_CallWindowProcACallWindowProcA@0
Static task
static1
Behavioral task
behavioral1
Sample
356cc71e051459c552698a8f498807e18a6b760134848edb39a46b6e3c631763.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
356cc71e051459c552698a8f498807e18a6b760134848edb39a46b6e3c631763.exe
Resource
win10v2004-20220901-en
General
-
Target
356cc71e051459c552698a8f498807e18a6b760134848edb39a46b6e3c631763
-
Size
193KB
-
MD5
41394a1baefbd506b4209ad4f220f165
-
SHA1
b553d8f8a49c643834d69463ddac473c95567eef
-
SHA256
356cc71e051459c552698a8f498807e18a6b760134848edb39a46b6e3c631763
-
SHA512
16dc008077e8e29203f0a8b4f287a814fcd47e45b2156db2de880a4c32c098a8e9907c7e465b1455e8f7dc2fac188f3c05534e25f4cac0df2ced0e515329a9f8
-
SSDEEP
3072:sLC2t25AAjlhkR709PNPv/ur52C7UZJtRzFguqchFD4plE5CYwFnjEj:sLdAJuR709PNPv/uddQ3z7D4wz
Malware Config
Signatures
Files
-
356cc71e051459c552698a8f498807e18a6b760134848edb39a46b6e3c631763.exe windows x86
0bf79384330c2b6af139c0036262e980
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharLowerA
kernel32
DeleteFileW
GetLocaleInfoW
HeapLock
VerifyVersionInfoW
GetThreadPriority
FoldStringW
ResumeThread
CloseHandle
HeapFree
TryEnterCriticalSection
shlwapi
PathFindExtensionA
Exports
Exports
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rteytr Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdgfsd Size: 512B - Virtual size: 382B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.njhg Size: 512B - Virtual size: 99B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reteef Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ