Static task
static1
Behavioral task
behavioral1
Sample
728cd6e23e20a52e179a48fc1426d5d498ce1822593457f52a4f26bfb89757d0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
728cd6e23e20a52e179a48fc1426d5d498ce1822593457f52a4f26bfb89757d0.exe
Resource
win10v2004-20221111-en
General
-
Target
728cd6e23e20a52e179a48fc1426d5d498ce1822593457f52a4f26bfb89757d0
-
Size
172KB
-
MD5
62dd7bca9c803cb3287f0f9d6764b13a
-
SHA1
3705497a3ce2d1c572766d62c0dd7e037d507b7c
-
SHA256
728cd6e23e20a52e179a48fc1426d5d498ce1822593457f52a4f26bfb89757d0
-
SHA512
fcc85f2e439c415e5bf55b9435512031b22a124693a4452bc9392200d583df7fdeed4889e729c547ae3d4dd0cd12119ec0aed6a13ee601e96b595c9d59f49219
-
SSDEEP
1536:39O5aWVZl7c0SDMPIH7KKEz+HgCpbjDQ0+HxCLz0Dy+5xlFUKgnoJ8j+3iutottm:iLH1c0w3KvCpjkRnFUKzu+3iuuttYfp
Malware Config
Signatures
Files
-
728cd6e23e20a52e179a48fc1426d5d498ce1822593457f52a4f26bfb89757d0.exe windows x86
39e8b2aae8c7008400d08819076e73d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToCacheFileA
kernel32
FreeLibrary
lstrcmpiW
LoadLibraryExW
GetModuleHandleW
GetLastError
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
Sleep
lstrcpyA
ResetEvent
WaitForSingleObject
GetTickCount
GetCurrentThreadId
CreateThread
GetLocalTime
SystemTimeToFileTime
CompareFileTime
FileTimeToSystemTime
DeleteFileA
GlobalAddAtomA
GetModuleFileNameA
GetProcessHeap
lstrcatA
CreateEventA
ExitProcess
GetCommandLineA
GlobalFindAtomA
CloseHandle
RaiseException
LeaveCriticalSection
lstrlenW
GetModuleFileNameW
EnterCriticalSection
CreateFileA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
HeapFree
HeapAlloc
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
WideCharToMultiByte
SetEvent
MultiByteToWideChar
SetEndOfFile
CreateFileW
lstrlenA
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
SetFilePointer
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
LoadLibraryA
GetOEMCP
GetCPInfo
HeapDestroy
HeapReAlloc
HeapSize
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetStartupInfoA
HeapCreate
VirtualFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
RtlUnwind
user32
UnregisterClassA
GetForegroundWindow
SetForegroundWindow
CharNextW
wsprintfA
FindWindowExA
PostMessageW
DispatchMessageW
GetMessageW
PostThreadMessageW
EnumChildWindows
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoTaskMemFree
oleaut32
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
VariantClear
SysAllocString
SysFreeString
SysAllocStringLen
shlwapi
StrStrIA
StrCmpNA
PathRemoveExtensionA
PathFindFileNameA
UrlIsA
StrCmpIW
StrStrIW
Sections
.text Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE