Static task
static1
Behavioral task
behavioral1
Sample
c026cd2062cd21fc84b9150a6a162dfa5c060db3a6f01c923ceca762614e086d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c026cd2062cd21fc84b9150a6a162dfa5c060db3a6f01c923ceca762614e086d.exe
Resource
win10v2004-20220901-en
General
-
Target
c026cd2062cd21fc84b9150a6a162dfa5c060db3a6f01c923ceca762614e086d
-
Size
596KB
-
MD5
ff33294b6ab05e188422cfbcdb2980c3
-
SHA1
a7ddec60baf3a6a1f20817226931ee4a29b835ba
-
SHA256
c026cd2062cd21fc84b9150a6a162dfa5c060db3a6f01c923ceca762614e086d
-
SHA512
72f0dab0f2d5aa5220ca5c48d05b628faad5b0c742eebe30c9dae883fc5e774073222de154bd6fbc58c201393dff709ac9486e695e5aebea9a7ceeafe926724f
-
SSDEEP
6144:fBVkOAokae6vwJLbiMG90XVTqxipZoqHvLQCaGsbVqRJpjbXvspPZyFud3CVIbYC:5aOAo7lMG9X6Z2PZE0Y8J+GSTmqC+zl
Malware Config
Signatures
Files
-
c026cd2062cd21fc84b9150a6a162dfa5c060db3a6f01c923ceca762614e086d.exe windows x86
14ba86d56642535739c26dfb0b661709
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalAlloc
FreeLibrary
HeapAlloc
GetProcessHeap
MultiByteToWideChar
GetStdHandle
GetLastError
SetFilePointer
WideCharToMultiByte
GetModuleHandleA
OpenProcess
TerminateProcess
GetCurrentDirectoryA
GetFullPathNameA
CreateDirectoryA
GetSystemDirectoryA
CreateFileA
GetFileSize
WriteFile
PeekNamedPipe
ReadFile
ExitThread
Sleep
CreatePipe
GetStartupInfoA
CreateProcessA
CreateThread
TerminateThread
GetExitCodeThread
GetModuleFileNameA
GetComputerNameA
GetSystemInfo
GetVersionExA
GetSystemPowerStatus
GetTickCount
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
FileTimeToLocalFileTime
FileTimeToSystemTime
FlushConsoleInputBuffer
FindClose
FindFirstFileA
IsBadCodePtr
IsBadReadPtr
SetConsoleCtrlHandler
SetUnhandledExceptionFilter
RaiseException
GlobalMemoryStatus
GetDriveTypeA
GetDiskFreeSpaceA
SetErrorMode
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapReAlloc
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
HeapSize
SetHandleCount
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
QueryPerformanceCounter
GetCurrentThreadId
SetLastError
LoadLibraryA
GetProcAddress
GetCurrentProcessId
GetCurrentProcess
CloseHandle
user32
GetSystemMetrics
GetProcessWindowStation
GetDesktopWindow
wsprintfA
GetDC
GetUserObjectInformationW
MessageBoxA
gdi32
GetObjectA
GetDIBits
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
advapi32
LookupAccountSidA
LookupPrivilegeValueA
OpenProcessToken
GetUserNameA
RegCloseKey
DeregisterEventSource
ReportEventA
RegisterEventSourceA
GetTokenInformation
RegSetValueExA
LogonUserA
CreateProcessAsUserA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
AdjustTokenPrivileges
ws2_32
WSACleanup
recv
inet_ntoa
socket
htons
WSASetLastError
connect
gethostname
select
__WSAFDIsSet
shutdown
closesocket
WSAGetLastError
inet_addr
send
gethostbyname
WSAStartup
netapi32
NetServerEnum
NetApiBufferFree
wininet
InternetGetConnectedState
Sections
.text Size: 434KB - Virtual size: 433KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE