Static task
static1
Behavioral task
behavioral1
Sample
326f11889141f82092ee258498f2cefea75d3dd9d4bdc69f67c3d6ca20fec282.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
326f11889141f82092ee258498f2cefea75d3dd9d4bdc69f67c3d6ca20fec282.exe
Resource
win10v2004-20220901-en
General
-
Target
326f11889141f82092ee258498f2cefea75d3dd9d4bdc69f67c3d6ca20fec282
-
Size
855KB
-
MD5
05466fcd218f181b846dd7ebc6705530
-
SHA1
e6fcb52d0e1283be220e4281eaa01b0e80c53403
-
SHA256
326f11889141f82092ee258498f2cefea75d3dd9d4bdc69f67c3d6ca20fec282
-
SHA512
1d32720508f5e5e2402863ae6a764c0f5417c88a11dc1b7dd594626bc1907d7c69d9525c08be8e09cee996c17ca266f5106b37d115e009dbc05a2629ba6ab9dd
-
SSDEEP
24576:I3NIsl/1+cDWg+eZ9JBiBnDI4nIaLnAD3:Ls51nWgoB04IaLAD
Malware Config
Signatures
Files
-
326f11889141f82092ee258498f2cefea75d3dd9d4bdc69f67c3d6ca20fec282.exe windows x86
cea079a970618b69a8ed467387ad60bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2915
msvcrt
strcspn
kernel32
GetProcessHeap
user32
CloseWindowStation
gdi32
DeleteObject
advapi32
StartServiceA
shell32
SHGetFileInfoA
avicap32
capGetDriverDescriptionA
ws2_32
setsockopt
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 804KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ