?HistoryLoggingOn@@YGKDKPAX:O
Static task
static1
Behavioral task
behavioral1
Sample
ae8e26952631a98efa88f923f49af6f99b9ffcc6c51657a2413eb6dffe1d0a05.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ae8e26952631a98efa88f923f49af6f99b9ffcc6c51657a2413eb6dffe1d0a05.exe
Resource
win10v2004-20220901-en
General
-
Target
ae8e26952631a98efa88f923f49af6f99b9ffcc6c51657a2413eb6dffe1d0a05
-
Size
142KB
-
MD5
fd9361be8add5226ef9f9601a7e13dea
-
SHA1
ead894a96e6cc6d46920347b61885d15a3a8a2c9
-
SHA256
ae8e26952631a98efa88f923f49af6f99b9ffcc6c51657a2413eb6dffe1d0a05
-
SHA512
9f49f01e40b3b8e9d7a2732b5aeb45611252fe9cc905c057ce24edffb617efd2c30b7416d5d0203ceca1e1e35661203e196551237cc2d68daae8b51b831d5c8c
-
SSDEEP
3072:8hp6VxDs6D/8AMOQvwhnEqQIVhRv+e2AACSCDZotXdBh4:CeG5B56EZIh+e2XCWtt4
Malware Config
Signatures
Files
-
ae8e26952631a98efa88f923f49af6f99b9ffcc6c51657a2413eb6dffe1d0a05.exe windows x86
1c67187441663160a33160de94a4596f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Destroy
ImageList_Remove
PropertySheetA
ImageList_AddMasked
PropertySheetW
DestroyPropertySheetPage
user32
AppendMenuA
GetScrollRange
GetTopWindow
SetScrollRange
ShowCursor
LoadAcceleratorsW
CreateCursor
InvalidateRgn
SetWindowTextA
GetMessageW
UnionRect
InSendMessage
GetClientRect
DialogBoxParamW
SendInput
CheckDlgButton
ReplyMessage
IsWindowUnicode
GetScrollPos
PostThreadMessageA
EnableMenuItem
DrawFrameControl
IsCharAlphaA
RegisterWindowMessageW
CharUpperBuffW
GetScrollInfo
SetScrollInfo
RemovePropW
PeekMessageA
DrawTextExW
CopyRect
ShowWindowAsync
GetMessageExtraInfo
SetDlgItemTextW
LoadImageW
CopyImage
IsCharUpperA
CharLowerA
LoadStringA
IntersectRect
TabbedTextOutW
GetSystemMetrics
CreateDialogParamA
GetUserObjectInformationW
MonitorFromPoint
DispatchMessageW
MapDialogRect
EnableWindow
DrawFocusRect
OpenDesktopW
CharPrevW
LoadBitmapA
RegisterHotKey
DialogBoxParamA
ShowScrollBar
AttachThreadInput
MapVirtualKeyW
SendMessageTimeoutW
IsWindowVisible
GetCaretPos
GetMenuItemCount
GetMessagePos
IsDialogMessageA
SetSysColors
IsChild
GetKeyState
GetFocus
ModifyMenuW
IsMenu
GetUpdateRgn
SendMessageW
CharNextA
CharNextW
GetDCEx
AllowSetForegroundWindow
CreateDialogIndirectParamW
SetWindowRgn
SendMessageA
RegisterClassA
DefDlgProcA
GetMessageA
GetShellWindow
OffsetRect
GetDlgCtrlID
GetSysColor
GetDlgItem
GetMenu
RegisterClassExW
ActivateKeyboardLayout
DrawStateW
SetWindowPlacement
SetFocus
ScreenToClient
SetRectEmpty
FillRect
SystemParametersInfoA
PostMessageA
GetDlgItemInt
CharUpperBuffA
RegisterClassExA
LoadStringW
GetCursorPos
ScrollWindow
GetMenuStringA
GetMenuItemRect
PostMessageW
GetClassLongA
ArrangeIconicWindows
wsprintfW
DefWindowProcA
wvsprintfA
SendDlgItemMessageA
FindWindowA
InSendMessageEx
PostThreadMessageW
GetDlgItemTextW
GetMenuItemInfoW
SetTimer
EnumWindows
MapWindowPoints
shlwapi
UrlGetPartA
kernel32
SetMailslotInfo
GetModuleHandleA
RemoveDirectoryA
CreateSemaphoreW
lstrcmpW
GetCommConfig
GetModuleFileNameA
CreateFileMappingA
GetFullPathNameA
GetModuleHandleW
SetCurrentDirectoryA
GlobalSize
SetThreadPriority
GlobalAlloc
RegisterWaitForSingleObject
GlobalLock
LocalUnlock
LoadResource
GlobalUnlock
WaitCommEvent
lstrcatW
HeapUnlock
GetLastError
GetCommTimeouts
CompareStringW
OpenFile
SetCurrentDirectoryW
GetSystemDirectoryW
SearchPathA
GetSystemTimeAsFileTime
HeapFree
GetThreadTimes
LoadLibraryExW
GetTempFileNameA
FindResourceExW
GlobalGetAtomNameW
GetWindowsDirectoryA
VirtualQuery
GetTickCount
TlsGetValue
EnumResourceTypesA
GetThreadLocale
GetSystemDefaultLangID
GetOEMCP
TlsSetValue
lstrlenA
CreateFileMappingW
lstrcpyA
GlobalMemoryStatusEx
LocalSize
SetWaitableTimer
FindFirstFileA
CreateNamedPipeW
GetTempPathW
GetStartupInfoW
GetStringTypeExW
msvcrt
ftell
_controlfp
isalnum
strcpy
atoi
towupper
strtok
islower
__set_app_type
__p__fmode
isspace
wcsrchr
__p__commode
strncpy
getenv
qsort
puts
vswprintf
putchar
isxdigit
perror
_amsg_exit
wcspbrk
fputs
swscanf
rand
isprint
vsprintf
isdigit
_initterm
_ismbblead
strcspn
mbtowc
iswdigit
wcsstr
_XcptFilter
iswspace
clock
_exit
mktime
_cexit
__setusermatherr
wcstok
getc
fgetc
__getmainargs
putc
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cexp Size: 512B - Virtual size: 91B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.regs Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.citab Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.$dbug Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lime Size: 512B - Virtual size: 483B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tdat Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ