?CreateDlgMessage@@YGHPAXPADK|U
Static task
static1
Behavioral task
behavioral1
Sample
d18b90342c9c4579dd8ecd9327f39395155c94c8040a7d52747dfb11bfd95894.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d18b90342c9c4579dd8ecd9327f39395155c94c8040a7d52747dfb11bfd95894.exe
Resource
win10v2004-20220901-en
General
-
Target
d18b90342c9c4579dd8ecd9327f39395155c94c8040a7d52747dfb11bfd95894
-
Size
134KB
-
MD5
8d9288a0bbfa1d5c6fddd66ee48f23db
-
SHA1
4a6462b55298062c2529ae135667640632450de0
-
SHA256
d18b90342c9c4579dd8ecd9327f39395155c94c8040a7d52747dfb11bfd95894
-
SHA512
bfd291dfad7651efd2528cbb98141d1ea9fb0c0868dcd5b2f447c69cd3aa84a8b65b040662cac5ce5b7e3938599271df519b3b5d176bc5f81241af605f2f535d
-
SSDEEP
3072:URk4bhj8ulAitmwi1b32HSziRSnqE+7djo8d9/HB:A1Ku4wiBIR+qkiP
Malware Config
Signatures
Files
-
d18b90342c9c4579dd8ecd9327f39395155c94c8040a7d52747dfb11bfd95894.exe windows x86
01ac3c9bc777a401df83a1a0e73defc1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ChrCmpIW
UrlGetLocationW
kernel32
GetModuleFileNameA
GetFileAttributesA
LoadLibraryExA
lstrcmpiW
OpenEventA
GetVersion
lstrcatA
lstrlenA
HeapUnlock
LoadLibraryA
msvcrt
_controlfp
setlocale
system
__set_app_type
strncmp
__p__fmode
__p__commode
_amsg_exit
memset
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
atoi
__getmainargs
user32
OpenInputDesktop
GetMenuStringW
MoveWindow
GetDC
GetKeyboardLayoutNameW
ModifyMenuW
wsprintfW
DispatchMessageA
gdi32
CreateDiscardableBitmap
CreateDCW
Polyline
Polygon
StartDocW
SelectClipRgn
Exports
Exports
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idir Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 104KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE