Static task
static1
Behavioral task
behavioral1
Sample
728b56c611e322d93b6da1ce2ae5c7b6fa04d2b5aae0eef9bdce57b5103ea00b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
728b56c611e322d93b6da1ce2ae5c7b6fa04d2b5aae0eef9bdce57b5103ea00b.exe
Resource
win10v2004-20221111-en
General
-
Target
728b56c611e322d93b6da1ce2ae5c7b6fa04d2b5aae0eef9bdce57b5103ea00b
-
Size
376KB
-
MD5
5b4b0f017934aeb1afae14ced8dbe084
-
SHA1
fc0e797a8080d1c949ded08f1c423d4e93f030df
-
SHA256
728b56c611e322d93b6da1ce2ae5c7b6fa04d2b5aae0eef9bdce57b5103ea00b
-
SHA512
82429dc622e0111bf3a9d4424476c9051176bf088ee5c9b58e86b294dd2ba91329f5f2fc102c04a16000a795e57c7c38b13826f767d43dfcbf6d4cc5135a1cdd
-
SSDEEP
6144:ssK78Dpza096cBoG9yeZ02kjkCtReISJW60/DYkxqw6MaEfGGHLHuynJCreMbXfj:sTADpza09+GweiNgCtReISJWpDYd/Mto
Malware Config
Signatures
Files
-
728b56c611e322d93b6da1ce2ae5c7b6fa04d2b5aae0eef9bdce57b5103ea00b.exe windows x86
a1d5ecd07a34e67a98b4a5049460a1e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetVersionExA
GetStartupInfoA
GetModuleFileNameA
GetCurrentProcessId
HeapFree
GetCPInfo
UnhandledExceptionFilter
ExpandEnvironmentStringsW
IsValidCodePage
IsValidLocale
ReadFile
GetTickCount
TlsGetValue
SetFilePointer
GetCurrentProcess
GetTimeZoneInformation
GetACP
GetOEMCP
GetModuleHandleA
WideCharToMultiByte
EnumSystemLocalesA
GetLocaleInfoW
GetCurrentThread
GetEnvironmentStrings
lstrcmpW
HeapDestroy
GetStdHandle
CloseHandle
GetEnvironmentStringsW
RtlUnwind
GetCommandLineA
FreeEnvironmentStringsA
OpenMutexA
VirtualProtect
GetModuleFileNameW
GetDateFormatA
TerminateProcess
SetStdHandle
CompareStringA
ReadConsoleW
GetLocaleInfoA
GetCommandLineW
TlsSetValue
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStringTypeW
GetLastError
SetHandleCount
GetStartupInfoW
GetUserDefaultLCID
LoadLibraryA
GetProcAddress
TlsFree
SetLastError
InitializeCriticalSection
QueryPerformanceCounter
InterlockedExchange
CreateMutexA
WriteFile
FlushFileBuffers
SetLocalTime
TlsAlloc
GetTimeFormatA
EnterCriticalSection
ExitProcess
VirtualFree
HeapAlloc
IsBadWritePtr
LeaveCriticalSection
MultiByteToWideChar
HeapReAlloc
GetSystemInfo
LCMapStringA
HeapCreate
GetStringTypeA
HeapSize
VirtualAlloc
FlushConsoleInputBuffer
LCMapStringW
CompareStringW
VirtualQuery
GetCurrentThreadId
GetFileType
GetSystemTimeAsFileTime
comctl32
ImageList_DragShowNolock
DrawStatusTextW
ImageList_SetImageCount
DestroyPropertySheetPage
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_GetImageRect
ImageList_Duplicate
InitCommonControlsEx
ImageList_Replace
ImageList_Remove
ImageList_Copy
CreatePropertySheetPageA
CreatePropertySheetPageW
ImageList_SetOverlayImage
ImageList_EndDrag
ImageList_Merge
DrawStatusText
ImageList_Destroy
CreateStatusWindowA
user32
CopyRect
SetShellWindow
UnhookWinEvent
CreateDialogParamA
UpdateWindow
ShowWindow
GetClassInfoExA
InSendMessageEx
IsIconic
DdeQueryStringA
GetWindowTextA
DdeDisconnect
SetProcessWindowStation
DefWindowProcW
DrawFrame
IsZoomed
EndPaint
MessageBoxA
EditWndProc
RegisterClassA
DdeSetQualityOfService
DrawTextW
EndMenu
ChildWindowFromPointEx
BringWindowToTop
RegisterClassExA
ChangeClipboardChain
ChangeDisplaySettingsW
DestroyWindow
EnumPropsA
MonitorFromPoint
DrawFrameControl
SetClassLongW
RegisterClipboardFormatW
MessageBoxExA
CreateWindowExW
DispatchMessageA
EnumPropsExW
GetWindow
SetPropW
DeleteMenu
Sections
.text Size: 148KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ