Static task
static1
Behavioral task
behavioral1
Sample
26ebf4b16a7b59e42a4bb77818d6fd31.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
26ebf4b16a7b59e42a4bb77818d6fd31.exe
Resource
win10v2004-20220812-en
General
-
Target
26ebf4b16a7b59e42a4bb77818d6fd31.exe
-
Size
196KB
-
MD5
26ebf4b16a7b59e42a4bb77818d6fd31
-
SHA1
3b76faa23a88fa0937eab421e4c8f2c4a8d070f0
-
SHA256
b06b1b4d5a9dddb0d067a38fdf2b3b872d974ce1379c4101ab13aa1a6f143b13
-
SHA512
14675781ec3b69d01aafc6fa18d3184b29b3b8c68f90b002f2fe7bfe39f5fdb4fdae7a1fe87c12d10f53c166ea077cb533e997c8d069b67ecb966eda1c97df6a
-
SSDEEP
3072:dpnVxDLhdvd+kfHkJbWU5TszWKsQ0U99qpz0kDB1sh02qR9wBA:3nVxDLl+Dpf5TYWKsQzbqKkzshALu
Malware Config
Signatures
Files
-
26ebf4b16a7b59e42a4bb77818d6fd31.exe.exe windows x86
ba19c5d833d8f89c60a2bc026207e7c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExA
GetCPInfo
GetConsoleAliasExesLengthA
DeleteVolumeMountPointA
OpenJobObjectA
GetModuleHandleExW
InterlockedCompareExchange
WriteConsoleInputA
GetConsoleAliasesA
GetWindowsDirectoryA
GetUserDefaultLangID
CreateActCtxW
SetFileShortNameW
_hread
GetCalendarInfoA
GetVersionExW
LeaveCriticalSection
GetFileAttributesA
lstrcpynW
WriteConsoleW
GetBinaryTypeA
SetThreadPriority
InterlockedExchange
GetLastError
BackupRead
GetProcAddress
VirtualAlloc
RemoveDirectoryA
GetDiskFreeSpaceW
OpenWaitableTimerA
LoadLibraryA
UnhandledExceptionFilter
LocalAlloc
SetProcessWorkingSetSize
FindAtomA
Module32FirstW
GetModuleHandleA
GetStringTypeW
GetConsoleTitleW
LocalSize
GetCurrentProcessId
GetFileInformationByHandle
GetLocaleInfoA
GetStringTypeA
LCMapStringW
WideCharToMultiByte
MultiByteToWideChar
GetStartupInfoW
HeapAlloc
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
EnterCriticalSection
HeapReAlloc
RaiseException
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
user32
LoadMenuA
CharUpperW
CopyAcceleratorTableW
RealGetWindowClassW
CharUpperBuffW
GetKeyNameTextA
GetCursorInfo
LoadIconA
CharLowerBuffW
SetCaretPos
ole32
CoGetPSClsid
OleQueryLinkFromData
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ