?BinaryRedirectNetDYuyhDBH@@YGKGE[D
Static task
static1
Behavioral task
behavioral1
Sample
162c166766fa8de90410ed67161d78ab58f655ef013a4cdc9b7e8b4435b5f0a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
162c166766fa8de90410ed67161d78ab58f655ef013a4cdc9b7e8b4435b5f0a5.exe
Resource
win10v2004-20221111-en
General
-
Target
162c166766fa8de90410ed67161d78ab58f655ef013a4cdc9b7e8b4435b5f0a5
-
Size
142KB
-
MD5
20c8ab78c8f698d9bb323ebf6216c391
-
SHA1
4d3219f6d47eac346eecb42de0758217a41efd72
-
SHA256
162c166766fa8de90410ed67161d78ab58f655ef013a4cdc9b7e8b4435b5f0a5
-
SHA512
0b27071182c4b86244c94aeb34ebbc68a0b5578b6da3419f70a6731b74d6e90235e386eb27dcff52007fa4b10b089e530186d0c2df7f6e42835f6c88933c18c3
-
SSDEEP
3072:ih/REj8E1k8tLa+JleZDnM5/J4G/HUH9BGVn/GvXkh8:ih/R21k8zeZzc/OGy9e/uk
Malware Config
Signatures
Files
-
162c166766fa8de90410ed67161d78ab58f655ef013a4cdc9b7e8b4435b5f0a5.exe windows x86
fb938066389721a71dc34a10d1a866db
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlIsA
user32
ScrollWindowEx
CharUpperBuffW
LookupIconIdFromDirectory
InvalidateRgn
GetMonitorInfoW
GetDlgItemTextW
DrawTextExW
CharToOemA
CreateAcceleratorTableW
SetDlgItemTextA
CheckRadioButton
GetKeyboardType
ReleaseDC
CharLowerA
ScreenToClient
LoadStringA
SetCursorPos
GetTopWindow
MapVirtualKeyA
IsWindowVisible
GetLastActivePopup
LoadBitmapW
GetMenuItemCount
BeginPaint
BringWindowToTop
GetWindowDC
RegisterHotKey
mouse_event
GetUserObjectInformationW
IsCharLowerA
DrawTextA
ToUnicodeEx
SetCursor
SendMessageTimeoutA
RegisterClassExA
CreateMenu
DefDlgProcW
DeferWindowPos
IntersectRect
IsMenu
IsZoomed
MessageBoxA
SetRectEmpty
GetWindowRect
GetSystemMenu
GetCaretPos
CreateIconIndirect
CreateDialogParamW
PostQuitMessage
AllowSetForegroundWindow
GetClassLongW
CharUpperBuffA
OffsetRect
SetForegroundWindow
TrackPopupMenuEx
PeekMessageA
IsCharAlphaNumericW
EnableWindow
FillRect
IsRectEmpty
DispatchMessageA
ShowWindowAsync
RegisterWindowMessageW
ChildWindowFromPoint
IsWindow
GetMenuItemRect
GetKeyState
SetWindowPlacement
keybd_event
GetAltTabInfoA
DialogBoxParamW
GetWindowTextLengthW
CharToOemBuffA
SystemParametersInfoA
RegisterWindowMessageA
CheckMenuRadioItem
ClipCursor
SetUserObjectInformationW
GetScrollRange
MessageBoxExA
DestroyMenu
GetDlgItem
SwitchToThisWindow
CheckMenuItem
GetKeyboardLayoutList
SetWindowTextW
EnumChildWindows
DrawFrameControl
InflateRect
CopyImage
ShowOwnedPopups
SendMessageW
SendDlgItemMessageA
ChangeMenuW
GetMenuStringA
MapVirtualKeyW
DestroyAcceleratorTable
SetPropW
SetDlgItemTextW
TabbedTextOutW
CharLowerW
ActivateKeyboardLayout
DestroyCursor
CloseDesktop
GetMessageTime
CharToOemW
LoadMenuA
GetIconInfo
EnumThreadWindows
HideCaret
GetMenuState
CharNextExA
PostMessageA
ShowScrollBar
SetWindowPos
RegisterClassExW
CreateDialogParamA
wvsprintfW
UpdateWindow
TranslateAcceleratorA
SetDlgItemInt
RegisterClassA
kernel32
GetModuleFileNameA
FindNextChangeNotification
GetVersion
EnumResourceTypesA
GetLongPathNameW
FlushViewOfFile
GetFileAttributesExA
CreateMutexA
CancelIo
GetModuleFileNameW
GetLastError
DeleteAtom
RegisterWaitForSingleObject
GetProcAddress
DeleteCriticalSection
TlsSetValue
lstrlenW
CreateFileA
GetProcessHeap
IsDBCSLeadByteEx
GetShortPathNameA
SetFileTime
GetTempFileNameW
SetHandleCount
GlobalGetAtomNameA
Sleep
GlobalLock
HeapAlloc
UnhandledExceptionFilter
GetSystemDefaultLangID
WaitForSingleObjectEx
FlushFileBuffers
FoldStringW
GetNumberFormatA
ReleaseMutex
HeapFree
SystemTimeToFileTime
GetTimeFormatA
SetCommState
GetComputerNameW
TransactNamedPipe
GetStartupInfoA
LocalReAlloc
ReleaseSemaphore
SetFileApisToOEM
GetModuleHandleW
GlobalFindAtomW
GetCommModemStatus
GetThreadTimes
HeapValidate
IsBadReadPtr
TryEnterCriticalSection
EnumSystemLocalesA
GetCommTimeouts
GlobalHandle
lstrcpyA
lstrcatA
WaitForMultipleObjects
comdlg32
GetSaveFileNameW
FindTextW
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleW
PageSetupDlgW
msvcrt
towupper
strchr
fprintf
strerror
wcslen
isxdigit
_controlfp
time
putc
malloc
__set_app_type
__p__fmode
getenv
fgets
__p__commode
_amsg_exit
toupper
_initterm
clock
strcspn
_ismbblead
ftell
exit
realloc
_XcptFilter
_exit
bsearch
wcstoul
swprintf
sscanf
_cexit
wcsncpy
putchar
swscanf
iswprint
wcspbrk
wcscspn
wcscpy
__setusermatherr
gmtime
iswdigit
fputs
wcsstr
wcscat
wcscoll
__getmainargs
fflush
Exports
Exports
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ