?FeltEyesDoomductEsne@@YGGULoneywisaresWrenRicejus@@U_SYSTEMTIME@@ACUManyOradknee@@G_K@Z
Static task
static1
Behavioral task
behavioral1
Sample
43259a31d3a264abe5e4663f6f8b62e665c0bfe6baaa7885e529726732dfb24c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
43259a31d3a264abe5e4663f6f8b62e665c0bfe6baaa7885e529726732dfb24c.exe
Resource
win10v2004-20220901-en
General
-
Target
43259a31d3a264abe5e4663f6f8b62e665c0bfe6baaa7885e529726732dfb24c
-
Size
212KB
-
MD5
a1bafb5491b7e31cbbc9a89ef088a610
-
SHA1
383b456460cd6c8a8c006917fef60b96360ca4b9
-
SHA256
43259a31d3a264abe5e4663f6f8b62e665c0bfe6baaa7885e529726732dfb24c
-
SHA512
bdc9270f4000a1ee73b5c80bdf24101725a03fa5b6bc72fdecb807194781bc2a33e93acd184e33d674b60ddeac21ea19c4d8c217c63942ab93de3c9cdd5a7af5
-
SSDEEP
6144:AWAaWGfe9LlBkmAm7+scQmRIrAQxspdonHC7zLyWCxiLnd:AEfQLnAQc6p+uHCHLyWtLnd
Malware Config
Signatures
Files
-
43259a31d3a264abe5e4663f6f8b62e665c0bfe6baaa7885e529726732dfb24c.exe windows x86
a15f20e8ed557d3b3b3fe266ea6622af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsRectEmpty
RegisterDeviceNotificationA
CallWindowProcA
EnableWindow
SetWindowsHookExW
SetThreadDesktop
GetClassInfoA
GetCaretPos
TabbedTextOutA
SetLastErrorEx
EnumWindows
GetClassLongW
ExitWindowsEx
GetClipboardFormatNameA
CreateWindowStationW
SetForegroundWindow
GetTopWindow
DdeCreateStringHandleW
DdeCreateStringHandleA
MapVirtualKeyW
keybd_event
GetMessageW
DdeInitializeW
MoveWindow
CreateCaret
GetWindowLongW
CharUpperA
LoadIconA
IsCharAlphaA
CharUpperBuffW
ReleaseCapture
wvsprintfA
SetWindowsHookExA
LoadIconW
CreateIconIndirect
GetWindow
GetWindowThreadProcessId
CallWindowProcW
ValidateRect
RegisterHotKey
ChangeDisplaySettingsA
MessageBoxExA
DestroyIcon
SetClipboardViewer
DialogBoxParamA
EqualRect
DdeQueryStringA
EnumDesktopsA
DefWindowProcA
LoadMenuW
GetWindowPlacement
GetScrollRange
FindWindowW
GetMenuStringW
OemToCharBuffW
DialogBoxIndirectParamW
DdeDisconnectList
LoadImageW
CharNextW
MonitorFromPoint
DdeSetQualityOfService
SetWindowPlacement
CreateDesktopW
ntdll
_allmul
_aullshr
_allshl
_aulldiv
_aullrem
Exports
Exports
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ