Static task
static1
Behavioral task
behavioral1
Sample
f26bf05ac838613236271cbe58000017bdc7fe04d153889b3e0e354468f8a739.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f26bf05ac838613236271cbe58000017bdc7fe04d153889b3e0e354468f8a739.exe
Resource
win10v2004-20230221-en
General
-
Target
f26bf05ac838613236271cbe58000017bdc7fe04d153889b3e0e354468f8a739
-
Size
1.3MB
-
MD5
ef058a6e5b29d612dbb26e5e4d5bdf89
-
SHA1
b343b1aaa60dbd3b0f67ef44e0e687d581f68ac2
-
SHA256
f26bf05ac838613236271cbe58000017bdc7fe04d153889b3e0e354468f8a739
-
SHA512
fa844ffe43c10811f995a6ffba55aca5f07686a4d3b27214b14abfdc9fc8e4f4ccb8f6eee9d56d7a42cd24363cc20abbfcbe0355ddd5727cc8459a1e4d9c5cce
-
SSDEEP
24576:d6suXKJ1FPAXoUU468wrEGAopmQ5AxiPe1EOU0tV1p0VolwJm5Tu39Y+d17UkA:dvrJrYYUU41YEFQ5AVEl0tP2Vfrld17k
Malware Config
Signatures
Files
-
f26bf05ac838613236271cbe58000017bdc7fe04d153889b3e0e354468f8a739.exe windows x86
e5233182e5d8232c00d16605dd845b7e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
LBItemFromPt
shell32
Shell_NotifyIconA
comdlg32
ChooseColorA
winmm
waveOutWrite
wsock32
WSACleanup
ntdll
RtlIpv6AddressToStringA
iphlpapi
GetAdaptersAddresses
Sections
CODE Size: 1015KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE