Static task
static1
Behavioral task
behavioral1
Sample
26b4ff36d6e838b846710f911170d9047cd37089cc1e3745aff573b22539dd76.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
26b4ff36d6e838b846710f911170d9047cd37089cc1e3745aff573b22539dd76.exe
Resource
win10v2004-20220901-en
General
-
Target
26b4ff36d6e838b846710f911170d9047cd37089cc1e3745aff573b22539dd76
-
Size
807KB
-
MD5
06015e4a12a01ae07573fff3a86904f6
-
SHA1
4991398403727f402c58963303ee3742c015dbde
-
SHA256
26b4ff36d6e838b846710f911170d9047cd37089cc1e3745aff573b22539dd76
-
SHA512
f92cd2149ee138d791a80ff002472fa6aac4107df770d563686387c725564bc1a0919d4323e8ce3a84c9d7d637308f4f55d54e5f42b95d96aa70d81f88f8e2d5
-
SSDEEP
12288:0igFn1fyNWVCI6a6fpRQ6QWKfD4WSYWh/TGOm9WaGSNnYIKAYfe+ug6eYh9:0916wVZ3yp66Q9DsDbbMwSNnLXs6eY
Malware Config
Signatures
Files
-
26b4ff36d6e838b846710f911170d9047cd37089cc1e3745aff573b22539dd76.exe windows x86
22b26c25cad097129b0a9fa01651dedb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeW
FindAtomW
Sleep
ReadConsoleA
TlsGetValue
LoadLibraryW
PulseEvent
GetDriveTypeA
GetStartupInfoA
GetPrivateProfileSectionA
lstrlenA
VirtualProtectEx
SearchPathA
ReadConsoleA
GetLastError
ReadConsoleA
CloseHandle
GetLogicalDrives
ReleaseMutex
DeleteFileW
HeapSize
uxtheme
GetThemeTextExtent
GetThemeBool
GetThemeSysSize
GetThemeColor
DrawThemeBackground
GetWindowTheme
DrawThemeEdge
OpenThemeData
IsThemeActive
GetThemeTextMetrics
CloseThemeData
SetWindowTheme
CloseThemeData
gpedit
DllCanUnloadNow
ExportRSoPData
DllGetClassObject
BrowseForGPO
Sections
.text Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 73B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE