_CallWindowProcACallWindowProcA@0
Static task
static1
Behavioral task
behavioral1
Sample
e4821c6a3d606c72fe75582f7f37487e30ee821dd6be3553e9b2845a024f867b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e4821c6a3d606c72fe75582f7f37487e30ee821dd6be3553e9b2845a024f867b.exe
Resource
win10v2004-20220901-en
General
-
Target
e4821c6a3d606c72fe75582f7f37487e30ee821dd6be3553e9b2845a024f867b
-
Size
197KB
-
MD5
49b89d70d4f4b473d45feb41c9d5de55
-
SHA1
18beab94bb43a71bfa39a0963b9d304ba03ae099
-
SHA256
e4821c6a3d606c72fe75582f7f37487e30ee821dd6be3553e9b2845a024f867b
-
SHA512
10e7695621a7e51adeec89fd362abfebad93cc7d41aab6b8953f0fc771ece5e950c6527e433778c0dbe10944c916bf18927bbdc70737d56c4ae1b5e1a2fe4288
-
SSDEEP
3072:wmQXBhYYzk+8Dyy3G/zR8cxB7qFXc/Sq5ljBtzYCjfxpNvEpWOvSYhH/P95CYwF7:g1Dy3gzRXWtcKq3jBNR5jvELH7VC
Malware Config
Signatures
Files
-
e4821c6a3d606c72fe75582f7f37487e30ee821dd6be3553e9b2845a024f867b.exe windows x86
6f5e861ec49820e89df56d0191af0766
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
GetLocaleInfoW
HeapLock
VerifyVersionInfoW
GetThreadPriority
ResumeThread
HeapFree
TryEnterCriticalSection
user32
SetWindowLongA
GetAsyncKeyState
SetWindowTextW
CopyAcceleratorTableW
SetSysColors
DlgDirListA
CreateIconIndirect
SetParent
DrawTextA
MessageBoxA
IsDialogMessageA
GetWindowLongA
CharLowerA
SendMessageTimeoutW
GetKeyboardLayout
DeleteMenu
HideCaret
GetMenuCheckMarkDimensions
CharToOemBuffA
GetMessageTime
gdi32
SetWindowExtEx
CreateCompatibleDC
CreateDIBPatternBrushPt
SetBkColor
CreateFontIndirectW
GetDIBits
StretchDIBits
GetDIBColorTable
MoveToEx
atl
AtlGetVersion
AtlSetErrorInfo
ole32
CoSetState
GetErrorInfo
shlwapi
PathFindExtensionA
Exports
Exports
Sections
.fvgcf Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.r5trtr Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.weew Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ