?GetShiftAltInfo@@YGK_KHE:O
Static task
static1
Behavioral task
behavioral1
Sample
35ab092bdff66a0b728461794349edd2f8fd57a0d4a68c39840cb3e2c6d45d2f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
35ab092bdff66a0b728461794349edd2f8fd57a0d4a68c39840cb3e2c6d45d2f.exe
Resource
win10v2004-20220901-en
General
-
Target
35ab092bdff66a0b728461794349edd2f8fd57a0d4a68c39840cb3e2c6d45d2f
-
Size
146KB
-
MD5
936c68e22aee812a3e911d37681e42b5
-
SHA1
37373fa9fd6f8328ec96e11a019446482c63c507
-
SHA256
35ab092bdff66a0b728461794349edd2f8fd57a0d4a68c39840cb3e2c6d45d2f
-
SHA512
a88e64b6815323684e88fc3194a9555640c460ece480fea6562f708bea7ce943135f731d47afb881d89d54d7816524d93fb115d34aef4d2ec10614bd08818983
-
SSDEEP
3072:k6n1V3FLii0TbvAXcSmUqxjRRFVcn6uXrucJRQLItqTTg7KZb:kOHijbqcSrq1RRwVXrUkn2Zb
Malware Config
Signatures
Files
-
35ab092bdff66a0b728461794349edd2f8fd57a0d4a68c39840cb3e2c6d45d2f.exe windows x86
e66eca66f75d15d94e62ad67bf328f3b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntW
user32
DrawTextExW
CharUpperW
InflateRect
GetMenuState
CharToOemA
InSendMessageEx
LoadMenuA
GetDoubleClickTime
CascadeWindows
RegisterHotKey
OffsetRect
InternalGetWindowText
SetActiveWindow
SetScrollInfo
IsCharAlphaW
ClientToScreen
GetClassInfoExW
AdjustWindowRectEx
RegisterWindowMessageA
SetWindowRgn
GetCursorPos
CreateIconFromResource
SetUserObjectInformationW
GetClassInfoExA
FindWindowW
SetRect
DrawFocusRect
DispatchMessageA
GetSystemMetrics
GetDC
SetWindowPos
CallWindowProcA
GetNextDlgTabItem
GetTopWindow
EqualRect
ClipCursor
DialogBoxParamW
ChildWindowFromPointEx
CharUpperBuffA
ShowCaret
GetScrollRange
DragObject
SystemParametersInfoW
CreateDialogParamW
CharNextW
SetScrollRange
CheckDlgButton
UnionRect
OpenDesktopW
ExitWindowsEx
DrawStateA
GetClassLongA
SetWindowPlacement
TileWindows
IsRectEmpty
GetSubMenu
EnableWindow
SendMessageA
RemovePropW
GetMenuCheckMarkDimensions
ShowScrollBar
GetClassNameW
GetWindowTextA
ShowOwnedPopups
DrawStateW
LoadIconW
BeginPaint
FindWindowExA
IsWindowUnicode
LoadAcceleratorsW
wsprintfW
WaitForInputIdle
GetMenuItemCount
DefFrameProcA
GetWindowLongA
FrameRect
TranslateAcceleratorW
SendInput
LoadStringW
CreateDialogIndirectParamW
AllowSetForegroundWindow
DrawEdge
MessageBoxExW
RegisterClassExW
IsChild
DialogBoxIndirectParamA
GetDialogBaseUnits
ReleaseDC
GetWindowRect
DestroyWindow
GetDlgItemTextW
IsZoomed
SetMenu
MoveWindow
RegisterWindowMessageW
MonitorFromRect
DrawMenuBar
TranslateMessage
InSendMessage
GetWindowDC
ChangeMenuW
PostMessageW
GetMenuItemRect
wsprintfA
GetMessageExtraInfo
EnableScrollBar
DialogBoxIndirectParamW
GetMessagePos
MapVirtualKeyW
FindWindowA
GetMonitorInfoW
CreatePopupMenu
DrawIcon
ShowCursor
DestroyCaret
SetWindowLongW
PostThreadMessageW
comctl32
InitCommonControlsEx
PropertySheetW
ImageList_GetImageCount
ImageList_Create
ImageList_Remove
DestroyPropertySheetPage
kernel32
lstrlenA
GetCommandLineA
SetSystemTime
CreateWaitableTimerW
lstrcmpiA
IsDBCSLeadByteEx
GetModuleFileNameW
GetCurrentThreadId
CreateThread
GetFileSize
MoveFileA
VirtualFree
IsBadReadPtr
DisconnectNamedPipe
GetComputerNameExA
GetSystemWindowsDirectoryW
GlobalDeleteAtom
HeapCreate
HeapValidate
GetComputerNameExW
lstrcpynA
CreateDirectoryA
CreateNamedPipeW
GetOEMCP
IsBadStringPtrW
ReleaseMutex
CopyFileW
UnhandledExceptionFilter
LCMapStringW
FindFirstFileW
EnumResourceNamesW
FileTimeToLocalFileTime
MapViewOfFile
SetHandleInformation
CompareFileTime
GlobalCompact
LoadLibraryExW
LocalFree
lstrcatW
VirtualAlloc
ConnectNamedPipe
GetSystemDefaultUILanguage
VirtualProtect
DuplicateHandle
EnumResourceLanguagesA
GetSystemWindowsDirectoryA
LoadLibraryA
GetTempPathW
SizeofResource
GlobalLock
GetVersionExA
GlobalMemoryStatusEx
OpenFileMappingW
lstrcpyA
GetStdHandle
lstrcmpA
msvcrt
fclose
_controlfp
floor
wcschr
perror
swprintf
__set_app_type
__p__fmode
localtime
__p__commode
putchar
_amsg_exit
getenv
isdigit
_initterm
wcsrchr
setvbuf
wcstod
atol
_ismbblead
_XcptFilter
system
islower
_exit
strpbrk
wcslen
_cexit
strcpy
iswspace
remove
free
time
__setusermatherr
isspace
wcstombs
fgetc
__getmainargs
isalnum
printf
vsprintf
iswdigit
isalpha
wcscpy
wcscat
clearerr
fgets
strspn
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bit Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.insec Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.inmin Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wall Size: 512B - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ