Static task
static1
Behavioral task
behavioral1
Sample
28a3e10ac80eb640748d91ce23e6ab37ac41402122bb49803c1a37d3b48adbf7.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
28a3e10ac80eb640748d91ce23e6ab37ac41402122bb49803c1a37d3b48adbf7.exe
Resource
win10v2004-20220414-en
General
-
Target
28a3e10ac80eb640748d91ce23e6ab37ac41402122bb49803c1a37d3b48adbf7
-
Size
108KB
-
MD5
a7b95421785baa3381af20c176aece4f
-
SHA1
20991f8fa8669bd25d468d1ab9ed9477438e7bfa
-
SHA256
28a3e10ac80eb640748d91ce23e6ab37ac41402122bb49803c1a37d3b48adbf7
-
SHA512
c70edcc1b4851ca1e4e65afe71d7b11156afc6d94e93ca4aac9c4dbb7661a1997fd18c8f91dd367ca1a809dec52aad850cf3b3ebbd381c5bb0d7bf32f3c54727
-
SSDEEP
3072:n12SAMHa9akBThPFu6wJnpo33ebEvTHM4O:n6RaiFkJnpjbEjM4
Malware Config
Signatures
Files
-
28a3e10ac80eb640748d91ce23e6ab37ac41402122bb49803c1a37d3b48adbf7.exe windows x86
cf93d96e784f3ea5a179ef2f27e81edb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
UpdateResourceW
GetProcAddress
lstrcat
lstrcpyW
GetFileSize
MapViewOfFile
LoadLibraryW
CreateFileA
GetModuleHandleA
CopyFileExW
LoadLibraryExW
OpenEventA
CreateMutexA
GetOEMCP
authz
AuthzInitializeContextFromSid
AuthzFreeContext
AuthzAddSidsToContext
AuthzFreeResourceManager
AuthzFreeAuditEvent
user32
InsertMenuW
IsDialogMessageW
GetMessageA
DispatchMessageA
CreateDesktopA
LoadMenuA
DrawStateA
GetDlgItemTextA
GetClassLongW
LoadBitmapW
PostMessageW
cfgmgr32
CM_Add_Empty_Log_Conf
CM_Add_Range
CMP_Report_LogOn
Sections
text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
jdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
jdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 75KB
IMAGE_SCN_MEM_READ