WJXCHa
Static task
static1
Behavioral task
behavioral1
Sample
794ecb49c2719e46281e1ffd67aa8d64da41c92ca953df8cfb3ecd5d3d2a1d94.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
794ecb49c2719e46281e1ffd67aa8d64da41c92ca953df8cfb3ecd5d3d2a1d94.exe
Resource
win10v2004-20220901-en
General
-
Target
794ecb49c2719e46281e1ffd67aa8d64da41c92ca953df8cfb3ecd5d3d2a1d94
-
Size
130KB
-
MD5
44ce7a2d20283f682aa890f0e74726a4
-
SHA1
75c5fa049e3ddd385a5a1e66891de6cdf4c00427
-
SHA256
794ecb49c2719e46281e1ffd67aa8d64da41c92ca953df8cfb3ecd5d3d2a1d94
-
SHA512
15e59c543639a71778c38e1d7df3fb1392ee69bf007c1be1e566f6321cd10d594a2ba9ed10a69d14f44f979f24d61214b93406b0986dffcbe93c91d68a346495
-
SSDEEP
3072:GYMYxmDdzxB2wJPNrwjWeqp399gCmAQ2wjZ/p:bID8wJFrwnqpzPmAQ2wFh
Malware Config
Signatures
Files
-
794ecb49c2719e46281e1ffd67aa8d64da41c92ca953df8cfb3ecd5d3d2a1d94.exe windows x86
26b89cb93a1d5e01816b204a92df71f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLangID
VirtualQuery
GetModuleHandleA
WaitForSingleObject
VirtualAllocEx
LocalAlloc
InitializeCriticalSection
GetFileSize
WideCharToMultiByte
GetCPInfo
HeapFree
WriteFile
GlobalAddAtomA
GetDiskFreeSpaceA
LoadLibraryA
GetCommandLineW
ExitProcess
CompareStringA
GetACP
CloseHandle
GetEnvironmentStrings
SetEndOfFile
user32
DispatchMessageW
GetSysColorBrush
RedrawWindow
ShowScrollBar
EnumThreadWindows
GetKeyboardState
GetSysColor
GetKeyboardLayoutList
GetParent
GetIconInfo
GetKeyState
SetWindowLongW
LoadKeyboardLayoutA
GetLastActivePopup
IsCharLowerA
IntersectRect
IsWindowVisible
DefFrameProcA
PostQuitMessage
WaitMessage
DrawEdge
SetWindowPlacement
EnumChildWindows
InvalidateRect
GetMessagePos
ScreenToClient
GetMenu
OpenIcon
IsDialogMessageW
GetClipboardData
CharUpperBuffA
GetWindowLongW
DispatchMessageA
ReleaseDC
EnumWindows
CreatePopupMenu
DefWindowProcA
IsDlgButtonChecked
OpenClipboard
FillRect
DrawFrameControl
SetCursor
RemovePropA
IsChild
ReleaseCapture
UnhookWindowsHookEx
ShowWindow
GetKeyboardLayoutNameA
OemToCharA
PeekMessageW
GetSystemMetrics
GetKeyNameTextA
GetKeyboardLayout
UpdateWindow
LoadBitmapA
IsWindowUnicode
EmptyClipboard
GetWindowTextLengthA
DrawAnimatedRects
CreateIcon
ShowOwnedPopups
ClientToScreen
ActivateKeyboardLayout
ole32
CLSIDFromString
StgCreateDocfileOnILockBytes
CLSIDFromProgID
CoCreateGuid
MkParseDisplayName
PropVariantClear
CoGetObjectContext
CoRegisterClassObject
CoGetMalloc
CoTaskMemFree
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 99KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ