Static task
static1
Behavioral task
behavioral1
Sample
a76895d37e776f430ba944d5c0119da1ede840f12f7c7831d850eb956c3cbe72.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a76895d37e776f430ba944d5c0119da1ede840f12f7c7831d850eb956c3cbe72.exe
Resource
win10v2004-20220901-en
General
-
Target
a76895d37e776f430ba944d5c0119da1ede840f12f7c7831d850eb956c3cbe72
-
Size
187KB
-
MD5
26ccb4c395346a986a3b1aa74a28eb54
-
SHA1
e68365ed010002be01ca1006c42c24593c150a44
-
SHA256
a76895d37e776f430ba944d5c0119da1ede840f12f7c7831d850eb956c3cbe72
-
SHA512
e36f38da2c33fc9728259b0e4ff8dc9410336b5ddbe1f06fdb6ad52f43cfd7de22c47b28fc6b769dce30e9ddba76bab5748aebe9c87389fca64025a5704ddc58
-
SSDEEP
3072:k35JUwZ5VzZwdPANvoXIJ0ohIT+UbRs/Zy23iQ+D8XjhwtWA9pxOz:kJ+wtZwd4e42qIrRK8Ehwt193
Malware Config
Signatures
Files
-
a76895d37e776f430ba944d5c0119da1ede840f12f7c7831d850eb956c3cbe72.exe windows x86
7726f017a3970f19e6913a556bc4cc2d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
QueryMemoryResourceNotification
CreateEventA
LoadLibraryA
IsDBCSLeadByte
CreateThread
GetCurrentProcess
lstrcpynA
GetModuleFileNameA
CompareStringW
LoadResource
InterlockedDecrement
LocalFree
FormatMessageA
OpenProcess
CompareStringA
EnumResourceTypesW
DeleteCriticalSection
lstrcatA
InterlockedIncrement
SetEvent
CloseHandle
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
WaitForSingleObject
lstrcmpiA
GetCurrentThreadId
GetVersion
GetComputerNameA
SizeofResource
GetPrivateProfileSectionNamesA
lstrcpyA
FindResourceA
GetCurrentThread
lstrlenA
TerminateThread
GetModuleHandleA
LeaveCriticalSection
lstrlenW
RaiseException
winmm
timeGetTime
timeSetEvent
oleacc
CreateStdAccessibleObject
ole32
OleTranslateAccelerator
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
Sections
.text Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ