DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b26c63770448b541a14cbb8084e891c57c7b043b314b435e9a285639405d488b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b26c63770448b541a14cbb8084e891c57c7b043b314b435e9a285639405d488b.exe
Resource
win10v2004-20220812-en
General
-
Target
b26c63770448b541a14cbb8084e891c57c7b043b314b435e9a285639405d488b
-
Size
68KB
-
MD5
e54c8ebce6bfe7ba7d7bad4f51700b85
-
SHA1
6ac23ee368ac0eedc626995fb6dba2723e1c2a05
-
SHA256
b26c63770448b541a14cbb8084e891c57c7b043b314b435e9a285639405d488b
-
SHA512
9d4f7a38d20ba61c20c284706311f28d56ec598351eb0aee65de2c0bb2160a0c4442a0ded60ae1777d7e7da9848f21b653afa650c6b496013c1ff52cd77f7f43
-
SSDEEP
1536:/yitdWi7HakiipPgVwSs1sEV+OaXHEM5txq1R+rUt:/yQh76iPYwtuEYtn5Pq1
Malware Config
Signatures
Files
-
b26c63770448b541a14cbb8084e891c57c7b043b314b435e9a285639405d488b.exe regsvr32 windows x86
7f042a18c6dc051d0db69d90a7380ac7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumDateFormatsA
GetComputerNameExW
SetConsoleHardwareState
GlobalMemoryStatus
GlobalReAlloc
CreatePipe
MapViewOfFileEx
LocalFree
FlushViewOfFile
SuspendThread
SetConsoleFont
LocalCompact
GlobalUnfix
CreateSemaphoreW
SetCriticalSectionSpinCount
GetProcessHeap
GetLastError
GetCommandLineA
ExitProcess
GetStartupInfoA
user32
SetMenuItemInfoW
DdeCreateStringHandleA
EmptyClipboard
FindWindowA
DrawTextExW
CopyIcon
CopyAcceleratorTableW
GetTabbedTextExtentW
GetWinStationInfo
SoftModalMessageBox
SetConsoleReserveKeys
ChildWindowFromPoint
DlgDirSelectExW
gdi32
ScaleViewportExtEx
UpdateColors
GetGraphicsMode
SetGraphicsMode
GdiIsMetaPrintDC
ResetDCA
CreatePolygonRgn
SetSystemPaletteUse
FONTOBJ_pxoGetXform
GetTextExtentPointW
GetViewportOrgEx
GetClipRgn
GetTextFaceA
GdiEntry10
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE