Static task
static1
Behavioral task
behavioral1
Sample
628f591db79b5153f5a13ac73c1d35fde5c145434d8e70c1acdfa41f5bec83eb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
628f591db79b5153f5a13ac73c1d35fde5c145434d8e70c1acdfa41f5bec83eb.exe
Resource
win10v2004-20220812-en
General
-
Target
628f591db79b5153f5a13ac73c1d35fde5c145434d8e70c1acdfa41f5bec83eb
-
Size
1.0MB
-
MD5
d16028e848957a55a09bead2b5db64f5
-
SHA1
870092c3d0fcf47db60159263b43c21d4c71d496
-
SHA256
628f591db79b5153f5a13ac73c1d35fde5c145434d8e70c1acdfa41f5bec83eb
-
SHA512
e7128a5a8179cb26d7e26e2873c72671f196a9ec5754bb61032e759e73c4f62e2535df61c270cbb70f1b13eccf784ef59ed097eea1c2043f0bb6e1a59bf578d6
-
SSDEEP
24576:OK0f8ftLUEM1EUCw3brCcI3B9AwWMQ8kVjM5zvmZK:Y8dUL1EURUxVWMQ8kjM5cK
Malware Config
Signatures
Files
-
628f591db79b5153f5a13ac73c1d35fde5c145434d8e70c1acdfa41f5bec83eb.exe windows x86
e29a0575c67ca28b994d73a77b3a879c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
TerminateThread
WaitForSingleObject
ResumeThread
SuspendThread
CreateThread
lstrcpyA
OutputDebugStringA
lstrcatA
DeleteFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetFileSize
CreateFileA
GetModuleFileNameA
GetFileAttributesA
GetTempPathA
RemoveDirectoryA
FindClose
FindNextFileA
SetFileAttributesA
FindFirstFileA
lstrlenA
WriteFile
ReadFile
SetFilePointer
GetExitCodeProcess
GetVersion
GetStartupInfoA
GetACP
CreateDirectoryA
lstrcpynA
SetLastError
GetDiskFreeSpaceA
GetProcAddress
GetModuleHandleA
GetVersionExA
LoadLibraryA
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetStdHandle
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
CreateMutexA
ReleaseMutex
GetLastError
CreateProcessA
CloseHandle
RtlUnwind
HeapAlloc
HeapFree
SetEndOfFile
GetFileType
GetCommandLineA
ExitProcess
GetCPInfo
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
user32
SendMessageA
LoadStringA
SetWindowTextA
MessageBoxA
ShowWindow
IsWindowVisible
KillTimer
PostMessageA
GetSystemMenu
GetMenuItemCount
GetMenuItemID
EnableMenuItem
EnableWindow
EndDialog
SetTimer
DialogBoxParamA
GetDlgItem
gdi32
DeleteObject
CreateFontA
comctl32
ord17
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ