?CreateDlgMessage@@YGHPAXPADK|U
Static task
static1
Behavioral task
behavioral1
Sample
d5e4808d9f8dffffa8b24ab188be8cb81ecdf120126cbf95634266c96e19e6a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5e4808d9f8dffffa8b24ab188be8cb81ecdf120126cbf95634266c96e19e6a7.exe
Resource
win10v2004-20220812-en
General
-
Target
d5e4808d9f8dffffa8b24ab188be8cb81ecdf120126cbf95634266c96e19e6a7
-
Size
173KB
-
MD5
2143e88a4b302a882364a27e1527f630
-
SHA1
c622f25587ea51eb6a17b30bf9bcfd26e2b88e29
-
SHA256
d5e4808d9f8dffffa8b24ab188be8cb81ecdf120126cbf95634266c96e19e6a7
-
SHA512
3b1d816790ca742c26f96a75927a7bde80ccc4fe19a59d31b5e3d5c56a998ab6953103001135f65c10c2b9af99fe6715b9f11472e6becb720afae062628efa08
-
SSDEEP
3072:fsBkFMQiCd2IItT3rR1Oz9vJY63gY5TzEhHxla71dliCB/djQTJns6i9ens3yuh+:0BiM8uPR1OzIWncxcLg6JQ1nbi4cz5A
Malware Config
Signatures
Files
-
d5e4808d9f8dffffa8b24ab188be8cb81ecdf120126cbf95634266c96e19e6a7.exe windows x86
6ea8c90275a0fa4af698a39de65df1ca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ChrCmpIW
kernel32
LoadLibraryExA
FindFirstChangeNotificationW
GetModuleHandleW
GetTimeZoneInformation
OpenFileMappingW
GetModuleFileNameA
ResumeThread
LoadLibraryA
lstrlenA
msvcrt
_controlfp
strlen
__set_app_type
__p__fmode
__p__commode
_amsg_exit
ftell
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs
gdi32
Rectangle
GetCharWidth32W
PolyBezier
LineTo
GetDIBColorTable
user32
IsCharUpperW
GetSystemMetrics
UnloadKeyboardLayout
LoadImageA
FrameRect
GetWindowDC
GetUserObjectInformationA
LoadImageW
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xyz Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 143KB - Virtual size: 333KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE