Static task
static1
Behavioral task
behavioral1
Sample
28915073e4534381329f15a9cc6f90ac39efd3ce7f543f2e25dafeab774210ce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28915073e4534381329f15a9cc6f90ac39efd3ce7f543f2e25dafeab774210ce.exe
Resource
win10v2004-20220812-en
General
-
Target
28915073e4534381329f15a9cc6f90ac39efd3ce7f543f2e25dafeab774210ce
-
Size
740KB
-
MD5
838001d87c2d2fc13cde1cb3dcf9620f
-
SHA1
0bf3b257e9fc92142b83978f9c5f813c55bee54c
-
SHA256
28915073e4534381329f15a9cc6f90ac39efd3ce7f543f2e25dafeab774210ce
-
SHA512
2c423b147e1100d44a4d764c6cf9423e50b7a618878c6f598e610e4789f7b933fbaacf684625bce8d482b2b6f301e4b4fa71806883845d5565b2d6e1dd1cce12
-
SSDEEP
12288:xkiSmssczUzbYxRMO0p5oZiNpYhkFmpcpmR4dFp+ST/hhv+0:xkiOswWs0niZirYwmMmyFp+0hv+0
Malware Config
Signatures
Files
-
28915073e4534381329f15a9cc6f90ac39efd3ce7f543f2e25dafeab774210ce.exe windows x86
79d6b4cd2872e93fd0666c9c14fd0769
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mixerGetControlDetailsA
mixerGetLineInfoA
waveOutWrite
waveOutGetDevCapsA
mixerSetControlDetails
waveOutReset
waveOutUnprepareHeader
mixerOpen
waveOutPrepareHeader
mixerGetLineControlsA
mmioRead
mixerGetNumDevs
waveOutGetNumDevs
mciGetErrorStringA
waveOutRestart
mmioDescend
waveOutPause
mciSendCommandA
waveOutClose
timeGetTime
PlaySoundA
mmioAscend
mixerGetDevCapsA
mixerClose
comctl32
ImageList_BeginDrag
ImageList_ReplaceIcon
ord17
InitCommonControlsEx
ImageList_Destroy
kernel32
ExitProcess
GetTimeZoneInformation
CreateMutexW
RaiseException
LCMapStringW
GetCPInfo
HeapSize
SetStdHandle
TerminateProcess
RtlUnwind
GetStringTypeA
TlsAlloc
GetACP
SetLastError
GetConsoleCP
InterlockedExchange
GetEnvironmentStringsW
GetVersionExA
MultiByteToWideChar
WriteConsoleW
LCMapStringA
IsDebuggerPresent
QueryPerformanceCounter
LoadLibraryW
GetTimeFormatA
FreeEnvironmentStringsA
GetProcessHeap
GetSystemTimeAsFileTime
GetCommandLineA
LeaveCriticalSection
GetCurrentThreadId
HeapCreate
TlsSetValue
CloseHandle
GetModuleHandleW
FreeEnvironmentStringsW
DeleteCriticalSection
GetStartupInfoA
InitializeCriticalSection
InterlockedIncrement
Sleep
GetCurrentProcess
ReadFile
GetDateFormatA
GetModuleFileNameW
UnhandledExceptionFilter
GetEnvironmentStrings
SetEnvironmentVariableA
GetFileType
GetConsoleOutputCP
GetStartupInfoW
FlushFileBuffers
GetStdHandle
SetUnhandledExceptionFilter
HeapFree
SetHandleCount
GetLastError
EnterCriticalSection
HeapReAlloc
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
CreateFileA
SetFilePointer
WriteFile
WideCharToMultiByte
VirtualFree
CompareStringA
VirtualQuery
InterlockedDecrement
WriteConsoleA
CompareStringW
GetTickCount
HeapAlloc
GetStringTypeW
HeapDestroy
GetCommandLineW
GetOEMCP
GetProcAddress
GetConsoleMode
TlsFree
VirtualAlloc
IsValidCodePage
GetLocaleInfoA
TlsGetValue
user32
DestroyIcon
GetWindowTextLengthW
ShowWindow
LoadStringW
RegisterClassExW
KillTimer
FindWindowW
DestroyWindow
UnhookWindowsHookEx
FillRect
GetWindowTextW
MessageBoxW
IsRectEmpty
LoadCursorW
TrackPopupMenu
CreateWindowExW
ScreenToClient
DefWindowProcW
RegisterClassW
GetKeyState
CreateAcceleratorTableW
DrawStateW
LoadBitmapW
EnableMenuItem
LoadIconW
AdjustWindowRectEx
InvalidateRgn
InflateRect
GetParent
gdi32
CreateDCW
SelectObject
DeleteDC
GetDeviceCaps
DeleteObject
GetObjectW
shell32
SHBrowseForFolderA
ShellExecuteExA
SHGetFileInfoA
DragFinish
ord155
oleaut32
LoadTypeLi
Sections
.text Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 464KB - Virtual size: 463KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ