Static task
static1
Behavioral task
behavioral1
Sample
28ba50bae85f2922f2d05b9a830aad10d23e4e648ddbb2a2406127a9cfa8799f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28ba50bae85f2922f2d05b9a830aad10d23e4e648ddbb2a2406127a9cfa8799f.exe
Resource
win10v2004-20220812-en
General
-
Target
28ba50bae85f2922f2d05b9a830aad10d23e4e648ddbb2a2406127a9cfa8799f
-
Size
523KB
-
MD5
1c8cdefcdb417afcf7035d8aa9a76a6b
-
SHA1
57e68c012f9bf6d303fbbdde700200d587b05afa
-
SHA256
28ba50bae85f2922f2d05b9a830aad10d23e4e648ddbb2a2406127a9cfa8799f
-
SHA512
b767cf1e270f3e53e2914ef7faf0b99fe0d6b7eb51cf73601c9f6ac43cd2210d6e084aee742153e90831f04bb9f96d9386397b954e19db54a98ea6536ee93588
-
SSDEEP
12288:luQchv9BJgxxbpoWn3URcC1TFdYQ+8uJ:W10xxzn3w7g8
Malware Config
Signatures
Files
-
28ba50bae85f2922f2d05b9a830aad10d23e4e648ddbb2a2406127a9cfa8799f.exe windows x86
ab9eabeceeb1ada9962046879c18b6c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQueryEx
SetStdHandle
VirtualAlloc
LCMapStringW
LCMapStringA
FlushFileBuffers
CreateMutexA
FreeEnvironmentStringsW
HeapCreate
WideCharToMultiByte
GetCurrentThreadId
GetFileType
GetModuleFileNameA
VirtualFree
FoldStringW
TlsFree
HeapSize
HeapReAlloc
GetStartupInfoA
OpenMutexA
LeaveCriticalSection
RtlUnwind
SuspendThread
HeapFree
ExitProcess
SetFilePointer
GetVersionExA
GetACP
IsValidLocale
GetLocaleInfoA
GetCurrentDirectoryA
TlsSetValue
GetOEMCP
GetTimeZoneInformation
TlsGetValue
GetLocaleInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentVariableA
GetModuleHandleA
IsValidCodePage
SetLastError
LoadLibraryA
EnumSystemLocalesA
CompareStringW
GetVersion
GetProcAddress
TlsAlloc
GetModuleFileNameW
GetStdHandle
FreeEnvironmentStringsA
EnterCriticalSection
GetEnvironmentStrings
SetHandleCount
GetCPInfo
GetCurrentProcessId
CompareStringA
GetUserDefaultLCID
DeleteCriticalSection
GetCurrentThread
GetConsoleCursorInfo
UnhandledExceptionFilter
GetLastError
GetCurrentProcess
VirtualProtect
GetCommandLineA
WriteFile
HeapAlloc
InterlockedExchange
GetTickCount
IsBadWritePtr
GetEnvironmentStringsW
VirtualQuery
SetEnvironmentVariableA
GetStringTypeA
GetStartupInfoW
CloseHandle
GetSystemInfo
ReadFile
MultiByteToWideChar
GetStringTypeW
GetTimeFormatA
InitializeCriticalSection
GetDateFormatA
GetCommandLineW
TerminateProcess
HeapDestroy
user32
RegisterClassExA
RegisterClassA
GetCaretBlinkTime
comctl32
InitCommonControlsEx
Sections
.text Size: 342KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ