Static task
static1
Behavioral task
behavioral1
Sample
b28bf6aaf3173c0c82b7b509ac2cd89e46c7f491d7f6e3076ad4b9710f647550.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b28bf6aaf3173c0c82b7b509ac2cd89e46c7f491d7f6e3076ad4b9710f647550.exe
Resource
win10v2004-20220812-en
General
-
Target
b28bf6aaf3173c0c82b7b509ac2cd89e46c7f491d7f6e3076ad4b9710f647550
-
Size
384KB
-
MD5
a409bcd20d2ad6fe91824b311db20959
-
SHA1
08477d0f9e98c247f3c018161420fa55269ac79d
-
SHA256
b28bf6aaf3173c0c82b7b509ac2cd89e46c7f491d7f6e3076ad4b9710f647550
-
SHA512
f1986521ee1b67f12c48fcb714cf15b2387770af1a5b8fe74af305daf0b422a6617d8b440e8dfe7d7850008f5d8be36132ab60a59a19a2bff218b9128338e630
-
SSDEEP
6144:ArIsuI7JfydCAvoB6b/WjNXSUwPSMR/xAZTf/aGYd1nUD8495s6kq:4IsuksJvoj51M3oK1N4F
Malware Config
Signatures
Files
-
b28bf6aaf3173c0c82b7b509ac2cd89e46c7f491d7f6e3076ad4b9710f647550.exe windows x86
f1ad5e68a0019f5e3bfcaff6f0cf1e9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dicryptosys
CNV_BytesFromHexStr
CNV_HexStrFromBytes
AES128_HexMode
PAD_UnpadHex
PAD_HexBlock
MD5_FileHexHash
kernel32
WritePrivateProfileStringA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
GetFileAttributesA
GetFileTime
GetCurrentDirectoryA
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetSystemTimeAsFileTime
ExitProcess
GetCommandLineA
TlsFree
GetStartupInfoA
HeapSize
SetStdHandle
GetFileType
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetConsoleCP
GetConsoleMode
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTimeZoneInformation
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetCurrentProcessId
WaitForSingleObject
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
CreateFileA
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
FreeResource
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
MulDiv
SetLastError
OpenProcess
CloseHandle
LocalAlloc
GlobalFree
GetSystemTime
FormatMessageA
LocalFree
FindFirstFileA
FindClose
Sleep
CreateProcessA
GetTickCount
GetTempPathA
CopyFileA
FindResourceA
LoadResource
LockResource
SizeofResource
LoadLibraryA
FreeLibrary
CompareStringW
CompareStringA
lstrlenA
GlobalAlloc
GlobalLock
GlobalUnlock
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
GetProcessHeap
user32
LoadCursorA
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
PostQuitMessage
CharNextA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetSysColorBrush
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowContextHelpId
MapDialogRect
ReleaseCapture
SetFocus
SetWindowPos
GetDesktopWindow
GetFocus
SetCapture
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
GetWindowRect
EqualRect
IntersectRect
OffsetRect
SetRect
IsRectEmpty
CopyRect
IsWindowEnabled
IsWindowVisible
GetWindowLongA
IsWindow
CopyAcceleratorTableA
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
CreateDialogIndirectParamA
EndDialog
MessageBeep
GetNextDlgTabItem
GetNextDlgGroupItem
GetWindowThreadProcessId
SetCursor
MessageBoxA
GetSystemMetrics
CloseWindow
LoadIconA
SetActiveWindow
KillTimer
SetTimer
GetClientRect
IsIconic
PostMessageA
DrawIcon
EnableWindow
RegisterWindowMessageA
GetParent
GetKeyState
DestroyMenu
LoadMenuA
GetSubMenu
SetMenuItemInfoA
DeleteMenu
TrackPopupMenu
SendMessageA
CharUpperA
gdi32
SetViewportExtEx
ScaleViewportExtEx
PtVisible
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
OffsetViewportOrgEx
GetMapMode
GetWindowExtEx
GetViewportExtEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
GetClipBox
GetRgnBox
CreateRectRgnIndirect
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetTextColor
GetBkColor
GetStockObject
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
RectVisible
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
shell32
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
shlwapi
StrToIntA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathFileExistsA
oledlg
ord8
ole32
CoRegisterMessageFilter
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
oleaut32
VariantCopy
VariantInit
SysAllocStringByteLen
OleCreateFontIndirect
VariantChangeType
SafeArrayDestroy
VariantClear
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysFreeString
SysAllocStringLen
SysAllocString
ws2_32
closesocket
recv
connect
WSAStartup
recvfrom
sendto
send
getsockname
select
accept
WSACleanup
inet_ntoa
ntohs
WSASetLastError
WSAGetLastError
iphlpapi
GetAdaptersInfo
winmm
timeGetTime
wininet
HttpOpenRequestA
InternetConnectA
HttpSendRequestExA
HttpEndRequestA
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetGetLastResponseInfoA
HttpAddRequestHeadersA
InternetCloseHandle
InternetQueryDataAvailable
InternetReadFile
InternetOpenA
HttpQueryInfoA
InternetOpenUrlA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
psapi
GetModuleBaseNameA
EnumProcessModules
EnumProcesses
GetModuleFileNameExA
Sections
.text Size: 268KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ