Static task
static1
Behavioral task
behavioral1
Sample
c26a7e16bd62983a71d78d26fc2d05e29894e65b5d98bbfc5d6437a91496b716.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c26a7e16bd62983a71d78d26fc2d05e29894e65b5d98bbfc5d6437a91496b716.exe
Resource
win10v2004-20220812-en
General
-
Target
c26a7e16bd62983a71d78d26fc2d05e29894e65b5d98bbfc5d6437a91496b716
-
Size
11KB
-
MD5
cdc4b5c97d14bcc546697a1235392d66
-
SHA1
c0fd2be763e485bbce29c6d3e7c47e81ae5a4ca7
-
SHA256
c26a7e16bd62983a71d78d26fc2d05e29894e65b5d98bbfc5d6437a91496b716
-
SHA512
abaa513a3a1fa34df92f14683178b722718275a625fd3f796234e4f68ff5559e5fa4c414f1f10315f09f3096c9672301f7107e5071b2dc9a8f2786d88560fdf5
-
SSDEEP
192:Gn0u0RgmKksj4esZxDORcsPGCCO5aNdPuvuuE8NUoyExYMikE6C0fhWxAWn83:WA1HLe+xDORcAGCCSmOE5CxYMM6CSWxC
Malware Config
Signatures
Files
-
c26a7e16bd62983a71d78d26fc2d05e29894e65b5d98bbfc5d6437a91496b716.exe windows x86
a7b8f86f7e8d06933951e76dca4a8316
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord540
ord537
ord2915
ord2846
ord2764
ord800
ord2818
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_except_handler3
__CxxFrameHandler
strncmp
strchr
strtok
strstr
exit
kernel32
GetSystemDirectoryA
GlobalMemoryStatus
GetProcAddress
LoadLibraryA
lstrlenA
GetLastError
GetVersionExA
GetTempPathA
GetStartupInfoA
GetModuleHandleA
CopyFileA
DeleteFileA
MoveFileA
ExitProcess
WinExec
Sleep
CloseHandle
WriteFile
CreateFileA
lstrcatA
GetModuleFileNameA
SetFileAttributesA
advapi32
RegOpenKeyA
OpenServiceA
OpenSCManagerA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetServiceStatus
RegisterServiceCtrlHandlerA
CreateServiceA
StartServiceA
DeleteService
RegSetValueExA
CloseServiceHandle
StartServiceCtrlDispatcherA
ws2_32
send
closesocket
WSAGetLastError
recv
__WSAFDIsSet
select
connect
socket
gethostbyname
inet_addr
htons
WSAStartup
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ