__SetMenuContextHelpId@12
Static task
static1
Behavioral task
behavioral1
Sample
b5d7f50a59b3cf2586c65fc170e0b9fc1da9b8011fe27decd608b95fc3f5bf7e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5d7f50a59b3cf2586c65fc170e0b9fc1da9b8011fe27decd608b95fc3f5bf7e.exe
Resource
win10v2004-20220812-en
General
-
Target
b5d7f50a59b3cf2586c65fc170e0b9fc1da9b8011fe27decd608b95fc3f5bf7e
-
Size
147KB
-
MD5
0d9dfb55bf3edbf86f13cdb1880e6856
-
SHA1
5a5d8d7d2b651746f6ca5897ad485b2be0e5aea4
-
SHA256
b5d7f50a59b3cf2586c65fc170e0b9fc1da9b8011fe27decd608b95fc3f5bf7e
-
SHA512
3da06252d97cab82f6c645b167a407cf5939c12465210cfd23ea0de933d6c2d37308af7d3f24b0aa819c91e08c19feee69eadd8194fa4b11ad781d6f9d990210
-
SSDEEP
3072:/7woK1uQ8MEU1u0euETaMvn0kmRXVcMrtfU4MXY4e+Sl77:/3KZ/EU1RisxU4CY4e+I7
Malware Config
Signatures
Files
-
b5d7f50a59b3cf2586c65fc170e0b9fc1da9b8011fe27decd608b95fc3f5bf7e.exe windows x86
3015a0b106c90673684240256e756958
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrIsIntlEqualA
PathAppendA
StrCmpW
StrToIntExW
PathCommonPrefixA
StrStrNIW
shell32
ord147
kernel32
OpenEventW
FileTimeToDosDateTime
GetFileSize
FreeLibrary
SetHandleInformation
VerifyVersionInfoA
GetFileAttributesW
OpenWaitableTimerA
SetCommMask
GetCommTimeouts
GetFileTime
EnumResourceLanguagesW
LoadLibraryExW
ClearCommError
lstrcpyW
OpenSemaphoreW
GetNamedPipeInfo
CreateEventA
LoadLibraryW
lstrcmpW
user32
DrawFocusRect
GetDC
SetSystemCursor
SetActiveWindow
ScreenToClient
GetSystemMenu
GetNextDlgGroupItem
GetDlgItemInt
SendNotifyMessageW
UnloadKeyboardLayout
ScrollDC
GetKeyboardLayout
LoadMenuW
SetWindowsHookA
DestroyCaret
EnumPropsExW
SetMenu
SendMessageTimeoutW
DrawMenuBar
SetCaretBlinkTime
DefMDIChildProcA
AdjustWindowRect
EnumDisplayDevicesA
MessageBoxExW
DefWindowProcW
GetWindow
ShowScrollBar
gdi32
LPtoDP
GetEnhMetaFileDescriptionW
GetRandomRgn
CloseMetaFile
GetTextFaceW
SaveDC
GetCharABCWidthsW
GetTextExtentExPointW
GetMetaFileBitsEx
CreateDIBPatternBrush
FillPath
SetStretchBltMode
UpdateColors
advapi32
SetAclInformation
AddAuditAccessAceEx
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ex_dat Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.i_text Size: 1024B - Virtual size: 638B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mem_0 Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mconst Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat_s Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 894B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ