_dWnN7uR7T8ig
Static task
static1
Behavioral task
behavioral1
Sample
a5abc78698489b027d960b82b59369113ab97305cbd4eb2d028d20f28a14049a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a5abc78698489b027d960b82b59369113ab97305cbd4eb2d028d20f28a14049a.exe
Resource
win10v2004-20220812-en
General
-
Target
a5abc78698489b027d960b82b59369113ab97305cbd4eb2d028d20f28a14049a
-
Size
136KB
-
MD5
a0ee3aa5f86fc7e0cb2c25e0f424bd30
-
SHA1
d0cd13476f8738e60a61d9dc688d773fde8dd9b0
-
SHA256
a5abc78698489b027d960b82b59369113ab97305cbd4eb2d028d20f28a14049a
-
SHA512
35036efb6b8a24a7a4f772935f09d32f5f56a7ab7482e38010c6d58ee3eab91f026111c9711c412c463df70003fcf7a1fbc2efdc3f219b865914ac31f373a718
-
SSDEEP
3072:5wfFp0YX0iUCBXlLDZyvW6nCAz7kD/rSTmyMDfqDWPtwa2A:4p0+9UC91kFCAz42Yt5
Malware Config
Signatures
Files
-
a5abc78698489b027d960b82b59369113ab97305cbd4eb2d028d20f28a14049a.exe windows x86
8f1856714f1a6f12b053c8be4d7091a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Add
ImageList_Write
ImageList_Remove
ImageList_Read
ImageList_GetBkColor
ImageList_Destroy
ImageList_Draw
user32
UnregisterClassA
DrawMenuBar
DrawIcon
wsprintfA
GetClipboardData
GetWindowLongW
TrackPopupMenu
EqualRect
GetScrollInfo
GetIconInfo
ShowWindow
SetRect
CallNextHookEx
GetScrollPos
ShowScrollBar
GetLastActivePopup
ReleaseCapture
IsCharLowerA
GetClientRect
OemToCharA
MessageBeep
SendMessageW
GetCursor
IsCharUpperA
CreateWindowExA
SetTimer
GetMenu
PtInRect
FindWindowA
SetWindowPos
DrawAnimatedRects
PeekMessageW
SetScrollPos
RemovePropA
SetFocus
UpdateWindow
GetMenuState
GetWindowLongA
GetCursorPos
ReleaseDC
DestroyCursor
GetWindowTextA
MoveWindow
IsChild
GetPropA
IsWindow
GetActiveWindow
RegisterClassA
LoadKeyboardLayoutA
ScreenToClient
IsMenu
GetKeyNameTextA
InsertMenuA
GetDCEx
ActivateKeyboardLayout
KillTimer
RemoveMenu
RegisterWindowMessageA
GetWindow
DispatchMessageW
GetKeyboardType
kernel32
GetACP
FormatMessageA
GlobalDeleteAtom
IsBadHugeReadPtr
GetStringTypeW
DeleteFileA
CreateThread
HeapAlloc
GlobalFindAtomA
EnterCriticalSection
GetCurrentProcessId
VirtualAlloc
HeapFree
GetEnvironmentStrings
lstrlenA
ExitProcess
LocalReAlloc
lstrcmpA
SetThreadLocale
LoadLibraryA
GetFileSize
RaiseException
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 108KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 778B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ