Static task
static1
Behavioral task
behavioral1
Sample
28f22f3ff642b5d2f5f4ba8499d21491.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28f22f3ff642b5d2f5f4ba8499d21491.exe
Resource
win10v2004-20231222-en
General
-
Target
28f22f3ff642b5d2f5f4ba8499d21491
-
Size
386KB
-
MD5
28f22f3ff642b5d2f5f4ba8499d21491
-
SHA1
8c0041148f5e5aaefc58fb24b574af40437fccc9
-
SHA256
eb20fec604e1f8754168895156f03d66fef3608d0c61ec30830ab6b27f78d536
-
SHA512
94a305715012d9bfd16d6fa4e20f202ad6c41b418b841dd9a4c8c75656695ab1ae10eff4d823d7bdb0d1f12ec3b55222d12be103df9ce7e6dabca170f76c1401
-
SSDEEP
6144:1K/f8OKxzD6G+22RImInXG0C6OEePxv3sd68KOrE6uluUpZJts:1gmxzmG+fRI146OEixvsd6bO2s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28f22f3ff642b5d2f5f4ba8499d21491
Files
-
28f22f3ff642b5d2f5f4ba8499d21491.exe windows:4 windows x86 arch:x86
92e1d632751d16436bb016f5fb262894
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
HeapAlloc
HeapFree
VirtualAlloc
Thread32Next
GetFileAttributesExW
SetSystemTime
GlobalAlloc
GetSystemTimeAdjustment
GetSystemDefaultLangID
GetVersion
GetEnvironmentStrings
SetFileAttributesA
CreateEventW
CreateConsoleScreenBuffer
DeleteFileW
SetLocaleInfoW
FindFirstChangeNotificationA
MultiByteToWideChar
GlobalDeleteAtom
Heap32ListNext
HeapWalk
ReadConsoleOutputCharacterW
GetTimeFormatW
HeapCreate
UnhandledExceptionFilter
Heap32First
LoadLibraryExA
FlushViewOfFile
WaitForMultipleObjectsEx
SetConsoleActiveScreenBuffer
GetShortPathNameW
EnumSystemLocalesW
RemoveDirectoryW
GetTempFileNameW
GlobalHandle
GlobalFindAtomW
GetPrivateProfileStructA
LockFileEx
CreateFileA
GetThreadContext
WriteProcessMemory
RtlMoveMemory
GetTimeZoneInformation
GetNumberOfConsoleMouseButtons
WinExec
MapViewOfFileEx
GetDiskFreeSpaceExW
OpenEventW
EnterCriticalSection
LocalLock
lstrcat
OpenFile
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
WriteFileEx
SetEvent
EnumResourceNamesA
SetConsoleCursorPosition
GetConsoleOutputCP
FindResourceExA
FlushFileBuffers
CreateEventA
CreateMutexW
GetCurrentDirectoryA
GetEnvironmentStringsA
CreateDirectoryA
GetProfileSectionW
SetFilePointer
GetVolumeInformationW
WaitForSingleObject
GetProfileStringW
LockResource
CreateThread
FileTimeToLocalFileTime
GetFileInformationByHandle
GetFileSize
SystemTimeToFileTime
CreateSemaphoreA
WriteConsoleInputW
EraseTape
GetConsoleTitleA
GetNamedPipeHandleStateW
GetLogicalDriveStringsW
PeekConsoleInputA
GetExitCodeProcess
lstrlen
DeleteFiber
GlobalMemoryStatus
FreeConsole
LoadModule
GetDateFormatW
MapViewOfFile
EnumResourceTypesA
GetPriorityClass
CompareStringA
GetConsoleCP
Heap32ListFirst
lstrcmpA
InitializeCriticalSection
VirtualUnlock
ExitThread
SetConsoleScreenBufferSize
DebugBreak
SetHandleCount
UnlockFileEx
GlobalSize
GetLogicalDriveStringsA
SetVolumeLabelA
GetStartupInfoA
ExpandEnvironmentStringsW
EnumDateFormatsA
GetWindowsDirectoryW
FoldStringW
WritePrivateProfileSectionA
LoadLibraryW
GlobalLock
OpenSemaphoreA
GetProfileStringA
WaitForDebugEvent
FreeResource
GetNamedPipeHandleStateA
DisconnectNamedPipe
SetConsoleTitleA
AddAtomA
LocalShrink
GetDiskFreeSpaceExA
GetLongPathNameW
FindNextFileA
FillConsoleOutputAttribute
EnumDateFormatsW
GetFileAttributesW
GetProcessHeaps
MoveFileW
GetConsoleMode
SetConsoleWindowInfo
SetThreadAffinityMask
GetVersionExW
CreateDirectoryW
WriteConsoleInputA
GetSystemDefaultLCID
DuplicateHandle
ReadConsoleOutputA
CreateProcessW
GlobalReAlloc
GetEnvironmentVariableW
Sleep
DeleteAtom
SearchPathA
GlobalUnfix
TlsGetValue
GlobalFree
UnlockFile
user32
DdeInitializeA
GetKeyboardLayoutNameW
DestroyIcon
DdeFreeDataHandle
DdeAddData
GetCursorPos
GetWindowLongW
SetForegroundWindow
EndMenu
CharUpperW
DdeImpersonateClient
GetWindowContextHelpId
LoadCursorA
DestroyMenu
GetClassInfoExW
SwitchToThisWindow
SendIMEMessageExA
SetMessageQueue
GetMenuStringW
SetWindowsHookA
DefMDIChildProcW
GetDlgItemTextW
GetClassNameA
WinHelpW
GetMessageExtraInfo
InflateRect
DestroyWindow
DdeInitializeW
GetTabbedTextExtentA
GetUserObjectInformationA
DlgDirSelectComboBoxExW
ClipCursor
DdeFreeStringHandle
SetDebugErrorLevel
ValidateRect
SetClassLongA
EnumPropsExW
GetCapture
CreateMDIWindowW
SetSysColors
LookupIconIdFromDirectoryEx
SendIMEMessageExW
PostQuitMessage
ChildWindowFromPoint
SendMessageW
DrawStateA
GetAltTabInfo
PostMessageA
SetMenuItemBitmaps
EnumPropsA
DdeDisconnectList
LoadBitmapW
GetSystemMetrics
ChangeDisplaySettingsA
LookupIconIdFromDirectory
InvalidateRect
GetMenuItemInfoA
RegisterHotKey
ShowCursor
EnableWindow
GetClipboardData
WINNLSGetEnableStatus
GetSysColor
GetUpdateRgn
SetShellWindow
EnableScrollBar
SendMessageTimeoutA
EnumClipboardFormats
TabbedTextOutW
CopyIcon
MapVirtualKeyA
SetProcessDefaultLayout
GetClipboardOwner
LoadKeyboardLayoutW
GetAncestor
EndTask
MsgWaitForMultipleObjectsEx
GetScrollBarInfo
DdeClientTransaction
MonitorFromRect
PeekMessageW
DialogBoxIndirectParamA
SetCursor
GetClassNameW
MessageBoxW
CreateIcon
CheckMenuRadioItem
GetWindowInfo
DdeGetData
DrawTextExA
MessageBoxExW
EnumDisplaySettingsExA
GetProcessWindowStation
EnumDisplaySettingsW
EnumDesktopsW
VkKeyScanExA
UnloadKeyboardLayout
DefWindowProcW
SetMenuDefaultItem
DialogBoxParamA
DdeQueryStringW
ScrollWindow
CascadeWindows
EndDeferWindowPos
ToAscii
ChangeDisplaySettingsW
WINNLSEnableIME
GetClassInfoA
GetMenuContextHelpId
GetClassInfoW
DdeReconnect
CopyAcceleratorTableW
SetRect
DefDlgProcA
GetUserObjectInformationW
DlgDirSelectExW
CharToOemBuffA
IsCharAlphaW
DrawTextExW
ModifyMenuA
EnumDisplaySettingsExW
EnumThreadWindows
EnumWindowStationsW
OemKeyScan
ReplyMessage
OemToCharA
DdeCreateStringHandleW
DlgDirListW
MapVirtualKeyW
ExcludeUpdateRgn
CloseDesktop
DdePostAdvise
DrawCaption
EnumDisplayDevicesA
IsDialogMessage
DdeQueryConvInfo
SendInput
SetKeyboardState
IsZoomed
DrawMenuBar
ShowOwnedPopups
GetKeyState
CheckDlgButton
GetMenu
IsCharLowerW
CreateDialogParamW
CloseClipboard
DdeQueryStringA
CreateWindowExA
OpenClipboard
wsprintfA
DispatchMessageW
DdeKeepStringHandle
LoadCursorFromFileW
UnhookWindowsHook
SetWindowPos
LoadImageW
EqualRect
GetMenuItemInfoW
DeleteMenu
wvsprintfA
InsertMenuItemW
UnhookWinEvent
FindWindowExA
SetSystemCursor
DrawStateW
ScreenToClient
PostThreadMessageA
UnregisterClassA
wvsprintfW
EndDialog
InvalidateRgn
GetCursor
IsMenu
TabbedTextOutA
IsDialogMessageA
CreateCursor
DdeCreateDataHandle
ReuseDDElParam
ToAsciiEx
EnumDisplayDevicesW
TranslateMessage
RegisterClassW
LoadMenuIndirectW
PostMessageW
GetKeyNameTextW
CreateDesktopA
GetDoubleClickTime
TrackPopupMenuEx
GetMenuCheckMarkDimensions
SetWinEventHook
IsDlgButtonChecked
GetMenuBarInfo
GetScrollInfo
GetWindowThreadProcessId
RegisterDeviceNotificationA
SetWindowRgn
ChangeClipboardChain
CheckMenuItem
ScrollWindowEx
GetMonitorInfoW
CreateWindowExW
SetWindowLongW
EnumChildWindows
ReleaseCapture
GetIconInfo
GetListBoxInfo
SetMenuInfo
IsCharUpperA
IntersectRect
CharUpperA
LoadIconW
GetMenuState
GetThreadDesktop
DlgDirListA
WinHelpA
IsWindowVisible
AppendMenuW
DdeQueryNextServer
OemToCharBuffW
GetWindowDC
SendDlgItemMessageW
SetWindowWord
EnumDesktopWindows
LoadImageA
ShowCaret
BeginPaint
CreateAcceleratorTableW
SetPropW
IsRectEmpty
SystemParametersInfoW
GetSystemMenu
GetMessageA
GetCursorInfo
CreateAcceleratorTableA
GetDlgItemInt
SetCapture
LoadCursorFromFileA
SetWindowContextHelpId
MessageBoxIndirectW
GetClipboardFormatNameA
KillTimer
GetDialogBaseUnits
GetClipboardFormatNameW
ShowScrollBar
LoadMenuW
FrameRect
SwapMouseButton
TileChildWindows
UnpackDDElParam
GetClassWord
MenuItemFromPoint
SetWindowsHookExW
CopyImage
CharLowerBuffA
DdeNameService
IsCharAlphaNumericW
SetMenuContextHelpId
GetQueueStatus
VkKeyScanW
DdeCreateStringHandleA
AdjustWindowRect
ValidateRgn
GetDlgItem
WaitForInputIdle
InsertMenuItemA
DrawEdge
FlashWindowEx
GetDlgCtrlID
DdeAbandonTransaction
MapWindowPoints
GetKeyboardLayoutList
wsprintfW
GetClassLongW
ChangeDisplaySettingsExA
CharUpperBuffA
GetClipCursor
IsWindowEnabled
DdeDisconnect
LoadKeyboardLayoutA
MoveWindow
GetKBCodePage
TranslateAcceleratorA
LoadStringW
GetOpenClipboardWindow
DdeConnectList
GetKeyNameTextA
UnionRect
DrawIconEx
CreateMenu
HideCaret
ImpersonateDdeClientWindow
UnregisterHotKey
RegisterWindowMessageW
CharToOemBuffW
CharUpperBuffW
SetThreadDesktop
DeferWindowPos
SetTimer
SetClassWord
InSendMessageEx
CreateDialogIndirectParamW
FillRect
DrawFrameControl
GetPriorityClipboardFormat
SendMessageTimeoutW
DragDetect
DestroyCursor
OffsetRect
GetForegroundWindow
EnableMenuItem
CreatePopupMenu
GetComboBoxInfo
SetScrollInfo
EditWndProc
RegisterDeviceNotificationW
RealChildWindowFromPoint
SendNotifyMessageW
GetMenuItemRect
GetNextDlgGroupItem
ToUnicode
GetTabbedTextExtentW
CharPrevW
MessageBoxIndirectA
GetKeyboardState
SetWindowTextA
GetWindowPlacement
SetClipboardViewer
DispatchMessageA
IsWindowUnicode
FindWindowW
FlashWindow
CharPrevA
GetUserObjectSecurity
LoadMenuA
EnumDisplaySettingsA
MsgWaitForMultipleObjects
GetCaretBlinkTime
GetKeyboardType
IsCharAlphaA
RegisterClassExW
TranslateAcceleratorW
SetDoubleClickTime
GetMenuInfo
SetActiveWindow
ChangeDisplaySettingsExW
GetMenuItemCount
GetClientRect
GetScrollRange
SetMenu
DdeSetUserHandle
SetDlgItemTextW
DefMDIChildProcA
CreateMDIWindowA
BeginDeferWindowPos
GetPropA
GetWindowTextLengthW
GetSysColorBrush
DdeUnaccessData
GetMessageTime
EnumWindows
GrayStringA
GetWindowWord
RegisterClipboardFormatW
GetShellWindow
CharToOemW
ArrangeIconicWindows
ReleaseDC
IsCharLowerA
GetWindowModuleFileNameA
GetUpdateRect
MonitorFromPoint
PtInRect
GetActiveWindow
SetMessageExtraInfo
GetMessagePos
ShowWindowAsync
SetWindowPlacement
GetWindowTextW
DialogBoxParamW
DrawTextW
OemToCharBuffA
GrayStringW
GetTopWindow
ChangeMenuA
DestroyAcceleratorTable
DdeSetQualityOfService
LoadMenuIndirectA
UnhookWindowsHookEx
ScrollDC
MapDialogRect
GetCaretPos
RealGetWindowClass
DialogBoxIndirectParamW
InsertMenuW
EnumDesktopsA
GetClipboardSequenceNumber
CharLowerA
IsWindow
SetUserObjectInformationA
RemovePropW
DefFrameProcW
OpenIcon
CharPrevExA
VkKeyScanA
GetClipboardViewer
MonitorFromWindow
CheckRadioButton
PeekMessageA
GetInputState
DragObject
CreateIconFromResource
BlockInput
GetDCEx
NotifyWinEvent
SetWindowsHookExA
DrawFocusRect
GetMessageW
GetKeyboardLayout
LoadCursorW
SetCaretBlinkTime
TranslateAccelerator
MessageBeep
SetWindowsHookW
CallMsgFilterA
DdeGetLastError
UpdateWindow
TranslateMDISysAccel
OpenDesktopA
EnumPropsW
GetClassInfoExA
GetNextDlgTabItem
ChildWindowFromPointEx
RegisterWindowMessageA
DrawTextA
wininet
GopherGetAttributeW
HttpQueryInfoW
InternetTimeFromSystemTime
RetrieveUrlCacheEntryStreamA
InternetCanonicalizeUrlA
InternetShowSecurityInfoByURLW
RunOnceUrlCache
InternetSetOptionA
GopherGetAttributeA
HttpOpenRequestW
InternetSetOptionExW
InternetWriteFile
FtpSetCurrentDirectoryA
SetUrlCacheEntryGroup
InternetCloseHandle
SetUrlCacheConfigInfoA
InternetCreateUrlA
InternetAlgIdToStringA
InternetQueryOptionW
InternetGoOnline
FreeUrlCacheSpaceA
FtpPutFileW
InternetTimeToSystemTime
InternetCreateUrlW
GetUrlCacheEntryInfoExA
GetUrlCacheConfigInfoW
InternetConfirmZoneCrossing
SetUrlCacheEntryGroupW
GetUrlCacheEntryInfoExW
FtpRenameFileA
FindNextUrlCacheEntryA
FtpCommandA
RetrieveUrlCacheEntryFileW
ReadUrlCacheEntryStream
DeleteIE3Cache
DetectAutoProxyUrl
InternetInitializeAutoProxyDll
InternetGetCookieW
InternetCombineUrlW
InternetTimeFromSystemTimeA
IsHostInProxyBypassList
CommitUrlCacheEntryW
InternetCrackUrlW
CreateUrlCacheContainerA
InternetDialA
InternetQueryDataAvailable
FtpFindFirstFileA
HttpCheckDavCompliance
FtpOpenFileA
HttpAddRequestHeadersA
InternetSetDialState
CommitUrlCacheEntryA
FtpRemoveDirectoryA
DeleteUrlCacheEntryA
GopherCreateLocatorA
InternetReadFile
ResumeSuspendedDownload
UpdateUrlCacheContentPath
InternetDial
InternetFortezzaCommand
InternetGetConnectedStateExA
InternetLockRequestFile
FtpGetFileW
FindFirstUrlCacheContainerA
UnlockUrlCacheEntryFileW
InternetAutodialHangup
CreateUrlCacheEntryA
CreateUrlCacheGroup
InternetConnectW
UnlockUrlCacheEntryFileA
InternetWriteFileExW
ShowX509EncodedCertificate
InternetOpenUrlA
HttpAddRequestHeadersW
InternetCanonicalizeUrlW
GopherOpenFileW
FtpRemoveDirectoryW
FtpGetCurrentDirectoryA
FtpPutFileEx
FtpGetFileSize
SetUrlCacheEntryGroupA
FindFirstUrlCacheEntryA
DeleteUrlCacheGroup
HttpSendRequestW
FtpRenameFileW
RetrieveUrlCacheEntryFileA
HttpQueryInfoA
InternetOpenA
InternetCrackUrlA
InternetReadFileExA
InternetGetConnectedStateEx
FindNextUrlCacheEntryExA
InternetTimeFromSystemTimeW
InternetSetCookieA
InternetCheckConnectionA
InternetOpenUrlW
Sections
.text Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ