNamedPipe
QueryPerformanceCounter
ReleaseSemaphore
ResetEvent
ResumeThread
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
msvcrt
_getch
_kbhit
_read
__dllonexit
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_endthreadex
_errno
_fmode
_ftime64
_initterm
_iob
_lock
_onexit
_setjmp3
isxdigit
localeconv
localtime
longjmp
malloc
memcpy
memset
perror
qsort
realloc
setlocale
setvbuf
signal
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strrchr
strtol
strtoul
_unlock
abort
atoi
calloc
exit
fclose
ferror
fflush
fgets
fopen
fputc
fputs
fread
free
fseek
ftell
getc
getchar
getenv
gmtime
islower
isspace
isupper
time
tolower
toupper
ungetc
wcslen
psapi
GetProcessMemoryInfo
shell32
CommandLineToArgvW
avcodec-54
av_bitstream_filter_close
av_bitstream_filter_filter
av_bitstream_filter_init
av_bitstream_filter_next
av_codec_is_decoder
av_codec_is_encoder
av_codec_next
av_destruct_packet
av_dup_packet
av_frame_get_best_effort_timestamp
av_free_packet
av_get_audio_frame_duration
av_get_exact_bits_per_sample
av_init_packet
av_parser_change
avcodec_align_dimensions
avcodec_alloc_frame
avcodec_close
avcodec_configuration
avcodec_copy_context
avcodec_decode_audio4
avcodec_decode_subtitle2
avcodec_decode_video2
avcodec_default_release_buffer
avcodec_descriptor_get
avcodec_descriptor_get_by_name
avcodec_descriptor_next
avcodec_encode_audio2
avcodec_encode_subtitle
avcodec_encode_video2
avcodec_find_best_pix_fmt_of_2
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_find_encoder
avcodec_find_encoder_by_name
avcodec_free_frame
avcodec_get_chroma_sub_sample
avcodec_get_class
avcodec_get_context_defaults3
avcodec_get_frame_class
avcodec_get_frame_defaults
avcodec_get_name
avcodec_open2
avcodec_register_all
avcodec_version
avpicture_deinterlace
avpicture_fill
avpicture_get_size
avsubtitle_free
avdevice-54
avdevice_configuration
avdevice_register_all
avdevice_version
avfilter-3
av_buffersink_get_buffer_ref
av_buffersink_get_frame_rate
av_buffersink_params_alloc
av_buffersink_set_frame_size
av_buffersrc_add_frame
av_buffersrc_add_ref
av_buffersrc_get_nb_failed_requests
av_filter_next
avfilter_configuration
avfilter_copy_buf_props
avfilter_copy_frame_props
avfilter_get_by_name
avfilter_get_class
avfilter_get_video_buffer_ref_from_arrays
avfilter_graph_alloc
avfilter_graph_config
avfilter_graph_create_filter
avfilter_graph_free
avfilter_graph_parse2
avfilter_graph_queue_command
avfilter_graph_request_oldest
avfilter_graph_send_command
avfilter_graph_set_auto_convert
avfilter_inout_free
avfilter_link
avfilter_pad_get_name
avfilter_pad_get_type
avfilter_ref_buffer
avfilter_register_all
avfilter_uninit
avfilter_unref_buffer
avfilter_unref_bufferp
avfilter_version
avformat-54
av_codec_get_id
av_codec_get_tag
av_dump_format
av_filename_number_test
av_find_input_format
av_guess_codec
av_guess_format
av_iformat_next
av_interleaved_write_frame
av_oformat_next
av_pkt_dump_log2
av_read_frame
av_register_all
av_sdp_create
av_write_trailer
avformat_alloc_context
avformat_alloc_output_context2
avformat_close_input
avformat_configuration
avformat_find_stream_info
avformat_free_context
avformat_get_class
avformat_match_stream_specifier
avformat_network_deinit
avformat_network_init
avformat_new_stream
avformat_open_input
avformat_query_codec
avformat_seek_file
avformat_version
avformat_write_header
avio_check
avio_close
avio_close_dyn_buf
avio_enum_protocols
avio_flush
avio_open2
avio_open_dyn_buf
avio_printf
avio_r8
avio_read
avio_seek
avio_size
avio_w8
avio_write
avutil-52
av_asprintf
av_bprint_chars
av_bprint_finalize
av_bprint_init
av_bprintf
av_calloc
av_compare_ts
av_d2q
av_dict_copy
av_dict_free
av_dict_get
av_dict_set
av_div_q
av_fifo_alloc
av_fifo_free
av_fifo_generic_read
av_fifo_generic_write
av_fifo_size
av_fifo_space
av_find_nearest_q_idx
av_force_cpu_flags
av_free
av_freep
av_get_bits_per_pixel
av_get_channel_description
av_get_channel_layout
av_get_channel_layout_nb_channels
av_get_channel_layout_string
av_get_channel_name
av_get_cpu_flags
av_get_default_channel_layout
av_get_media_type_string
av_get_picture_type_char
av_get_pix_fmt
av_get_pix_fmt_name
av_get_sample_fmt
av_get_sample_fmt_name
av_get_sample_fmt_string
av_get_standard_channel_layout
av_get_token
av_gettime
av_image_alloc
av_image_check_size
av_log
av_log_default_callback
av_log_format_line
av_log_get_level
av_log_set_callback
av_log_set_flags
av_log_set_level
av_malloc
av_mallocz
av_max_alloc
av_opt_child_class_next
av_opt_find
av_opt_get_double
av_opt_get_int
av_opt_get_key_value
av_opt_ptr
av_opt_set
av_opt_show2
av_parse_cpu_caps
av_parse_ratio
av_parse_time
av_parse_video_rate
av_parse_video_size
av_pix_fmt_desc_get
av_pix_fmt_desc_get_id
av_pix_fmt_desc_next
av_realloc
av_realloc_f
av_reduce
av_rescale
av_rescale_delta
av_rescale_q
av_strcasecmp
av_strdup
av_strerror
av_strlcat
av_strlcatf
av_strlcpy
av_strstart
av_strtod
av_strtok
av_usleep
avutil_configuration
avutil_version
postproc-52
postproc_configuration
postproc_version
swresample-0
swr_alloc
swr_free
swr_get_class
swresample_configuration
swresample_version
swscale-2
sws_freeContext
sws_getContext
sws_get_class
sws_isSupportedInput
sws_isSupportedOutput
swscale_configuration
swscale_version
Sections
.text Size: 231KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE