Static task
static1
Behavioral task
behavioral1
Sample
26708c964fde9a9de4fe17bdb5a610f40043ad4c8e736111ba0f7948dc0d4b96.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
26708c964fde9a9de4fe17bdb5a610f40043ad4c8e736111ba0f7948dc0d4b96.exe
Resource
win10v2004-20220812-en
General
-
Target
26708c964fde9a9de4fe17bdb5a610f40043ad4c8e736111ba0f7948dc0d4b96
-
Size
520KB
-
MD5
824e1713e08639bbbc0e298c9544b370
-
SHA1
7231bdf64ba841fae45dad35c574ef2f966d2a83
-
SHA256
26708c964fde9a9de4fe17bdb5a610f40043ad4c8e736111ba0f7948dc0d4b96
-
SHA512
ca0f7158182bd510c2c98f8038a7f4a7572a32bfd06ea2cfafd6e7f5195e50ca1e9185bcd78b885127b1da5adf2992ca75e253b07f6b96efafccbfb9b3d374ef
-
SSDEEP
6144:RkDX7yqomaAbEJAP2p+BbXOWZVue7h9UpAMVOR301HSsQLH5Ah:RkDX7hNaA4AvBbXKetCpAEORqSsPh
Malware Config
Signatures
Files
-
26708c964fde9a9de4fe17bdb5a610f40043ad4c8e736111ba0f7948dc0d4b96.exe windows x86
78726a4b41ec03d9c17d9d08bc5276e8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
connect
htons
inet_ntoa
socket
WSAStartup
select
__WSAFDIsSet
getsockopt
send
WSAGetLastError
closesocket
gethostbyname
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
IsValidLocale
EnumSystemLocalesA
CloseHandle
CreateProcessW
MultiByteToWideChar
GetFileAttributesW
LocalFree
FormatMessageA
GetLastError
GetVersionExW
GlobalMemoryStatusEx
GetSystemInfo
GetCurrentProcess
GetProcAddress
GetModuleHandleW
LockResource
LoadResource
FindResourceExW
WideCharToMultiByte
GetUserDefaultUILanguage
Sleep
HeapFree
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
HeapReAlloc
GetVersionExA
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
ReadFile
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwind
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
HeapSize
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
CreateFileW
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
GetLocaleInfoW
SetEndOfFile
GetDriveTypeA
GetFullPathNameA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
user32
GetSystemMenu
LoadAcceleratorsW
PeekMessageW
TranslateAcceleratorW
GetMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
MessageBoxA
MoveWindow
ReleaseDC
DrawTextW
GetDC
GetWindowTextW
GetClientRect
EndDialog
PostQuitMessage
EnableWindow
SendMessageW
GetDlgItemTextW
UpdateWindow
ShowWindow
GetWindowRect
EnableMenuItem
LoadIconW
CreateWindowExW
GetSystemMetrics
DestroyWindow
DialogBoxParamW
DefWindowProcW
EndPaint
BeginPaint
RegisterClassExW
LoadCursorW
gdi32
CreateSolidBrush
SetTextColor
SetBkColor
GetStockObject
SelectObject
Sections
.text Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 380KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ