Static task
static1
Behavioral task
behavioral1
Sample
d26f03e5e53ef328b129472cc46203fbcd1de763257d076cfc11bafed43c9bcb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d26f03e5e53ef328b129472cc46203fbcd1de763257d076cfc11bafed43c9bcb.exe
Resource
win10v2004-20221111-en
General
-
Target
d26f03e5e53ef328b129472cc46203fbcd1de763257d076cfc11bafed43c9bcb
-
Size
132KB
-
MD5
80c79eb5bcfdbbec91c61eaee98baba8
-
SHA1
1b1f626a455f5e53709371eaf351284f5f0601b1
-
SHA256
d26f03e5e53ef328b129472cc46203fbcd1de763257d076cfc11bafed43c9bcb
-
SHA512
bb4b5566a77f1848c21514e6dc5227e84444962e6eae9c3f3e2b7d0c847f86e9c94060156982772288a61b6d4936f711e6e7e3bcabfef2851b9e5dce8b87d1a5
-
SSDEEP
3072:14uHj3MElIbP9Q9rqvQSQ2sgwkUXn2eJK7BqB2uK1u:6uHj31lIT9Q9rqvQSfsDmew74o
Malware Config
Signatures
Files
-
d26f03e5e53ef328b129472cc46203fbcd1de763257d076cfc11bafed43c9bcb.exe windows x86
dc1c3237df6344d7d429b31268052112
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
SetSoftwareUpdateAdvertisementState
DllUnregisterServer
FaultInIEFeature
IsValidURL
Extract
shell32
DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA
Sections
.text Size: 89KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE