Static task
static1
Behavioral task
behavioral1
Sample
28789b739c991531581448876657a3ddb13b1fb9d664af1a670dbfefbd803adc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28789b739c991531581448876657a3ddb13b1fb9d664af1a670dbfefbd803adc.exe
Resource
win10v2004-20220812-en
General
-
Target
28789b739c991531581448876657a3ddb13b1fb9d664af1a670dbfefbd803adc
-
Size
128KB
-
MD5
4b9920a74e70912810f67baafde6fc50
-
SHA1
7e07154bbdadc32b2f4f34fee9fee6722c2747a5
-
SHA256
28789b739c991531581448876657a3ddb13b1fb9d664af1a670dbfefbd803adc
-
SHA512
e53edb16eb00c6cbc8fb4f695e4c8a566135d0425fb63301e08da494b59b22e3a9c77c9a0ddbb051aef3bce4f3d593ee8f2386c5cfdddb8a421270d9b0210f24
-
SSDEEP
3072:on4+eJncXe7CaUH9ecsdk37yvB4gSNBrZOQLG6yFc+i5:e/dVsd+yvS0QS6yG
Malware Config
Signatures
Files
-
28789b739c991531581448876657a3ddb13b1fb9d664af1a670dbfefbd803adc.exe windows x86
aca2aad2e693d7dd294bbdbbf290818f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateDirectoryW
GetExitCodeThread
GetCurrentProcess
GetFileAttributesA
MapViewOfFile
GetLocaleInfoW
GetTickCount
IsValidCodePage
FindClose
HeapFree
RemoveDirectoryW
LocalLock
GetModuleHandleA
SetPriorityClass
GetStringTypeA
SuspendThread
FindResourceW
SetLastError
TlsGetValue
VirtualProtect
GetFileAttributesA
user32
IsWindow
LoadImageW
GetWindowLongW
LoadCursorA
SetCursor
PeekMessageW
SetFocus
GetWindowTextW
wsprintfW
DispatchMessageA
IsDialogMessageA
LoadStringW
PostMessageW
msctf
DllUnregisterServer
TF_InitSystem
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE