Static task
static1
Behavioral task
behavioral1
Sample
a26e1df0854456e8da3824cbb84a16e6a7dcf8852199592e35f4cd06b7ce172d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a26e1df0854456e8da3824cbb84a16e6a7dcf8852199592e35f4cd06b7ce172d.exe
Resource
win10v2004-20221111-en
General
-
Target
a26e1df0854456e8da3824cbb84a16e6a7dcf8852199592e35f4cd06b7ce172d
-
Size
169KB
-
MD5
e79a83edde91fdf98cf830b6926afc76
-
SHA1
7af4407dc7b1884840f835e85c83d93ffc42f9bf
-
SHA256
a26e1df0854456e8da3824cbb84a16e6a7dcf8852199592e35f4cd06b7ce172d
-
SHA512
468488bd49b58151524aa6add147c0e174658f53f4c78f5751564fc56d036463c373cc9b59368e4c5daa644bbeaedd79e8df094777784ba15f4a54ede69ed6ca
-
SSDEEP
3072:McOS7vt/0NmKw0o66Two5ud3GGmfXWyK2tsEa8A/GL/qcBfqut8Qgx6cporXn:MK7vSmKw0o6Xo55G3yK27vE8ScV8lAce
Malware Config
Signatures
Files
-
a26e1df0854456e8da3824cbb84a16e6a7dcf8852199592e35f4cd06b7ce172d.exe windows x86
3b988d822e3f9a05d3541e736f7f915a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ReleaseMutex
GetStartupInfoW
Sleep
GetStartupInfoA
GetSystemTimeAsFileTime
GetStartupInfoW
LoadLibraryExW
ReleaseMutex
DeviceIoControl
WaitForSingleObject
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntW
Sleep
WaitForSingleObject
VirtualProtect
SleepEx
DeviceIoControl
DeviceIoControl
CreateFileA
TerminateProcess
SleepEx
LoadLibraryExA
winhttp
WinHttpSetOption
WinHttpSetOption
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCheckPlatform
WinHttpSetOption
WinHttpSetOption
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpSetOption
WinHttpSetOption
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpSetOption
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpSetOption
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpSetOption
WinHttpSetOption
WinHttpCreateUrl
WinHttpSetOption
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpSetOption
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpSetOption
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpCreateUrl
WinHttpOpenRequest
Sections
.text Size: 151KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dzen Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ