?ForwardControlItem@@YGK_KK:O
Static task
static1
Behavioral task
behavioral1
Sample
a76b8dc861d73d62ae739710cbdc042bc5e9b7605a630cdf43acfaa5c8a9d102.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a76b8dc861d73d62ae739710cbdc042bc5e9b7605a630cdf43acfaa5c8a9d102.exe
Resource
win10v2004-20220812-en
General
-
Target
a76b8dc861d73d62ae739710cbdc042bc5e9b7605a630cdf43acfaa5c8a9d102
-
Size
175KB
-
MD5
b96ff7b4b9bde5f5af9c6888143bcc52
-
SHA1
ec3189822c979667dae285c8300b8c31431a61ce
-
SHA256
a76b8dc861d73d62ae739710cbdc042bc5e9b7605a630cdf43acfaa5c8a9d102
-
SHA512
cee530874c8ea8b4a090ab41759621176d55457c74a3daf7afb2c0889373abb2901542f185ed696a1d8a03105bde74c38df4910e73e4e1a46d08396827befa19
-
SSDEEP
3072:+OSxlmmMYOaYLN4hJ5THgtmAetVZ8wiNbrihtCUgGXymfH7bxfTWfZiY8GhDA5qb:R2lmmRFeqngdeSwFMGXFPRfTWhE75vC
Malware Config
Signatures
Files
-
a76b8dc861d73d62ae739710cbdc042bc5e9b7605a630cdf43acfaa5c8a9d102.exe windows x86
f9f2168845aa6ac3519335c9d4d2fb59
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Write
CreatePropertySheetPageW
ImageList_Remove
ImageList_Create
DestroyPropertySheetPage
CreateToolbarEx
kernel32
PulseEvent
GlobalLock
LocalReAlloc
ReleaseSemaphore
CreateWaitableTimerA
GetNumberFormatA
TlsFree
GetUserDefaultLangID
CopyFileW
lstrcpyA
IsValidLanguageGroup
GlobalFindAtomW
SetTimerQueueTimer
SearchPathW
SetFileApisToOEM
GetStartupInfoW
FoldStringW
TransactNamedPipe
lstrcmpiA
FindFirstFileA
OpenFile
CopyFileA
ReadFile
GetFileAttributesExA
HeapCreate
CreateEventW
OpenSemaphoreW
GetAtomNameW
GetFileSize
LockFile
GlobalAlloc
SetLastError
GlobalFree
IsBadWritePtr
GetTempFileNameW
GetOverlappedResult
GetTimeFormatA
GetTempPathA
GetFileAttributesExW
ExitThread
LCMapStringW
GetSystemDefaultLangID
GetCurrentDirectoryW
CancelIo
LoadLibraryA
ConnectNamedPipe
GetDateFormatA
ResetEvent
UnhandledExceptionFilter
lstrcpynA
IsValidLocale
SetCommBreak
SetCurrentDirectoryA
AreFileApisANSI
GetFileType
shlwapi
PathIsUNCA
user32
CharToOemA
GetWindowRect
SetRectEmpty
GetForegroundWindow
ActivateKeyboardLayout
DefFrameProcW
SetCursor
EnumChildWindows
GetDCEx
CharUpperBuffW
DefFrameProcA
DrawIcon
GetClassNameW
GetSysColorBrush
SetTimer
GetMenuItemCount
DestroyCaret
DrawTextW
VkKeyScanW
SetForegroundWindow
SetRect
SetWindowPlacement
InternalGetWindowText
CreateIconIndirect
GetKeyNameTextW
IsWindow
PostThreadMessageW
LoadBitmapW
SendDlgItemMessageA
ScrollWindow
DrawTextExW
MapWindowPoints
SetParent
AppendMenuA
GetClassInfoA
CheckMenuRadioItem
DestroyWindow
UnloadKeyboardLayout
PostMessageW
IsChild
EnumThreadWindows
SystemParametersInfoW
LoadIconW
SetMenuDefaultItem
ShowWindowAsync
GetMonitorInfoW
BeginPaint
OffsetRect
GetWindowTextA
GetUserObjectInformationA
CreateWindowExW
SetUserObjectInformationW
LoadImageW
GetKeyState
PostMessageA
GetCaretPos
EnumWindows
CharNextExA
SetMenu
GetClipCursor
LoadStringW
DrawIconEx
MoveWindow
SetDlgItemInt
HideCaret
GetKeyboardLayoutList
AdjustWindowRectEx
InvertRect
CascadeWindows
GetLastActivePopup
GetClassLongW
TabbedTextOutW
SetDlgItemTextW
GetParent
RegisterClassExW
IsWindowUnicode
RegisterClassExA
GetMenuStringA
CharLowerA
InflateRect
DrawStateW
MessageBoxA
TrackPopupMenuEx
GetMessageExtraInfo
OemToCharBuffA
SystemParametersInfoA
GetClassInfoExW
IsCharUpperA
ShowOwnedPopups
CharPrevW
GetShellWindow
ClipCursor
SetWindowTextW
DeferWindowPos
ShowWindow
CopyRect
DragObject
InvalidateRect
DestroyIcon
GetDlgItemInt
FindWindowW
CheckRadioButton
DefWindowProcA
GetKeyboardType
SendNotifyMessageW
CharNextA
IsCharAlphaNumericW
DefDlgProcA
SetLastErrorEx
CharToOemW
CreateCursor
CreateDialogParamW
ChangeMenuW
DeleteMenu
SetPropW
RemovePropW
CreateDialogIndirectParamW
EnableScrollBar
msvcrt
wcscmp
_controlfp
mbtowc
getc
setvbuf
isprint
strncmp
__set_app_type
__p__fmode
putchar
strcoll
strtol
wcspbrk
atoi
malloc
floor
strerror
islower
strchr
wcstok
free
__p__commode
_amsg_exit
fgets
_initterm
clock
rand
fprintf
isupper
gmtime
iswalpha
memset
clearerr
_ismbblead
fclose
puts
iswspace
strstr
ungetc
exit
wcscpy
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs
iswprint
wcstoul
srand
Exports
Exports
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.init Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erts Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wall Size: 1024B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.info Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ