Static task
static1
Behavioral task
behavioral1
Sample
28dc29d10090f7560c97d1fbbde824ba0e689871114c27b9cbe7052d53cd465c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
28dc29d10090f7560c97d1fbbde824ba0e689871114c27b9cbe7052d53cd465c.exe
Resource
win10v2004-20220812-en
General
-
Target
28dc29d10090f7560c97d1fbbde824ba0e689871114c27b9cbe7052d53cd465c
-
Size
172KB
-
MD5
e5abe1aa8cae729871472e738dbdb53e
-
SHA1
472bc3c2ef729e1c1b2fba420c75852009f927d2
-
SHA256
28dc29d10090f7560c97d1fbbde824ba0e689871114c27b9cbe7052d53cd465c
-
SHA512
8a2529e4b11e542368bfa682d2cd3e14fae7d9c7dcbd1feeda19cc6de28539d6e06a602ec5618299d3696524b9eaa524ab2dddc20061916dfe208e5612843766
-
SSDEEP
3072:O3Pyvlp8D43VuC3VPIIkYQKxnRMbrq4QstVjFb:O/yN3VuClPIkxRMvHRj9
Malware Config
Signatures
Files
-
28dc29d10090f7560c97d1fbbde824ba0e689871114c27b9cbe7052d53cd465c.exe windows x86
ce7623376e4a826e3949965f16e27090
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
CryptCreateHash
CryptDestroyHash
CryptHashData
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
kernel32
WritePrivateProfileStringA
SetFilePointer
FlushFileBuffers
GetCurrentProcess
GetCPInfo
GetOEMCP
SetErrorMode
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
GetLastError
CompareStringA
GetVersion
ExitProcess
CreateFileA
GetFileSize
SetWaitableTimer
WaitForSingleObject
WaitForSingleObjectEx
WriteFile
ReadFile
lstrcatA
SetHandleCount
GetShortPathNameA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CreateMutexA
CloseHandle
GetTempPathA
DeleteFileA
CreateThread
lstrcpyA
SetLastError
GlobalFlags
GlobalFindAtomA
lstrcmpW
GetVersionExA
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetThreadLocale
GlobalGetAtomNameA
GlobalAddAtomA
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
FreeLibrary
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
FindResourceA
LoadResource
LockResource
SizeofResource
user32
DrawTextA
TabbedTextOutA
ClientToScreen
ShowWindow
SetWindowTextA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowRect
GetWindow
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowTextA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DestroyMenu
UnregisterClassA
GrayStringA
DrawTextExA
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
SetCursor
PostMessageA
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
SendMessageA
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowPlacement
gdi32
DeleteObject
SaveDC
RestoreDC
SetMapMode
SetBkColor
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
SetTextColor
GetClipBox
CreateBitmap
PtVisible
GetDeviceCaps
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
shlwapi
PathFindFileNameA
PathAppendA
PathRemoveFileSpecA
SHSetValueA
PathIsDirectoryA
PathFindExtensionA
SHGetValueA
PathFileExistsA
oleaut32
VariantInit
VariantClear
VariantChangeType
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ