?ForwardControlItem@@YGK_KK:O
Static task
static1
Behavioral task
behavioral1
Sample
09abea1bff1370811b6bab08c5dcafe71c498730ef1111f02c57f7c889c07671.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
09abea1bff1370811b6bab08c5dcafe71c498730ef1111f02c57f7c889c07671.exe
Resource
win10v2004-20220812-en
General
-
Target
09abea1bff1370811b6bab08c5dcafe71c498730ef1111f02c57f7c889c07671
-
Size
148KB
-
MD5
5084a5a89762e60236ac94340ed0dd40
-
SHA1
51fcf794e7f93080d18fa2f0a834d104e1d876ab
-
SHA256
09abea1bff1370811b6bab08c5dcafe71c498730ef1111f02c57f7c889c07671
-
SHA512
0173a0029a05f227e4c3e695600b9712d9a81a8460c59a925b6d53781157874d1921cfccdf8a7a46f389c828d4cbcfc9cd67e1ab4243fc81d5aea97d1480b2ee
-
SSDEEP
3072:P/mqcuVavO+70tf+pAqMqcrhKPtF9eGNQJ6:nmRo+p/MxrhOMJ
Malware Config
Signatures
Files
-
09abea1bff1370811b6bab08c5dcafe71c498730ef1111f02c57f7c889c07671.exe windows x86
ee42267bd29fd1aa84cbc6206aa29714
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextLengthW
InvalidateRect
BeginPaint
IsWindowUnicode
DefDlgProcW
SetMenuItemBitmaps
AdjustWindowRectEx
GetCaretPos
ShowCaret
MoveWindow
GetMonitorInfoW
GetKeyboardType
GetClassNameW
GetDlgCtrlID
ReplyMessage
DefWindowProcA
GetSystemMenu
CharNextW
CreatePopupMenu
CloseDesktop
GetMenuItemRect
SetParent
SetWindowLongA
CallWindowProcW
DrawTextA
GetUserObjectInformationA
ToUnicodeEx
CharUpperBuffW
InsertMenuA
PostMessageA
WaitMessage
SetRect
GetForegroundWindow
SetScrollInfo
IsMenu
GetWindowLongW
CheckRadioButton
CharLowerA
GetUpdateRect
SetWindowRgn
MessageBoxW
ModifyMenuW
UnloadKeyboardLayout
CharUpperA
GetClientRect
SetWindowTextW
SendNotifyMessageW
CreateDialogParamW
EnableWindow
RegisterClassExW
DrawTextW
DrawIcon
AllowSetForegroundWindow
GetClassInfoExW
CascadeWindows
RemoveMenu
IsZoomed
FindWindowW
GetMessageTime
MonitorFromPoint
UnionRect
DialogBoxParamA
IsDlgButtonChecked
HideCaret
LoadCursorW
AttachThreadInput
GetMenuItemID
GetMenu
SystemParametersInfoA
InternalGetWindowText
GetSubMenu
RedrawWindow
ExitWindowsEx
RemovePropW
GetScrollPos
GetMenuItemInfoW
CopyAcceleratorTableW
GetSystemMetrics
wvsprintfA
AppendMenuW
DrawStateA
IsCharAlphaNumericW
ArrangeIconicWindows
PostThreadMessageA
ClipCursor
ShowWindow
OemToCharA
ActivateKeyboardLayout
RegisterHotKey
DialogBoxIndirectParamA
LoadBitmapW
SwitchToThisWindow
DialogBoxParamW
GetDCEx
LoadCursorA
TabbedTextOutW
GetMenuCheckMarkDimensions
GetDC
ShowCursor
MessageBoxExA
ChildWindowFromPointEx
TileWindows
CharToOemBuffA
ScrollWindow
MapVirtualKeyA
GetWindowTextW
DispatchMessageW
wsprintfA
BringWindowToTop
CreateWindowExA
GetDlgItemTextW
SetDlgItemInt
AdjustWindowRect
HiliteMenuItem
DrawStateW
GrayStringW
FindWindowA
SetLastErrorEx
wsprintfW
PostThreadMessageW
TrackPopupMenuEx
shlwapi
PathIsUNCA
msvcrt
atol
wcstod
exit
printf
strtol
strspn
wcscoll
isprint
wcsstr
iswctype
fgetc
qsort
wcscspn
_controlfp
__set_app_type
__p__fmode
mbstowcs
__p__commode
_amsg_exit
iswalpha
wcscpy
_initterm
_ismbblead
gets
clock
_XcptFilter
_exit
iswdigit
strchr
wcstok
floor
mktime
memset
fclose
bsearch
vswprintf
_cexit
fputs
free
fseek
malloc
strncmp
strtoul
localtime
towupper
toupper
__setusermatherr
strcoll
strrchr
__getmainargs
kernel32
ReleaseMutex
GetCommConfig
VirtualProtect
GetTempPathA
FindCloseChangeNotification
LoadLibraryW
CreateWaitableTimerA
FindFirstFileA
ClearCommError
SetHandleCount
DefineDosDeviceW
IsBadWritePtr
ClearCommBreak
GetComputerNameExA
GetVersionExA
EnumResourceNamesW
GetSystemDirectoryW
MoveFileExW
GetCommandLineA
GetLongPathNameW
CreateEventA
GlobalDeleteAtom
GetModuleFileNameA
UnmapViewOfFile
GetFileAttributesW
VerifyVersionInfoW
GetStartupInfoW
OpenEventA
GetCommTimeouts
lstrlenA
FlushFileBuffers
GetModuleHandleA
GetSystemDefaultUILanguage
CreateEventW
GetTickCount
GetTempFileNameA
CreateWaitableTimerW
GetStdHandle
TlsSetValue
GetLocaleInfoA
GetTempPathW
CallNamedPipeW
SizeofResource
SetCurrentDirectoryW
SetCommState
MulDiv
HeapAlloc
SetCurrentDirectoryA
SystemTimeToFileTime
InitializeCriticalSection
lstrcpyA
GetCommState
SetMailslotInfo
SetFileTime
Exports
Exports
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ips1 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ips2 Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.read Size: 512B - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ips3 Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ips4 Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ