Static task
static1
Behavioral task
behavioral1
Sample
d826f4cb8240f894e43fea3c84b14fd85be9758d7ad4eafa113ad7d45c30bc26.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d826f4cb8240f894e43fea3c84b14fd85be9758d7ad4eafa113ad7d45c30bc26.exe
Resource
win10v2004-20221111-en
General
-
Target
d826f4cb8240f894e43fea3c84b14fd85be9758d7ad4eafa113ad7d45c30bc26
-
Size
120KB
-
MD5
2728cc27bed3e893827ad3442920f13f
-
SHA1
bd79a5123e03fd09217103ef9740ca9b52047ec1
-
SHA256
d826f4cb8240f894e43fea3c84b14fd85be9758d7ad4eafa113ad7d45c30bc26
-
SHA512
5994ab245b9233035eeb2292df2018d8ca1c9243f80a7621a6fa141ecc1add2bf76bbca7b9ed5ef14412012286bc54e8892f367dc9c80d975f6b948a3f4275b7
-
SSDEEP
1536:Zkf1uAy9LBGngS719+T0gdGpwW2XtaJp7fd8OUfB4VHrqragVWz:OfVyG9+4g8wW2XtO7l8OUGxrqra9
Malware Config
Signatures
Files
-
d826f4cb8240f894e43fea3c84b14fd85be9758d7ad4eafa113ad7d45c30bc26.exe windows x86
30fe3f044289487cddc09bfb16ee1fde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrStrIA
kernel32
GetCommandLineW
lstrcpyA
LoadLibraryA
GetProcAddress
lstrcmpiW
CreateMutexA
ReleaseMutex
MultiByteToWideChar
CloseHandle
shell32
CommandLineToArgvW
Sections
.text Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ