Static task
static1
Behavioral task
behavioral1
Sample
28e8850b7ac027c2ebc32207c4390718f030baea748c1a546c643b5c9c6115b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28e8850b7ac027c2ebc32207c4390718f030baea748c1a546c643b5c9c6115b2.exe
Resource
win10v2004-20220812-en
General
-
Target
28e8850b7ac027c2ebc32207c4390718f030baea748c1a546c643b5c9c6115b2
-
Size
277KB
-
MD5
81ae241996c172914aa5037615fb11a0
-
SHA1
c92d8c12b7c83d16d97ee95c98aca5d9ca493b92
-
SHA256
28e8850b7ac027c2ebc32207c4390718f030baea748c1a546c643b5c9c6115b2
-
SHA512
183be11676d08cb6d6d9a601b9cfaa45268d4695ce388ac213423fabbe8c6079e822bede0b19a66aa91b8768b9f01d22a97ce0f10d24683479ad0dd5add96527
-
SSDEEP
6144:RSpRNamAVqOGJJUNeylxxeTam1Memr7v6gCNltsBIYC92DCl:grwmAoJS0ylxxeTRM6nQW92ml
Malware Config
Signatures
Files
-
28e8850b7ac027c2ebc32207c4390718f030baea748c1a546c643b5c9c6115b2.exe windows x86
f65d9c21b5cab21f49a30a0b812e1a4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
GetCurrentProcessId
SetLastError
CloseHandle
GetProcessHeap
GetSystemTimeAsFileTime
GetUserDefaultLCID
FindResourceW
CreateFileA
HeapFree
GlobalFindAtomA
lstrlenW
SetUnhandledExceptionFilter
SystemTimeToFileTime
MultiByteToWideChar
lstrcpyW
HeapAlloc
GetCurrentProcess
QueryPerformanceCounter
lstrcmpA
WideCharToMultiByte
GetTickCount
LoadLibraryW
psapi
GetProcessImageFileNameA
GetPerformanceInfo
EmptyWorkingSet
EnumProcessModules
EnumPageFilesA
EnumPageFilesW
olecli32
LeRelease
LeGetUpdateOptions
LeQueryOutOfDate
LeQueryOpen
LeSetBounds
LeSetData
LeObjectConvert
LeReconnect
LeObjectLong
LeSaveToStream
LeQueryBounds
Sections
.text Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ