Static task
static1
Behavioral task
behavioral1
Sample
d728fb57f8f70fa1fe24c616c5c9ff72242b152bc85de1dbe1d46623b0556b1c.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
d728fb57f8f70fa1fe24c616c5c9ff72242b152bc85de1dbe1d46623b0556b1c.exe
Resource
win10v2004-en-20220112
General
-
Target
d728fb57f8f70fa1fe24c616c5c9ff72242b152bc85de1dbe1d46623b0556b1c
-
Size
462KB
-
MD5
d552be44a11d831e874e05cadafe04b6
-
SHA1
55462f391a8d0ece3d2649bf3fa4514a86679460
-
SHA256
d728fb57f8f70fa1fe24c616c5c9ff72242b152bc85de1dbe1d46623b0556b1c
-
SHA512
889ebc5b4e4b0ce1b4027e42dda5bd0c4c1e552b544bb56219a57936b3636006de518aca7e985ed2aee322788378e431d51bc9ba03cfe48e83d29e1a939b1272
-
SSDEEP
12288:/KBr4ZnWfR37A/6J5DnT/Wwv0Wb97laZw1:/n837BLT+i0WbRlga
Malware Config
Signatures
Files
-
d728fb57f8f70fa1fe24c616c5c9ff72242b152bc85de1dbe1d46623b0556b1c.exe windows x86
6823eadde9ec8464d4828dce83f18379
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
VirtualAlloc
ExitProcess
AllocConsole
Sleep
FreeConsole
ExitThread
GetStdHandle
CreateTimerQueueTimer
CreateThread
WriteConsoleW
SetFilePointerEx
EncodePointer
DecodePointer
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapFree
RaiseException
HeapAlloc
SetLastError
GetCurrentThreadId
GetProcessHeap
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
LoadLibraryExW
HeapReAlloc
LCMapStringW
OutputDebugStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
ReadConsoleW
GetStringTypeW
CloseHandle
SetStdHandle
CreateFileW
user32
MessageBoxA
Sections
.text Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 365KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ