?CreateDlgMessage@@YGHPAXPADK|U
Static task
static1
Behavioral task
behavioral1
Sample
5aa2f2158860120256ce029552fab45754ed2a1137a8a4f0929001825e69c1d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5aa2f2158860120256ce029552fab45754ed2a1137a8a4f0929001825e69c1d2.exe
Resource
win10v2004-20220812-en
General
-
Target
5aa2f2158860120256ce029552fab45754ed2a1137a8a4f0929001825e69c1d2
-
Size
173KB
-
MD5
ad38e91b2ed202bc0ae23035ee51fb04
-
SHA1
07f223ff9d5b72fe58e9bccd2e1ab92cbee20837
-
SHA256
5aa2f2158860120256ce029552fab45754ed2a1137a8a4f0929001825e69c1d2
-
SHA512
b24ccca2cfc174e88eee2ea27cfcf0b4944969931fb70de23e4de75bc17c744a279677f1d2e5b264cb1be0bc3978c3a0370c1014e323d9461074897cf4ba2f68
-
SSDEEP
3072:D+5vtcwxPg36vAWA3k373xejugPmw2uDL76aondrdckk0YM+uGhZ7VeE:DQcwJg3CdD373xeUcH76aodikk0YM+ub
Malware Config
Signatures
Files
-
5aa2f2158860120256ce029552fab45754ed2a1137a8a4f0929001825e69c1d2.exe windows x86
aed874990c87be8527b57810a5a4c241
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlGetLocationW
ChrCmpIW
StrCmpIW
user32
wsprintfW
BeginDeferWindowPos
MessageBoxA
GetActiveWindow
RegisterClassA
GetWindowDC
SetMenuItemInfoW
IsCharUpperW
CloseDesktop
kernel32
LoadLibraryA
lstrlenA
HeapWalk
CreatePipe
GetModuleFileNameA
AddAtomW
GetDateFormatW
GetStringTypeExW
GetModuleHandleA
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_wtoi
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
memset
_cexit
atoi
__setusermatherr
__getmainargs
remove
strncpy
fwrite
gdi32
SetDIBits
CreateBrushIndirect
CreateDiscardableBitmap
GetTextMetricsW
OffsetRgn
DPtoLP
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ort Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 142KB - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE