Static task
static1
Behavioral task
behavioral1
Sample
26b1ff6de1ff0aaf3025d938d5fced40.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
26b1ff6de1ff0aaf3025d938d5fced40.exe
Resource
win10v2004-20231222-en
General
-
Target
26b1ff6de1ff0aaf3025d938d5fced40
-
Size
1.7MB
-
MD5
26b1ff6de1ff0aaf3025d938d5fced40
-
SHA1
c080246cd3cd5d047682b484ac814271b079ce5c
-
SHA256
5388cab1bf1741fb4f724de1fda4e00e50195b58ee8202c3d829933f93c0b8b4
-
SHA512
c421546a50e26835e5255232f3b67cad9812a56cc99bef1fa1cb05efa320277ad2763be4659876cb23153d977cded3e5861638d2524bfdaa6752f9ef2a2c85b3
-
SSDEEP
6144:U0SCivdwSZ7OtcAS9s8YySmMHFtoyNXIudQQrRPX:UvCosj6V/SKoHdPrRPX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26b1ff6de1ff0aaf3025d938d5fced40
Files
-
26b1ff6de1ff0aaf3025d938d5fced40.exe windows:5 windows x86 arch:x86
6d48c5f19055fb8bec6cd500c2f78407
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msacm32
acmMetrics
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
__setusermatherr
memset
comctl32
InitCommonControlsEx
kernel32
InitializeCriticalSection
ExitProcess
CopyFileA
CopyFileW
CreateDirectoryA
CreateDirectoryW
CreateFileA
GetStartupInfoA
GetModuleHandleA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetErrorMode
GetCommandLineA
LoadLibraryA
LeaveCriticalSection
GetTickCount
EnterCriticalSection
IsValidCodePage
user32
EmptyClipboard
DestroyCursor
DispatchMessageW
GetKeyState
DrawStateW
DrawIconEx
CopyIcon
gdi32
SetTextJustification
SetTextColor
SetBkMode
SetBkColor
SelectObject
RectVisible
PtVisible
MoveToEx
LineTo
GetTextExtentPoint32W
GetStockObject
GetObjectW
GetDeviceCaps
GetCurrentObject
FrameRgn
DeleteDC
ExtTextOutW
Escape
DeleteObject
GetTextMetricsW
FillRgn
CreateCompatibleDC
CreateFontIndirectW
CreateFontW
CreatePen
CreatePolygonRgn
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
winspool.drv
DocumentPropertiesW
EnumPrintersW
OpenPrinterW
advapi32
RegQueryInfoKeyW
RegGetKeySecurity
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
RegOpenKeyA
RegOpenKeyExA
RegOpenKeyExW
RegOpenKeyW
RegLoadKeyW
RegQueryMultipleValuesA
RegQueryValueExA
RegQueryValueExW
RegQueryValueW
RegSetKeySecurity
RegSetValueExW
RegUnLoadKeyW
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
Sections
.text Size: 424KB - Virtual size: 422KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ifx Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ