?MK_WVYzvp_aQEI_LJTHH@@YGPAGI@Z
Static task
static1
Behavioral task
behavioral1
Sample
4871d684f33b05bbc9cd08146abd161fc9292c78f3af253de1d933a19057b591.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4871d684f33b05bbc9cd08146abd161fc9292c78f3af253de1d933a19057b591.exe
Resource
win10v2004-20220812-en
General
-
Target
4871d684f33b05bbc9cd08146abd161fc9292c78f3af253de1d933a19057b591
-
Size
144KB
-
MD5
b23730765193de71a3badf79f218380f
-
SHA1
fe7cbb69a3a8cdbdfafac01385cd6f6d42ce966c
-
SHA256
4871d684f33b05bbc9cd08146abd161fc9292c78f3af253de1d933a19057b591
-
SHA512
26c6fa6bfa3781ea5c6881eee14534c73946a225bae92c8711f4678eb76f493d33ac0d867628e99cbfe569f842b4e121a562c39ccd75b3e6a804a78e6bc015c9
-
SSDEEP
3072:5gFgKUgwR3PocdwKTd7XhTGxDxM896DYPAhv3Yxj+3YHh5k8:DKU3BwciGXcxDxfQvIxjyYHhN
Malware Config
Signatures
Files
-
4871d684f33b05bbc9cd08146abd161fc9292c78f3af253de1d933a19057b591.exe windows x86
ebd90e11ad45a7abe70bf0d3edc30ac7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
memset
shlwapi
StrCmpW
StrSpnW
ColorRGBToHLS
UrlGetPartW
comdlg32
PageSetupDlgW
PrintDlgW
comctl32
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Write
CreateToolbarEx
gdi32
RemoveFontResourceW
StretchDIBits
SetMapMode
GetPaletteEntries
LineDDA
GetTextExtentPointW
CreateDiscardableBitmap
StretchBlt
DPtoLP
LPtoDP
GetTextCharsetInfo
OffsetRgn
ScaleViewportExtEx
user32
GetMenuItemRect
CreateDialogParamW
TrackPopupMenu
IsIconic
GetSubMenu
GetClassNameW
SetWindowPlacement
FrameRect
EnumChildWindows
GetParent
InsertMenuA
GetAsyncKeyState
SetSysColors
VkKeyScanW
PostQuitMessage
BringWindowToTop
FindWindowExW
MessageBoxA
AttachThreadInput
OpenDesktopW
GetDlgItemTextA
MessageBoxExW
DrawFrameControl
GetDlgItem
GetKeyboardLayoutNameW
SetDlgItemInt
SystemParametersInfoA
DestroyCursor
SetWindowLongW
RegisterClassA
kernel32
GetThreadContext
lstrlenW
GetVersion
CompareStringW
GetFileType
WaitForDebugEvent
DeviceIoControl
HeapUnlock
GetCurrentProcessId
lstrcatA
GetACP
CreateWaitableTimerA
lstrcpyA
GetModuleHandleA
SetTimerQueueTimer
FlushViewOfFile
GetSystemTimeAsFileTime
GetWindowsDirectoryW
Exports
Exports
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ