Static task
static1
Behavioral task
behavioral1
Sample
28c9999e53764d1793bc84b4cb149773b125aa395d6d56a8b882b441329d8ec3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
28c9999e53764d1793bc84b4cb149773b125aa395d6d56a8b882b441329d8ec3.exe
Resource
win10v2004-20220812-en
General
-
Target
28c9999e53764d1793bc84b4cb149773b125aa395d6d56a8b882b441329d8ec3
-
Size
572KB
-
MD5
8a7864091797617df63504527d62b263
-
SHA1
24345687b457c233161531fd7e4fe7869b3ee223
-
SHA256
28c9999e53764d1793bc84b4cb149773b125aa395d6d56a8b882b441329d8ec3
-
SHA512
4218e5315218f7ff73e5a9244bb6e8dfc504345986a1042818767d0938f5adbccda9d207f066cced0db9af88c4ca76d7cb6697f806546f749b752e32d83166d4
-
SSDEEP
12288:I0OqOAYr6AkKGQ3I8cXEFQTvUzlm1Ka3uQayg0Vv0bN0uSm:rOqOAa6rKlcvvUpmXehE0xtS
Malware Config
Signatures
Files
-
28c9999e53764d1793bc84b4cb149773b125aa395d6d56a8b882b441329d8ec3.exe windows x86
ec15e85bd7a23e1465b7a87fdf18bb48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextExtentPointW
CopyEnhMetaFileA
GetDeviceCaps
GetGlyphOutline
CreateDCW
DeleteDC
GetObjectA
CreateMetaFileA
PatBlt
GdiPlayJournal
PlayEnhMetaFile
SelectClipPath
comctl32
ImageList_Copy
ImageList_GetFlags
ImageList_DrawIndirect
InitCommonControlsEx
ImageList_SetImageCount
kernel32
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
SetEnvironmentVariableA
GetTempPathW
CreateWaitableTimerA
SetEnvironmentVariableW
GetSystemInfo
EnterCriticalSection
GetDiskFreeSpaceExW
CompareStringA
EnumSystemLocalesA
GetShortPathNameW
OpenMutexA
GetModuleFileNameA
TerminateProcess
LoadLibraryW
SetLocaleInfoA
DebugBreak
WriteFile
HeapDestroy
GetConsoleMode
GetFileSize
CopyFileExA
SetCurrentDirectoryA
GetPrivateProfileSectionNamesA
SetConsoleScreenBufferSize
GetFileAttributesW
HeapFree
CompareFileTime
GetLocaleInfoA
GetCurrentThread
GetModuleFileNameW
MoveFileExW
SetConsoleCtrlHandler
CreateMailslotW
GetConsoleTitleA
UnhandledExceptionFilter
GetStartupInfoA
GetCurrentThreadId
CreateFileA
GetModuleHandleA
DeleteCriticalSection
SetConsoleTitleW
IsDebuggerPresent
GetStringTypeW
GetCurrentProcessId
QueryPerformanceCounter
CreateToolhelp32Snapshot
WriteConsoleW
SetFilePointer
ReadConsoleOutputA
lstrlenA
GetTimeFormatA
EnumCalendarInfoA
GetCurrentProcess
FindAtomA
GetNumberFormatA
EnumResourceNamesW
CreateDirectoryA
SetHandleCount
GetSystemTimeAsFileTime
GetEnvironmentStrings
LockFileEx
CreateMutexA
LeaveCriticalSection
GetLocaleInfoW
GetNamedPipeHandleStateW
ExitProcess
FreeResource
SetConsoleWindowInfo
GetACP
GetProcAddress
FindResourceA
LCMapStringA
GetStdHandle
HeapReAlloc
SetVolumeLabelW
WaitNamedPipeW
GetLastError
WriteConsoleA
TlsSetValue
GlobalAddAtomA
GetCommandLineW
GetModuleHandleW
RaiseException
InterlockedDecrement
GetCPInfo
CloseHandle
GetFileType
GetEnvironmentStringsW
FindAtomW
GetFileAttributesA
GetConsoleCP
VirtualFree
MultiByteToWideChar
SetVolumeLabelA
EnumResourceTypesA
LCMapStringW
IsValidLocale
InterlockedExchange
LocalFlags
GetPrivateProfileIntA
TlsAlloc
RtlUnwind
CreatePipe
GetDateFormatA
GetDateFormatW
HeapCreate
OutputDebugStringA
VirtualAlloc
SetStdHandle
InitializeCriticalSection
OutputDebugStringW
CreateWaitableTimerW
UnlockFileEx
IsValidCodePage
GetOEMCP
CompareStringW
SetLastError
GetProcessHeap
FlushInstructionCache
EnumDateFormatsA
FreeEnvironmentStringsW
GetVersionExA
GetWindowsDirectoryA
WriteConsoleOutputCharacterW
WriteProfileStringW
GetCommandLineA
GetStartupInfoW
IsBadWritePtr
TlsGetValue
FreeLibrary
GetUserDefaultLCID
FlushViewOfFile
InterlockedIncrement
GlobalGetAtomNameA
HeapValidate
MoveFileW
GetTickCount
TlsFree
EnumTimeFormatsW
WriteProfileSectionA
IsBadReadPtr
VirtualQuery
FlushFileBuffers
WideCharToMultiByte
ReadFile
EnumResourceTypesW
SetThreadAffinityMask
HeapAlloc
GetConsoleOutputCP
GetTimeZoneInformation
LoadLibraryA
GetStringTypeA
wininet
RunOnceUrlCache
DeleteUrlCacheEntryA
InternetGetConnectedStateEx
shell32
SHGetNewLinkInfo
RealShellExecuteA
DoEnvironmentSubstA
SHGetPathFromIDListW
user32
OpenWindowStationW
ExcludeUpdateRgn
DdeAbandonTransaction
RedrawWindow
InternalGetWindowText
LoadIconW
MoveWindow
UnionRect
SendInput
SetMenuDefaultItem
LoadStringW
GetKeyboardState
DrawIcon
GetClassLongW
CreateWindowExA
GetWindowThreadProcessId
SetUserObjectInformationW
DdeConnect
LoadCursorW
UnhookWindowsHookEx
BroadcastSystemMessage
RegisterClassExA
SetScrollInfo
SetMessageExtraInfo
GetWindowTextA
SetMenuInfo
ShowOwnedPopups
GetGuiResources
CopyIcon
DrawFrame
LoadCursorA
OemToCharBuffA
FreeDDElParam
GetWindowTextLengthW
GetScrollBarInfo
GetActiveWindow
GetDialogBaseUnits
DestroyWindow
ShowWindow
MessageBoxA
SwapMouseButton
GetSystemMetrics
GetUserObjectInformationW
SwitchToThisWindow
GetClassInfoExA
RegisterClassA
DdeNameService
SetWindowTextA
CallMsgFilter
SetTimer
CloseClipboard
OemToCharW
ReplyMessage
SetScrollRange
DrawEdge
GetWindowContextHelpId
SetDlgItemTextW
GetClassNameW
GetDlgCtrlID
UnregisterHotKey
ShowScrollBar
DefWindowProcA
VkKeyScanA
GetMenuItemID
Sections
.text Size: 276KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ