Static task
static1
Behavioral task
behavioral1
Sample
cf28b8c97e79f3c52ed6a5692153eead69b36dc0a3e7e5f58a3687beb12205fa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cf28b8c97e79f3c52ed6a5692153eead69b36dc0a3e7e5f58a3687beb12205fa.exe
Resource
win10v2004-20220812-en
General
-
Target
cf28b8c97e79f3c52ed6a5692153eead69b36dc0a3e7e5f58a3687beb12205fa
-
Size
354KB
-
MD5
0e8b1f67995a1b7684e171de51fb80ac
-
SHA1
12b0e2f8567727ff7e12d9a3982d0070218f7b10
-
SHA256
cf28b8c97e79f3c52ed6a5692153eead69b36dc0a3e7e5f58a3687beb12205fa
-
SHA512
77bf83c467f248f9aeddece2059a8721fd695a328e0c36fc817609a51c3e1a80b8c6929e555bf2721eaf13832aa099fc7403c115b2daea8da9083b46e4a36162
-
SSDEEP
6144:M9oGtkZLWInaKm3kNRbmk/lN2I3O8sHsD47hNAWtzr2cXDKsbRE1LLnFZXW02:pGtkVSkNL/P2I3O8sHsD47LzacXDKsVM
Malware Config
Signatures
Files
-
cf28b8c97e79f3c52ed6a5692153eead69b36dc0a3e7e5f58a3687beb12205fa.exe windows x86
ac45ea9f4c340038136c51cf022d70cd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
WideCharToMultiByte
GetVersionExW
lstrcpynA
lstrlenA
lstrcpynW
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpW
InterlockedDecrement
MulDiv
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SetLastError
GetModuleHandleW
FreeLibrary
LoadLibraryExW
lstrcmpiW
CreateFileA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetModuleHandleA
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
CreateEventW
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
InitializeCriticalSectionAndSpinCount
GetModuleFileNameA
GetStdHandle
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
HeapCreate
GetStringTypeW
LCMapStringA
LCMapStringW
CompareStringW
GetCPInfo
GetStartupInfoW
VirtualQuery
GetSystemInfo
VirtualProtect
GetSystemTimeAsFileTime
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
Sleep
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetTickCount
GetLocalTime
GetTimeZoneInformation
WriteFile
GetOverlappedResult
GetACP
GetThreadLocale
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
lstrlenW
RaiseException
CopyFileW
GetModuleFileNameW
CreateMutexW
GetLastError
CreateFileW
SetFilePointer
ReadFile
CloseHandle
GetCurrentThreadId
MultiByteToWideChar
FindFirstFileW
GetWindowsDirectoryW
SetHandleCount
user32
TranslateAcceleratorW
LoadMenuW
TranslateMDISysAccel
BringWindowToTop
LoadStringW
IsWindowVisible
ShowWindow
SendMessageW
UnregisterClassA
LoadAcceleratorsW
DefWindowProcW
IsWindow
ScreenToClient
ReleaseCapture
SetCapture
InvalidateRgn
GetDlgItem
CreateWindowExW
SetWindowPos
IsChild
GetFocus
SetFocus
DefMDIChildProcW
AdjustWindowRectEx
DestroyMenu
PostQuitMessage
LoadStringA
GetWindowRect
InvalidateRect
GetWindowLongW
GetClientRect
SetWindowLongW
RedrawWindow
ClientToScreen
MoveWindow
CreateAcceleratorTableW
MessageBeep
PtInRect
AppendMenuW
wsprintfW
GetDC
ReleaseDC
GetDesktopWindow
CharNextW
GetClassNameW
BeginPaint
FillRect
EndPaint
GetWindow
GetSysColor
DestroyAcceleratorTable
SetMenuDefaultItem
GetMenuItemInfoW
SetMenuItemInfoW
GetParent
GetMenuItemCount
GetMenuStringW
GetSubMenu
DrawMenuBar
wvsprintfW
LoadImageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
KillTimer
SetTimer
MapWindowPoints
PostMessageW
DestroyWindow
GetMessageW
TranslateMessage
DispatchMessageW
MonitorFromPoint
GetMonitorInfoW
RemoveMenu
TrackPopupMenuEx
CreatePopupMenu
DefFrameProcW
CallWindowProcW
PeekMessageW
gdi32
CreateSolidBrush
DeleteObject
GetObjectW
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
BitBlt
GetDeviceCaps
SelectObject
GetStockObject
advapi32
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
ShellExecuteW
ole32
CoGetClassObject
CoTaskMemRealloc
CoTaskMemFree
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
CLSIDFromString
CLSIDFromProgID
CoInitialize
OleInitialize
CreateStreamOnHGlobal
OleUninitialize
CoCreateInstance
OleRun
CoUninitialize
oleaut32
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VariantInit
SysStringByteLen
SysAllocStringByteLen
GetErrorInfo
VariantClear
SysAllocString
SysStringLen
SysAllocStringLen
SysFreeString
ws2_32
gethostname
WSACleanup
WSAStartup
getaddrinfo
WSASetLastError
freeaddrinfo
WSASocketW
WSACreateEvent
WSAEventSelect
WSAConnect
WSAGetLastError
WSAEnumNetworkEvents
WSACloseEvent
shutdown
closesocket
comctl32
InitCommonControlsEx
CreateStatusWindowW
urlmon
URLDownloadToFileW
netapi32
Netbios
dnsapi
DnsFree
DnsQuery_W
Sections
.text Size: 281KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ