Static task
static1
Behavioral task
behavioral1
Sample
28dac3b89720538eb5ff84f6634efe17080fdc7ee1f86f2d49621dadc526fda5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28dac3b89720538eb5ff84f6634efe17080fdc7ee1f86f2d49621dadc526fda5.exe
Resource
win10v2004-20220901-en
General
-
Target
28dac3b89720538eb5ff84f6634efe17080fdc7ee1f86f2d49621dadc526fda5
-
Size
831KB
-
MD5
a233cfda93920052cfdb8f2347bb19d6
-
SHA1
b53dd06ce8ebee8d5937b68f16981053b11523ca
-
SHA256
28dac3b89720538eb5ff84f6634efe17080fdc7ee1f86f2d49621dadc526fda5
-
SHA512
c787bf0a9d0b6ad0213307927e2aedc72afebaa9057e253fb5613ae2be3793e91455745a6dbc6b9f522a73f71b732787f442789b1ab2095431efa7899da4d29b
-
SSDEEP
24576:Ar/0tkMGwUJv2tgywUNG3ZOEOHcVWWLy:AykMGwLLF8pNOHcY
Malware Config
Signatures
Files
-
28dac3b89720538eb5ff84f6634efe17080fdc7ee1f86f2d49621dadc526fda5.exe windows x86
d4b419e279a3e375308f706140593af2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
EnumResourceNamesA
FindNextFileW
GetCurrentThread
GetConsoleTitleA
EnumCalendarInfoA
CompareStringA
GetModuleHandleA
GetTickCount
GetDiskFreeSpaceA
LeaveCriticalSection
GetCommandLineA
MoveFileExA
CreateSemaphoreW
GetLocaleInfoA
HeapCreate
WaitForSingleObject
drmv2clt
MakeEscapedURL
DllUnregisterServer
CreateDRMRightsManager
LaunchURL
Sections
.code Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.cdata Size: 813KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ