?MNDkjiduIUDIUiuDIUdIOpDJKKDLKJDLIuyd@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
f6d943f0c22fbe93c130b56e725bcebf809fd538fd61e4bfc24ec626d121c20e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f6d943f0c22fbe93c130b56e725bcebf809fd538fd61e4bfc24ec626d121c20e.exe
Resource
win10v2004-20221111-en
General
-
Target
f6d943f0c22fbe93c130b56e725bcebf809fd538fd61e4bfc24ec626d121c20e
-
Size
245KB
-
MD5
44449f247a792b91470a8c1d8f0f6ad0
-
SHA1
2b6c81f882dd130e88bb01397e9d8444d88f9532
-
SHA256
f6d943f0c22fbe93c130b56e725bcebf809fd538fd61e4bfc24ec626d121c20e
-
SHA512
65113696c4ca661819368aa54debb704f9c29f8b797266718e4be5d3fd3e6cef8f3c4ba13042701f02b9db00727d6d2410a74f6641c8f4306bf4eca4b9bccb5e
-
SSDEEP
3072:tDChcAg0TpB5mulhSS47W7/lxRhF1QCpNl+1LCcwXZqHPhrJLVEu+VbzC7TH33uK:ohc09muSRi/l3pn3cKZqHprdUW/
Malware Config
Signatures
Files
-
f6d943f0c22fbe93c130b56e725bcebf809fd538fd61e4bfc24ec626d121c20e.exe windows x86
d75c8abfdbef7b9517569a375953bcf5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
WindowFromPoint
PostMessageA
GetWindowDC
FrameRect
GetSysColor
GetForegroundWindow
GetSystemMenu
KillTimer
DrawStateW
RegisterHotKey
CharToOemW
DrawMenuBar
GetDlgItemInt
SendMessageTimeoutA
IsIconic
SetRect
SetParent
ScreenToClient
MoveWindow
CharUpperBuffA
GetKeyboardLayoutList
OpenDesktopW
IsWindowUnicode
DefWindowProcW
IsWindow
GetClassInfoW
GetClientRect
InsertMenuItemW
InvalidateRect
SendInput
GetUserObjectInformationA
InSendMessageEx
ClientToScreen
ModifyMenuW
LoadAcceleratorsA
CharUpperA
OpenIcon
InsertMenuW
gdi32
GetMapMode
RectInRegion
PathToRegion
GetViewportOrgEx
GetObjectA
RestoreDC
OffsetRgn
LineDDA
BeginPath
EndPath
CreateHalftonePalette
GetBrushOrgEx
Polyline
GetDIBColorTable
EnumFontsW
Rectangle
FillRgn
SetDIBColorTable
kernel32
HeapAlloc
lstrlenA
GetCommModemStatus
GetCommConfig
HeapWalk
HeapSize
WaitForMultipleObjects
GlobalGetAtomNameW
FindNextFileW
IsValidLanguageGroup
FindNextFileA
SetTimerQueueTimer
AddAtomW
LoadLibraryW
SetFilePointer
SetThreadAffinityMask
GetNumberFormatA
Exports
Exports
Sections
.text Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 56KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ