?_DestroyCaret@@YGPAXKEPAI@Z
Static task
static1
Behavioral task
behavioral1
Sample
bf0d827d91ade569d9ceab292a5d844d5555fec1ff792baced347aba46ab031c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf0d827d91ade569d9ceab292a5d844d5555fec1ff792baced347aba46ab031c.exe
Resource
win10v2004-20220812-en
General
-
Target
bf0d827d91ade569d9ceab292a5d844d5555fec1ff792baced347aba46ab031c
-
Size
86KB
-
MD5
5ee22d8701fbbaabd63648cf03cf62df
-
SHA1
b30f7a02fbc01a570bcb725d3740fbe3f01fe222
-
SHA256
bf0d827d91ade569d9ceab292a5d844d5555fec1ff792baced347aba46ab031c
-
SHA512
0d2e14d8750cdef5eb589d9d126c0167b01fce8fc9e51d7cdf1f85158efd914f25fc4a1e24eee29c75cc6dc918b7e221c048d45e378ac76273cefc815b8c3d48
-
SSDEEP
1536:A1sIbnLvpbADhxiIGqzUvPGXlWF4rlDkQLNvhhzDgNrv3OdS:rsLaDhuPGXgF4rlJLZhF2O
Malware Config
Signatures
Files
-
bf0d827d91ade569d9ceab292a5d844d5555fec1ff792baced347aba46ab031c.exe windows x86
3d5b7dd265a76935c2bc86e25dd45113
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrRChrIA
StrCpyW
StrCmpNIW
PathCanonicalizeW
ord158
PathFindNextComponentW
ChrCmpIW
kernel32
LoadLibraryExW
GetCommConfig
CopyFileW
CreateFileMappingW
FileTimeToDosDateTime
GlobalLock
GetCommProperties
OpenEventW
CancelDeviceWakeupRequest
GetTapeStatus
GetDiskFreeSpaceW
OpenJobObjectW
WaitCommEvent
OpenFileMappingW
lstrcatW
GetModuleFileNameA
OpenWaitableTimerA
CreateMailslotW
ClearCommBreak
user32
CheckMenuRadioItem
SetPropA
GetWindowTextA
OpenInputDesktop
GetMenuStringW
ReplyMessage
ChangeMenuW
EnumDisplayMonitors
CallMsgFilterW
GetWindowContextHelpId
SendDlgItemMessageW
CreateIconFromResource
SendMessageCallbackW
GetCaretPos
ShowScrollBar
DestroyMenu
EnumDisplayDevicesA
GetKeyboardLayoutList
RegisterClassA
LoadBitmapW
GetPropW
gdi32
PolyBezier
GetEnhMetaFilePixelFormat
SetMetaRgn
DeleteEnhMetaFile
UpdateColors
GetTextExtentPointA
GetCurrentPositionEx
CreateMetaFileW
GdiFlush
CreateDIBPatternBrush
GetPixelFormat
PathToRegion
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icode Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m_data Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.n_data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 854B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ