?DialogReactivateIns@@YGK_KHE[D
Static task
static1
Behavioral task
behavioral1
Sample
42e08c7c5dc29e09ddc46d138533619f19de9439795c26cf2e0f8f438fb9c896.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
42e08c7c5dc29e09ddc46d138533619f19de9439795c26cf2e0f8f438fb9c896.exe
Resource
win10v2004-20220901-en
General
-
Target
42e08c7c5dc29e09ddc46d138533619f19de9439795c26cf2e0f8f438fb9c896
-
Size
146KB
-
MD5
92da168e5ef7ebf43e201938f38e8e00
-
SHA1
94811fb20f880a766c5ad11d3ed690755e5ddee2
-
SHA256
42e08c7c5dc29e09ddc46d138533619f19de9439795c26cf2e0f8f438fb9c896
-
SHA512
0790fb1ed4d0abae52cd2e269f5ce0bc8ad1dca38fff3cd93236eb63aa8cd82cc37f3f77f4393162f08ea220f872f9d68717ebc4e4dcf7d96b8b49436d66ed73
-
SSDEEP
3072:YYWo21JObssbURXW/E6uTx2rKz0WTPKO0rAjeZm+F9e:Mo2ObyJWhuuKz0GKOE/M+
Malware Config
Signatures
Files
-
42e08c7c5dc29e09ddc46d138533619f19de9439795c26cf2e0f8f438fb9c896.exe windows x86
5c209992574fc90c6c7e1b57763c0f2c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorW
GetFileTitleW
ReplaceTextW
CommDlgExtendedError
kernel32
SetCommBreak
VirtualAlloc
ClearCommBreak
GetFileAttributesW
TlsGetValue
SearchPathA
ClearCommError
CreateFileA
GetBinaryTypeW
ConvertDefaultLocale
GetComputerNameA
GetFileAttributesExA
GetStringTypeExW
lstrcpyW
SetFilePointer
IsBadCodePtr
DeviceIoControl
FindNextChangeNotification
CompareFileTime
GetNumberFormatA
FindFirstChangeNotificationW
GetFileAttributesA
LoadLibraryExW
OpenFileMappingW
VirtualProtect
GetFileType
VirtualFree
SetFileApisToOEM
CreateFileMappingW
SetupComm
LCMapStringA
GlobalReAlloc
GetCommModemStatus
SetFileAttributesW
GetCompressedFileSizeW
SystemTimeToFileTime
GlobalLock
EnumResourceNamesW
WaitForSingleObjectEx
LoadLibraryA
FindClose
CreateEventW
GetProcAddress
GetAtomNameW
HeapWalk
MoveFileExW
GlobalFree
GetModuleHandleW
RemoveDirectoryW
RaiseException
OpenFileMappingA
GetCurrentDirectoryW
ResumeThread
CreateDirectoryW
SearchPathW
msvcrt
remove
gets
toupper
wcschr
wcscat
_controlfp
tolower
isxdigit
__set_app_type
strerror
ungetc
__p__fmode
fclose
wcsncmp
gmtime
isprint
strchr
realloc
__p__commode
_amsg_exit
putc
wcslen
_initterm
_ismbblead
strrchr
puts
strtoul
_XcptFilter
wcstombs
wcstod
iswxdigit
fgets
ftell
swprintf
iswdigit
fseek
iswctype
_exit
_cexit
sscanf
__setusermatherr
strncmp
system
wcscmp
mbstowcs
clearerr
__getmainargs
user32
CharNextW
TrackPopupMenuEx
OpenInputDesktop
IsZoomed
GetUpdateRgn
GetMonitorInfoW
AllowSetForegroundWindow
TranslateMessage
DispatchMessageA
GetForegroundWindow
SetMenuItemInfoW
GetIconInfo
GetMenu
GetClassNameW
OpenDesktopW
MessageBoxExW
GetUpdateRect
HiliteMenuItem
GetKeyboardLayoutNameW
EndDialog
MessageBoxExA
CharPrevA
RegisterHotKey
PeekMessageA
mouse_event
DestroyCursor
SystemParametersInfoA
DrawStateA
GetMenuItemCount
InvertRect
DestroyIcon
LoadStringA
SetCaretPos
SetFocus
CopyRect
GetClassInfoExA
DefFrameProcW
SystemParametersInfoW
GetMessageTime
DrawTextA
GetKeyNameTextW
LoadStringW
GetSystemMenu
SetWindowRgn
CharToOemA
CharNextA
EnableWindow
CopyImage
CreateWindowExA
GetSysColorBrush
SendMessageTimeoutW
wvsprintfA
EnumThreadWindows
HideCaret
LoadIconW
IntersectRect
FrameRect
CharToOemBuffA
RegisterWindowMessageW
BringWindowToTop
GetWindowTextLengthW
SetWindowTextA
GetClassInfoExW
wsprintfW
wsprintfA
ExitWindowsEx
CreateCaret
DestroyCaret
CreateCursor
AdjustWindowRectEx
DialogBoxIndirectParamW
DrawFocusRect
FillRect
MapDialogRect
AttachThreadInput
DrawAnimatedRects
CheckMenuRadioItem
SetWindowPlacement
CharPrevW
IsCharAlphaA
GetMenuItemID
ActivateKeyboardLayout
InsertMenuItemW
LoadMenuW
IsRectEmpty
GetMenuItemInfoW
GetActiveWindow
DefDlgProcA
CheckMenuItem
LoadImageW
IsCharLowerA
TranslateAcceleratorW
DrawTextW
IsDialogMessageW
GetKeyboardLayout
InvalidateRect
ScrollWindow
InvalidateRgn
GetDC
DragObject
GetPropW
SendMessageA
LoadAcceleratorsA
SendMessageTimeoutA
DestroyAcceleratorTable
ScreenToClient
SetWindowLongA
EndPaint
GetMessagePos
GetWindowTextW
IsMenu
IsChild
ChangeMenuW
CreateMenu
FindWindowW
SendNotifyMessageW
GetNextDlgGroupItem
wvsprintfW
SetScrollPos
CharLowerA
SetRectEmpty
ToUnicodeEx
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ