?TreyTegsFromMopsGuandeadinby@@YGKPCUEyesJotaLogy@@PCUKnapFonsParsDoatba@@PCKUGearRakikefya@@PCUtagSIZE@@ACD@Z
Static task
static1
Behavioral task
behavioral1
Sample
f685dacdb46b13f8ce995d372530628d169b1ec9ff061086d34442572a59c9a1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f685dacdb46b13f8ce995d372530628d169b1ec9ff061086d34442572a59c9a1.exe
Resource
win10v2004-20221111-en
General
-
Target
f685dacdb46b13f8ce995d372530628d169b1ec9ff061086d34442572a59c9a1
-
Size
207KB
-
MD5
443d3aa2c36f9d29b25ebb80e1afdbb0
-
SHA1
3ebbe7a5ee0f6d43741aa88daba532447b0873ce
-
SHA256
f685dacdb46b13f8ce995d372530628d169b1ec9ff061086d34442572a59c9a1
-
SHA512
899bc48d4a6da4fbb9792b60d290e892a68031069be36c470d96f747672d8cc334513ba2509fc95a6400d31dfc6cc2708620d1189204896b81e2ec819eabab9b
-
SSDEEP
6144:0HzNZKb0yA+JFHVE6FLDo0zVE7jP7r39gProjOb:SZKb7blTI069gDojOb
Malware Config
Signatures
Files
-
f685dacdb46b13f8ce995d372530628d169b1ec9ff061086d34442572a59c9a1.exe windows x86
3dd59e996a6fa68a0ced02ad1ac7f5d1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageTimeoutA
BroadcastSystemMessageW
GetClassNameW
DrawFocusRect
GetScrollRange
PtInRect
GetMenuCheckMarkDimensions
CreateWindowStationW
DrawTextW
wvsprintfW
CharNextW
PostThreadMessageA
InvertRect
EndPaint
ClipCursor
GrayStringA
DefFrameProcA
ActivateKeyboardLayout
SetMenuItemInfoW
OpenClipboard
GetMenuItemCount
CharUpperW
TranslateAcceleratorA
RegisterClipboardFormatA
CharPrevW
OemToCharW
DefWindowProcW
SetMenuItemInfoA
SetUserObjectSecurity
OemToCharA
IntersectRect
DrawIcon
CharUpperA
SystemParametersInfoA
FindWindowExW
DestroyCaret
SetWindowsHookExA
EmptyClipboard
MessageBoxA
GetKeyboardLayout
GetWindowTextA
InflateRect
SetParent
WindowFromPoint
IsCharAlphaW
DdeDisconnectList
ChangeDisplaySettingsW
DdeGetLastError
InsertMenuItemA
GetUpdateRgn
CharToOemBuffA
SetUserObjectInformationW
DdeQueryStringA
WinHelpW
RegisterHotKey
DdeDisconnect
gdi32
CreateRoundRectRgn
CreateFontIndirectA
EnumFontFamiliesExA
SetLayout
UnrealizeObject
ntdll
_allmul
_allshl
_aulldiv
Exports
Exports
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Bads Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Each Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Whipbi Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.todlo Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Hajiin Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Fopsen Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Bust Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Wairom Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Moatza Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.insis Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.milsi Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ