Static task
static1
Behavioral task
behavioral1
Sample
528bd4d22ae5211fd0ba0eaae317cc3f1735b298e56fc7b9ea9bdb0269e99213.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
528bd4d22ae5211fd0ba0eaae317cc3f1735b298e56fc7b9ea9bdb0269e99213.exe
Resource
win10v2004-20220812-en
General
-
Target
528bd4d22ae5211fd0ba0eaae317cc3f1735b298e56fc7b9ea9bdb0269e99213
-
Size
924KB
-
MD5
4556d80d1da873411131da96ee28deef
-
SHA1
d85a599db958c7955ecb3d1ba3aca03c94ea2dd8
-
SHA256
528bd4d22ae5211fd0ba0eaae317cc3f1735b298e56fc7b9ea9bdb0269e99213
-
SHA512
06fe5400caa7c949db3250b5386c64856bd0e412955024a2ac1a259142c8fe220f88f35efb0e3e41ea8f23049b8e14516c74b5b4be463495b43b36b70dd61e5d
-
SSDEEP
24576:Ioj5XaXc1oj5XaXcnoj5XaXc4oj5XaXc8oj5XaXc:5KX3KXJKXgKX4KX
Malware Config
Signatures
Files
-
528bd4d22ae5211fd0ba0eaae317cc3f1735b298e56fc7b9ea9bdb0269e99213.exe windows x86
1fdf30bd14a5b2bd2f737d2e52c220d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesA
Sleep
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
lstrcatA
EnumResourceTypesA
GetModuleHandleA
ExitProcess
WinExec
GetCommandLineA
CloseHandle
FreeResource
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
LCMapStringA
LoadLibraryA
GetProcAddress
HeapReAlloc
GetStartupInfoA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
LCMapStringW
user32
wsprintfA
MessageBoxA
shell32
ShellExecuteA
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 888KB - Virtual size: 885KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ