Static task
static1
Behavioral task
behavioral1
Sample
a28e9b2dd4d332a30f190346d56107da77917da8487f96473a9c212c6f29134c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a28e9b2dd4d332a30f190346d56107da77917da8487f96473a9c212c6f29134c.exe
Resource
win10v2004-20220812-en
General
-
Target
a28e9b2dd4d332a30f190346d56107da77917da8487f96473a9c212c6f29134c
-
Size
281KB
-
MD5
0d82d6db7281e836e76ac8d35b7e6595
-
SHA1
5f71e02e988a5a37ceab03657237ee3fffe093da
-
SHA256
a28e9b2dd4d332a30f190346d56107da77917da8487f96473a9c212c6f29134c
-
SHA512
244e794fc2265d004026f2f0bbf27d94beee258da66358460b9d9c97bbacbe07a11062d477962d140091421805a554732d84688cdd96e380da14d95ffbff83f3
-
SSDEEP
6144:YedSdAMhJ5hSWDDTWZo3TeS32Kl3tdtsayYIY1:Xd6J5hLDTWZSTNGmHtsxg
Malware Config
Signatures
Files
-
a28e9b2dd4d332a30f190346d56107da77917da8487f96473a9c212c6f29134c.exe windows x86
0158213a342c4bd4394dd6c6f671fe70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetLocalTime
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrlenW
CreateFileW
CloseHandle
InitializeCriticalSection
LCMapStringW
InterlockedDecrement
LocalFree
GetVersionExW
GetTickCount
ExpandEnvironmentStringsA
CreateEventA
WaitForMultipleObjects
GetLastError
SetLastError
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
LocalAlloc
GetCommandLineA
GlobalFree
VirtualProtect
GlobalAlloc
InterlockedIncrement
GetModuleHandleA
GetStartupInfoA
advapi32
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW
RegQueryValueExW
msvcr71
free
memcpy
_snprintf
_amsg_exit
_initterm
memset
_vsnprintf
_snwprintf
wcsncpy
wcslen
_wcsicmp
fclose
time
wcscpy
fopen
fputs
vsprintf
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
__getmainargs
__setusermatherr
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_except_handler3
_adjust_fdiv
Sections
.text Size: 273KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ