?GetShiftAltInfo@@YGK_KHE:O
Static task
static1
Behavioral task
behavioral1
Sample
f2dcb36e8bc5ffd7b84d6cafc7f256c85d18d306f50e88ab2cc07fdbf18a75c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2dcb36e8bc5ffd7b84d6cafc7f256c85d18d306f50e88ab2cc07fdbf18a75c1.exe
Resource
win10v2004-20220901-en
General
-
Target
f2dcb36e8bc5ffd7b84d6cafc7f256c85d18d306f50e88ab2cc07fdbf18a75c1
-
Size
181KB
-
MD5
624816a968f9a24ed18a64775c26c7d0
-
SHA1
bc313587f8b57f2b7365abd4b5b59f7319e23663
-
SHA256
f2dcb36e8bc5ffd7b84d6cafc7f256c85d18d306f50e88ab2cc07fdbf18a75c1
-
SHA512
e95e4f14a2df153011e4401bcb42fc0aeaa694ed37ca26af94325b036e979e1f6e09e29e4987d6d52127a115d765a85d63bcb63f926ebf44fc725078daa23613
-
SSDEEP
3072:36KdjbD/DE4OAISR5zI+irIi1ImcIG0s7hRIxGtiUVknQ:3XbDlp4II+0xxG4KknQ
Malware Config
Signatures
Files
-
f2dcb36e8bc5ffd7b84d6cafc7f256c85d18d306f50e88ab2cc07fdbf18a75c1.exe windows x86
a8cf66ec62d097b9523f54facdd8966d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntW
kernel32
GetDateFormatW
CompareStringW
TerminateThread
FormatMessageA
UnmapViewOfFile
IsDBCSLeadByte
GetModuleFileNameA
FormatMessageW
SetLocalTime
FileTimeToDosDateTime
OpenEventA
ResetEvent
GetComputerNameA
CreateDirectoryW
SetLastError
WaitCommEvent
CreateNamedPipeA
SetMailslotInfo
CopyFileW
GetSystemDefaultUILanguage
LocalUnlock
HeapAlloc
GetPriorityClass
SetThreadLocale
FindFirstFileW
LoadLibraryA
GetUserDefaultLCID
TlsFree
FindNextFileA
IsValidLocale
DeleteCriticalSection
CancelIo
LoadResource
RegisterWaitForSingleObject
lstrcpyW
HeapCreate
LocalAlloc
HeapValidate
GetVersion
GetWindowsDirectoryW
UnlockFile
CreateFileMappingW
SizeofResource
TlsSetValue
IsBadReadPtr
FindNextChangeNotification
SetTimerQueueTimer
lstrcatA
CreateWaitableTimerW
GetStringTypeExW
GetCurrentDirectoryW
GetUserDefaultLangID
lstrcatW
InitializeCriticalSection
lstrlenA
LocalLock
comdlg32
FindTextW
PrintDlgW
PrintDlgExW
PageSetupDlgW
GetOpenFileNameA
GetOpenFileNameW
user32
KillTimer
ExitWindowsEx
MapVirtualKeyA
CreateIconFromResource
EqualRect
IsDialogMessageA
MessageBoxExW
GetNextDlgTabItem
GetClassInfoExA
GetWindowTextLengthW
PostQuitMessage
ScrollWindow
EnumChildWindows
LoadBitmapA
wsprintfA
wsprintfW
IsIconic
SendDlgItemMessageA
TileWindows
GetClassLongW
BeginDeferWindowPos
EndDialog
SendMessageA
HiliteMenuItem
GetClientRect
AttachThreadInput
PostThreadMessageA
CreateCaret
AllowSetForegroundWindow
SystemParametersInfoA
IsChild
MapDialogRect
PostThreadMessageW
DeferWindowPos
IsWindowUnicode
IsZoomed
ModifyMenuW
SendMessageTimeoutA
DeleteMenu
ReplyMessage
SendMessageTimeoutW
LoadImageA
SwitchToThisWindow
GetMenu
GetKeyboardLayout
DrawTextExW
SetSysColors
CreateDialogIndirectParamW
GetDoubleClickTime
CharNextExA
GetSysColorBrush
SendInput
GetUpdateRect
DefFrameProcW
InvalidateRgn
DefWindowProcA
GetWindowLongW
SetMenuItemBitmaps
CharLowerW
LoadIconW
CreatePopupMenu
SetMenu
SetWindowPlacement
SetWindowRgn
ChildWindowFromPoint
GetSysColor
SendNotifyMessageW
DestroyCursor
ShowScrollBar
SetFocus
CharToOemA
GetUserObjectInformationA
RemoveMenu
CopyRect
MessageBoxA
CharToOemW
IsDlgButtonChecked
UpdateWindow
MapVirtualKeyW
FindWindowExW
ChangeMenuW
SetScrollPos
GetDialogBaseUnits
GetKeyboardType
RegisterWindowMessageA
GetClassLongA
SetClassLongW
InflateRect
GetDlgItemTextW
InSendMessage
PostMessageW
TabbedTextOutW
DrawAnimatedRects
AppendMenuW
DefDlgProcW
VkKeyScanW
IsCharAlphaW
RegisterClassExW
SetMenuItemInfoW
IsMenu
EnumThreadWindows
LoadImageW
ClipCursor
DestroyIcon
CharToOemBuffA
GetMenuItemRect
CheckMenuItem
GetSystemMenu
RegisterClassA
ShowOwnedPopups
DrawMenuBar
AppendMenuA
AdjustWindowRectEx
IntersectRect
LockWindowUpdate
ShowCursor
GetUpdateRgn
HideCaret
LoadIconA
RegisterWindowMessageW
msvcrt
isspace
towupper
remove
rand
wcscoll
calloc
_controlfp
__set_app_type
system
sprintf
__p__fmode
__p__commode
_amsg_exit
putc
strstr
isalpha
fwrite
printf
isdigit
_initterm
_ismbblead
_XcptFilter
qsort
getc
setlocale
_exit
towlower
_cexit
isprint
localtime
sscanf
wcscat
isupper
__setusermatherr
__getmainargs
isxdigit
wcstod
iswspace
wcstombs
strtok
vsprintf
strcspn
iswdigit
floor
mktime
strncmp
free
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bit Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.insec Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.inmin Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wall Size: 1024B - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ