Static task
static1
Behavioral task
behavioral1
Sample
528893647d966c7318742e5788b59d4a5ec12deb08703dd6c9e2d9b7fff378fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
528893647d966c7318742e5788b59d4a5ec12deb08703dd6c9e2d9b7fff378fb.exe
Resource
win10v2004-20220901-en
General
-
Target
528893647d966c7318742e5788b59d4a5ec12deb08703dd6c9e2d9b7fff378fb
-
Size
108KB
-
MD5
0fa6f98d8cdd987f31ace5e5d4084f90
-
SHA1
ac0ee8ae29004654c67777e0613237d554009692
-
SHA256
528893647d966c7318742e5788b59d4a5ec12deb08703dd6c9e2d9b7fff378fb
-
SHA512
0e509d20feb23de1a3edd48bf1a4dc9658af54315e4a8162afa88eeafbad3d6924277e29709fba1bbcba1eecc426d2822d0b59576428649544b05b10a50c31df
-
SSDEEP
1536:8YkS4drey8iNqkS7xoRC53xsha/5liEWzEWTIH7etUyglRqhoNMNEFEtbdzJykyk:8YkS4peONqkS7Jih4N+UXWEEy
Malware Config
Signatures
Files
-
528893647d966c7318742e5788b59d4a5ec12deb08703dd6c9e2d9b7fff378fb.exe windows x86
e5a17c134ac8475d2172ca50e9bf40df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsSetValue
SetLastError
HeapAlloc
FindResourceW
ResetEvent
SizeofResource
SetStdHandle
DeleteFileW
FindClose
HeapDestroy
DeleteCriticalSection
FreeEnvironmentStringsA
HeapReAlloc
InitializeCriticalSection
GetModuleHandleW
FlushFileBuffers
GetVersionExA
CreateThread
RaiseException
SetEvent
GetTickCount
CreateMutexW
GetProcessHeap
FindNextFileA
TryEnterCriticalSection
GetModuleFileNameA
HeapFree
GetOEMCP
LCMapStringW
CompareStringA
SetHandleCount
CreateFileA
GetModuleFileNameW
LocalAlloc
GetStdHandle
CreateEventA
HeapSize
RtlUnwind
IsValidCodePage
GetCPInfo
GetLocaleInfoW
LoadLibraryW
SetConsoleCtrlHandler
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
HeapCreate
GetLastError
TlsFree
TlsGetValue
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
FreeEnvironmentStringsW
GetProcAddress
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapSetInformation
GetCommandLineA
Sleep
WaitForMultipleObjects
GetEnvironmentStringsW
InterlockedExchange
GetACP
TerminateProcess
LoadLibraryA
GetCommandLineW
MultiByteToWideChar
TlsAlloc
CloseHandle
GetVersionExW
GetStringTypeW
InterlockedExchangeAdd
ExitProcess
GetFileType
FreeLibrary
CreateEventW
GlobalAlloc
ReadFile
lstrlenW
VirtualAlloc
GetStartupInfoW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetStartupInfoA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
CompareFileTime
WriteFile
QueryPerformanceCounter
user32
IntersectRect
DrawIcon
DefWindowProcA
GetMenuStringA
SendMessageW
GetWindowInfo
GetWindowDC
ReleaseDC
BeginPaint
GetMenuDefaultItem
KillTimer
ShowWindow
LoadCursorA
GetSystemMenu
PostMessageA
DrawFocusRect
GetClientRect
RegisterClassW
SetMenuItemInfoW
PostQuitMessage
SetMenuItemBitmaps
SetClipboardData
OffsetRect
PostMessageW
ChildWindowFromPoint
GetParent
GetDlgItem
DrawTextA
ReleaseCapture
IsChild
CheckMenuItem
DrawIconEx
CopyRect
SetParent
MessageBeep
TrackPopupMenuEx
SetWindowPos
GetMenuItemRect
SendMessageA
SetWindowTextW
EmptyClipboard
DrawTextW
SetWindowLongA
ExitWindowsEx
DialogBoxParamA
LoadStringA
UpdateWindow
GetSystemMetrics
GetSubMenu
IsWindowVisible
SetFocus
LoadIconW
GetDlgItemTextW
LoadStringW
PtInRect
EndPaint
CloseClipboard
GetWindowLongW
MessageBoxA
EndDialog
SetCursorPos
SetCursor
GetMessageW
GetCapture
EnableMenuItem
SetActiveWindow
SetRect
DestroyMenu
CreateWindowExA
DispatchMessageW
CallNextHookEx
GetWindowTextA
AdjustWindowRectEx
TranslateMessage
InflateRect
gdi32
CreateFontA
SetMapMode
CreatePolygonRgn
EndPage
GetClipBox
GetPaletteEntries
GetDeviceCaps
ExtCreatePen
GetDIBColorTable
ScaleViewportExtEx
RestoreDC
GetMapMode
RoundRect
GetWindowOrgEx
CombineRgn
PatBlt
SelectObject
SetPixel
CreateDIBSection
CreateHalftonePalette
GetTextMetricsW
GetPixel
GetDCOrgEx
SetPixelV
GetBkColor
IntersectClipRect
PolyPolyline
SetDIBColorTable
RectVisible
DeleteObject
ExtTextOutA
CreatePalette
ole32
OleQueryCreateFromData
msi
ord50
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ