Static task
static1
Behavioral task
behavioral1
Sample
cd26b2b64ee31b8da3eb43b6efe4736133f4201956bd0716e9c43cd613873080.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cd26b2b64ee31b8da3eb43b6efe4736133f4201956bd0716e9c43cd613873080.exe
Resource
win10v2004-20220812-en
General
-
Target
cd26b2b64ee31b8da3eb43b6efe4736133f4201956bd0716e9c43cd613873080
-
Size
672KB
-
MD5
2b47c172e740c38bbaf55dc9dd232e90
-
SHA1
08218940151e3df00c92ca1b30ce7c2bdbcc0f1a
-
SHA256
cd26b2b64ee31b8da3eb43b6efe4736133f4201956bd0716e9c43cd613873080
-
SHA512
c978ffa5411ea530901e894bea259f7cf34660fb64ab3aa8658ff81ba65eefc4111bb9018cc1e4289a55ed575313260ad99ea4767a1287d7c665660201ae84ae
-
SSDEEP
12288:YtfBUpo0Z8Y0s582MXaQReNBkGBxId59SMGn5C/lPlX0aDX4iA3cK:eJUS0Z8Y0IDwalN2ax6oC/l9h74j3P
Malware Config
Signatures
Files
-
cd26b2b64ee31b8da3eb43b6efe4736133f4201956bd0716e9c43cd613873080.exe windows x86
573e8bddaef8381b406e5006ddfd82dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
advapi32
CryptDestroyHash
CryptHashData
RegCreateKeyExA
RegEnumKeyExA
RegSetValueExA
shlwapi
PathFileExistsW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
wnsprintfW
wvnsprintfA
wvnsprintfW
user32
CharLowerBuffA
DispatchMessageA
GetIconInfo
GetKeyboardState
GetKeyState
GetMenuItemID
GetMessageA
LoadCursorA
SendMessageA
Sections
.tmp Size: 42KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ohwx Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lefin Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ