WNDPROC
Static task
static1
Behavioral task
behavioral1
Sample
c2d7e8be5f254608c25b426400e1ec5415693860fa262438e5b5c2835544991f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c2d7e8be5f254608c25b426400e1ec5415693860fa262438e5b5c2835544991f.exe
Resource
win10v2004-20221111-en
General
-
Target
c2d7e8be5f254608c25b426400e1ec5415693860fa262438e5b5c2835544991f
-
Size
141KB
-
MD5
74bb95612afdec0a1379ca4dfcb9e14f
-
SHA1
fefb9023a0de5c224b70a127abc0abb3fa32e50e
-
SHA256
c2d7e8be5f254608c25b426400e1ec5415693860fa262438e5b5c2835544991f
-
SHA512
e988bcff18356bcc97415e46a09f30161834b626a1d8d4f987e52c4c50818d448dbb462fa51b0e5f2248a0ec8af18ea876a50d9222ac03a452c036d0d408020c
-
SSDEEP
3072:RIPe3hH8JyGGC0RMJsAq5advjtXj0blUPlFkUNNPxQKg:8yGT725c46PlFkUNNPxQ
Malware Config
Signatures
Files
-
c2d7e8be5f254608c25b426400e1ec5415693860fa262438e5b5c2835544991f.exe windows x86
1ce561a28aef43bb799fd1de06050a85
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
CreateSolidBrush
DeleteObject
MoveToEx
SetBkMode
SetTextColor
kernel32
CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
LoadLibraryA
MultiByteToWideChar
ReadFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
VirtualAlloc
VirtualLock
RtlMoveMemory
ole32
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
oleaut32
GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy
user32
BeginPaint
CreateDialogIndirectParamA
CreateDialogParamA
CreateWindowExA
DefWindowProcA
DialogBoxIndirectParamA
DispatchMessageA
EndPaint
FillRect
GetClientRect
GetMessageA
LoadCursorA
LoadIconA
MessageBoxA
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
DialogBoxParamA
DrawTextA
GetWindow
SetRect
WindowFromDC
PostQuitMessage
Exports
Exports
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rloc Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ