Static task
static1
Behavioral task
behavioral1
Sample
759f26ae46d8bd1c26706d62cddea90c8c96b03acbd2849ee2ed8f292341a8fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
759f26ae46d8bd1c26706d62cddea90c8c96b03acbd2849ee2ed8f292341a8fb.exe
Resource
win10v2004-20221111-en
General
-
Target
759f26ae46d8bd1c26706d62cddea90c8c96b03acbd2849ee2ed8f292341a8fb
-
Size
268KB
-
MD5
8cefe4ac42ef882c798b4391070f15dd
-
SHA1
5b1c3ab54b9fec18f043b1ce23e727e743c9d966
-
SHA256
759f26ae46d8bd1c26706d62cddea90c8c96b03acbd2849ee2ed8f292341a8fb
-
SHA512
fc635782c304e1edce92a9c143122df8578ad47ff6ac3d25b1b6802999c46ab8b23d4115a9a0bb3bc43104df03a5f00827fa98a0fc881424d19a3481195f9ddc
-
SSDEEP
6144:YpyADvV04Ssiv9tJwZeNZmLETLIV9Co2E3oR8BeiN5URGutyIIx:YphNSLyMNcASoHOgiIRzt/
Malware Config
Signatures
Files
-
759f26ae46d8bd1c26706d62cddea90c8c96b03acbd2849ee2ed8f292341a8fb.exe windows x86
3376d2e35b036e8b53fe20ebac8523cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WideCharToMultiByte
GetCurrentThreadId
LCMapStringA
AddAtomA
DeleteCriticalSection
lstrcpyA
GetEnvironmentStringsW
MulDiv
GetTickCount
GetModuleHandleA
lstrcpynA
LCMapStringW
Sleep
IsBadCodePtr
WriteFile
GetFileAttributesA
lstrcmpA
lstrcmpiA
SetFilePointer
FlushFileBuffers
GetStringTypeW
FreeLibrary
GetLastError
GetThreadLocale
GetProcAddress
InitializeCriticalSection
FreeEnvironmentStringsW
SetStdHandle
UnhandledExceptionFilter
GetStringTypeA
EnumResourceNamesW
GetEnvironmentStrings
LeaveCriticalSection
EnterCriticalSection
lstrlenA
VirtualProtect
lstrcatA
GetStartupInfoA
CreateFileA
ReadFile
GetDiskFreeSpaceA
MultiByteToWideChar
lstrlenA
SetUnhandledExceptionFilter
FindFirstFileA
FreeEnvironmentStringsA
GetCPInfo
IsBadReadPtr
GetFullPathNameA
GetOEMCP
LoadLibraryA
RaiseException
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 136KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ