Static task
static1
Behavioral task
behavioral1
Sample
26919a6c4bdeb68207de31e7c41b49f3ed90d44c28ec5139fc2610ded1bb2776.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
26919a6c4bdeb68207de31e7c41b49f3ed90d44c28ec5139fc2610ded1bb2776.exe
Resource
win10v2004-20221111-en
General
-
Target
26919a6c4bdeb68207de31e7c41b49f3ed90d44c28ec5139fc2610ded1bb2776
-
Size
608KB
-
MD5
9fb14b2f38fe5b1b3e616e64226bdb21
-
SHA1
147da7faf33d4ebb99a851fa63e802a4f6a90470
-
SHA256
26919a6c4bdeb68207de31e7c41b49f3ed90d44c28ec5139fc2610ded1bb2776
-
SHA512
07e11b4d09f0d288d5acf40bcca2606930d548ab23efcabb8adb02350bd974559343bb62b65aa6de8e5386d47f7329aee6c282237e7db5e15d56bcbf7ca0f2f4
-
SSDEEP
12288:rF988YG1Tr1gSd4zz62sotTX6HNyqP43RUXCcFWcp2aRnc:Zy43X2sotX8NrCcWcjc
Malware Config
Signatures
Files
-
26919a6c4bdeb68207de31e7c41b49f3ed90d44c28ec5139fc2610ded1bb2776.exe windows x86
85157748d0184de77354d69521c216a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
WindowFromDC
RedrawWindow
GetMenuContextHelpId
MessageBoxW
RealChildWindowFromPoint
RegisterClassA
DrawFocusRect
WaitForInputIdle
RegisterWindowMessageA
UnhookWindowsHookEx
SetTimer
GetMenuItemInfoA
RegisterClassExA
PostQuitMessage
ShowScrollBar
ToUnicodeEx
BeginPaint
CopyIcon
OpenDesktopW
LoadMenuW
DdeNameService
GetCursorPos
DeferWindowPos
CreateWindowExW
ShowWindow
EnumDesktopWindows
DestroyWindow
LockWindowUpdate
TranslateAcceleratorW
FillRect
GetMenu
MsgWaitForMultipleObjectsEx
FindWindowW
DefWindowProcW
GetClassLongW
DialogBoxParamA
kernel32
HeapAlloc
QueryPerformanceCounter
InterlockedDecrement
TlsFree
GetThreadPriorityBoost
FlushFileBuffers
GetStringTypeA
GetVersion
MultiByteToWideChar
HeapReAlloc
SetFilePointer
GetLastError
GetStartupInfoA
FreeEnvironmentStringsW
WriteFile
ExitProcess
CreateMutexA
EnumDateFormatsW
ReadFile
TlsAlloc
CompareStringW
EnterCriticalSection
SetStdHandle
WideCharToMultiByte
EnumTimeFormatsW
VirtualFree
GetCommandLineA
GetFileType
TlsSetValue
LoadLibraryA
GetStartupInfoW
RtlUnwind
GetCurrentProcess
FreeLibraryAndExitThread
GetStringTypeW
HeapCreate
TlsGetValue
GetLocalTime
VirtualQuery
GetCommandLineW
CompareStringA
lstrcat
GetModuleFileNameW
GetCurrentThread
GetCurrentThreadId
InitializeCriticalSection
RtlMoveMemory
GetTickCount
InterlockedExchange
VirtualProtect
GetSystemTime
FindAtomW
SetLastError
GetTempPathW
LeaveCriticalSection
TerminateProcess
SetHandleCount
GetModuleFileNameA
InterlockedIncrement
GetEnvironmentStringsW
GetCurrentProcessId
GetStdHandle
VirtualAlloc
SetEnvironmentVariableA
HeapDestroy
HeapFree
GetSystemTimeAsFileTime
GetProcessHeaps
DeleteCriticalSection
IsBadWritePtr
GetCPInfo
GetEnvironmentStrings
FreeEnvironmentStringsA
OpenMutexA
LCMapStringW
CloseHandle
GetProcAddress
UnhandledExceptionFilter
SetThreadLocale
LCMapStringA
GetModuleHandleA
GetTimeZoneInformation
wininet
SetUrlCacheEntryInfoW
InternetCrackUrlA
InternetSetOptionExW
FtpPutFileA
FindNextUrlCacheContainerA
InternetHangUp
FindNextUrlCacheEntryExA
InternetTimeFromSystemTimeW
FindFirstUrlCacheEntryExW
comctl32
InitCommonControlsEx
CreateStatusWindowW
ImageList_LoadImageA
ImageList_LoadImageW
GetEffectiveClientRect
CreateMappedBitmap
ImageList_SetDragCursorImage
CreateToolbar
shell32
DuplicateIcon
FindExecutableW
SHQueryRecycleBinW
DragQueryFileAorW
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 244KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ