?Lintokayiglumovepyx@@YGXACE@Z
Static task
static1
Behavioral task
behavioral1
Sample
7a2964844261eea4a099e11ac632c599e272e4b2bb719813817358c3adf17aff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a2964844261eea4a099e11ac632c599e272e4b2bb719813817358c3adf17aff.exe
Resource
win10v2004-20220812-en
General
-
Target
7a2964844261eea4a099e11ac632c599e272e4b2bb719813817358c3adf17aff
-
Size
170KB
-
MD5
404b4cb2458e9e1433b69a287472ece0
-
SHA1
ac127ec95f1c9bda236299f5c585b1ffd0d6e81c
-
SHA256
7a2964844261eea4a099e11ac632c599e272e4b2bb719813817358c3adf17aff
-
SHA512
282f64dd3a89253fa77f7f72b3ef539a3a4a6fc1ec0ebf8e9f21313f9b0762d8b57bfb3de6e18cf82073d1e08869cef114fb798125ac7f87a2df472e6be3cd16
-
SSDEEP
3072:yQYP/UgUaAQtLOJKEwHD5JxVA9yt4QzPS289tPmaxRwhWLczV+Gh5:1Yc0t1EmQo789F3lczV55
Malware Config
Signatures
Files
-
7a2964844261eea4a099e11ac632c599e272e4b2bb719813817358c3adf17aff.exe windows x86
fa5852c9454196013474b7c3320fc590
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetEnvironmentVariableA
GetACP
ReleaseSemaphore
GetStdHandle
GetLastError
IsDBCSLeadByteEx
GetThreadLocale
IsValidCodePage
GetOEMCP
GetModuleHandleA
OpenEventW
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetVolumeInformationW
GetEnvironmentStringsW
GetCurrentProcessId
GetSystemDefaultLangID
MulDiv
GetConsoleAliasExesLengthA
GetCurrentProcess
GetTickCount
GetCommandLineA
IsBadCodePtr
IsDBCSLeadByte
ExitThread
GetUserDefaultUILanguage
GetCurrentThreadId
GetModuleHandleW
FindFirstVolumeA
SetErrorMode
MoveFileExW
GetProcessHeap
GetConsoleAliasExesLengthW
SetLastError
GetTempFileNameA
GetWindowsDirectoryW
FindNextVolumeW
GetVolumeInformationA
GetDriveTypeA
GetCurrentThread
GetSystemDefaultLCID
GetUserDefaultLCID
GetDriveTypeW
GetEnvironmentVariableW
user32
FindWindowA
DestroyMenu
UpdateWindow
SetWindowTextA
DdeNameService
AllowSetForegroundWindow
IsWindowVisible
ReleaseCapture
HiliteMenuItem
ClipCursor
SwitchDesktop
IsDlgButtonChecked
SetWindowPos
DestroyCursor
GetMenuState
SetWindowTextW
TileWindows
BringWindowToTop
GetCapture
InsertMenuItemW
GetClassLongW
GetMenuCheckMarkDimensions
SetParent
IsWindowEnabled
GetFocus
GetSubMenu
GetKeyState
GetLastActivePopup
SetCapture
GetTopWindow
GetMessageExtraInfo
IsCharAlphaA
wvsprintfW
CopyAcceleratorTableW
GetSystemMetrics
IsWindow
DestroyCaret
MapVirtualKeyA
TrackPopupMenuEx
GetDC
DrawTextExW
IsClipboardFormatAvailable
DispatchMessageW
UnhookWindowsHookEx
SetMenu
SendDlgItemMessageW
GetWindowLongW
ShowCaret
GetWindowDC
VkKeyScanA
RemoveMenu
EmptyClipboard
DdeUninitialize
GetMenu
SetMenuItemBitmaps
TrackPopupMenu
BeginDeferWindowPos
ChangeClipboardChain
GetWindowLongA
CheckMenuRadioItem
IsHungAppWindow
DdeQueryNextServer
GetParent
TabbedTextOutW
IsMenu
DestroyAcceleratorTable
GetScrollPos
GetDialogBaseUnits
InSendMessage
GetClipboardOwner
GetMessageTime
GetMessagePos
IsCharAlphaNumericA
GetClassLongA
ToUnicodeEx
SetClassLongA
gdi32
GetStockObject
OffsetRgn
CombineRgn
PtInRegion
SetRectRgn
ScaleWindowExtEx
Exports
Exports
Sections
.export Size: 512B - Virtual size: 107B
IMAGE_SCN_MEM_READ
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.part Size: 33KB - Virtual size: 33KB
IMAGE_SCN_MEM_READ
.part1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_MEM_READ
.part2 Size: 23KB - Virtual size: 22KB
IMAGE_SCN_MEM_READ
.part3 Size: 20KB - Virtual size: 19KB
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ