?ForwardControlItem@@YGK_KK:O
Static task
static1
Behavioral task
behavioral1
Sample
854151132808632bc36f84c6a2b4eaefa5257c9f9134636c6307925c7228325e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
854151132808632bc36f84c6a2b4eaefa5257c9f9134636c6307925c7228325e.exe
Resource
win10v2004-20221111-en
General
-
Target
854151132808632bc36f84c6a2b4eaefa5257c9f9134636c6307925c7228325e
-
Size
76KB
-
MD5
ce12724aece227ba1eb903315a935fad
-
SHA1
ac7926253cb80fec143365a90bffa1bd79e5e8ae
-
SHA256
854151132808632bc36f84c6a2b4eaefa5257c9f9134636c6307925c7228325e
-
SHA512
88589ef96e0a52d4f17003f5739b4b52847ee40ba69e698c37409a32a8a1fd44e48f72f4809bcea03aa6f8e8d46493692e6203c9deeb40ab0481cf78cfd1720d
-
SSDEEP
1536:pSQ7GvBkvx8IgDF7YGO/OIHMo/m7nOXyCcjm:pfGvmZ8IgJcGqHMo/+Oxci
Malware Config
Signatures
Files
-
854151132808632bc36f84c6a2b4eaefa5257c9f9134636c6307925c7228325e.exe windows x86
8a7171f13af58233d70066843f5698bb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InsertMenuA
RegisterClassA
CharNextExA
GetMessageExtraInfo
GetMessageTime
CharNextW
GetDCEx
GetUserObjectInformationA
IsIconic
SetDlgItemInt
ScrollWindowEx
SendMessageTimeoutA
GetSysColor
IsRectEmpty
CreateWindowExA
SetWindowLongW
OffsetRect
BeginDeferWindowPos
CharLowerA
GetLastActivePopup
SetRect
TileWindows
TranslateAcceleratorA
SystemParametersInfoW
GetMenuState
SystemParametersInfoA
DestroyCaret
LoadMenuA
DrawTextW
IsCharUpperA
LockWindowUpdate
IsDialogMessageA
EnableWindow
ShowWindowAsync
CharUpperA
LoadStringW
TranslateAcceleratorW
PostMessageA
SetMenuDefaultItem
GetClientRect
MessageBoxExW
SendMessageA
InvertRect
CallWindowProcW
CopyRect
wvsprintfA
OpenInputDesktop
SetMenuItemBitmaps
DrawTextA
GetAsyncKeyState
CharToOemW
CreateIconFromResource
InsertMenuW
GetKeyboardLayoutList
SetWindowLongA
TabbedTextOutW
SetScrollInfo
DeferWindowPos
HiliteMenuItem
SetCursor
ExitWindowsEx
SetFocus
GetWindowTextW
CloseDesktop
IsCharAlphaNumericW
CheckRadioButton
IsWindowEnabled
GetSubMenu
ShowWindow
GetNextDlgGroupItem
mouse_event
GetSysColorBrush
FillRect
EndDialog
DefWindowProcA
LoadCursorA
RedrawWindow
CharPrevW
CreateCaret
PostMessageW
EnumWindows
GetMenuStringA
MapDialogRect
CheckMenuRadioItem
SendDlgItemMessageA
RegisterClassExW
GetClassInfoExW
IsWindowUnicode
MessageBoxA
OemToCharBuffA
CopyAcceleratorTableW
GetClassNameW
ShowScrollBar
CheckMenuItem
EnumChildWindows
SetWindowPlacement
GetDlgItemTextW
InsertMenuItemW
SetRectEmpty
OemToCharA
SendNotifyMessageW
GrayStringW
GetScrollRange
LoadMenuW
RegisterClassW
CreateAcceleratorTableW
ReplyMessage
SetCaretPos
GetClassLongW
CallWindowProcA
IsMenu
BeginPaint
GetDlgItem
FrameRect
SendMessageTimeoutW
DrawTextExW
CreateDialogParamW
CreateDialogParamA
GetFocus
CharNextA
ShowCursor
EnableMenuItem
kernel32
LocalAlloc
GetThreadPriority
DuplicateHandle
VerSetConditionMask
lstrcpyA
FlushViewOfFile
GetSystemTimeAsFileTime
ResumeThread
SleepEx
SetCommBreak
ConnectNamedPipe
LockFile
GlobalFree
SizeofResource
EnumResourceLanguagesA
GetDateFormatW
GlobalAddAtomW
IsValidLocale
ConvertDefaultLocale
GetCompressedFileSizeW
FreeLibrary
DisconnectNamedPipe
GetProcAddress
RaiseException
SetFilePointer
GetTempPathA
GetAtomNameW
OpenFileMappingW
CreateDirectoryW
SetSystemTime
SetThreadLocale
GetFileAttributesA
GetModuleHandleW
GetLastError
SetThreadAffinityMask
GetLocaleInfoW
GetBinaryTypeA
GetThreadTimes
GetLongPathNameW
lstrlenW
GetShortPathNameW
HeapWalk
WaitForSingleObjectEx
IsBadWritePtr
FindResourceExA
GetTempFileNameA
GetFileAttributesExA
CloseHandle
GetExitCodeThread
QueryPerformanceCounter
lstrcmpiA
ClearCommBreak
GlobalGetAtomNameW
CreateWaitableTimerA
LocalFree
msvcrt
srand
gmtime
wcstol
wcscoll
gets
vswprintf
_controlfp
towlower
mbtowc
putc
fgets
__set_app_type
malloc
iswctype
__p__fmode
__p__commode
memset
wcslen
wcsrchr
isxdigit
toupper
_amsg_exit
_initterm
_ismbblead
isalpha
mktime
realloc
_XcptFilter
puts
strtol
iswalpha
strpbrk
swscanf
strtok
localtime
system
_exit
wcstombs
_cexit
atol
fputs
__setusermatherr
iswdigit
wcscpy
strcoll
strcspn
rand
free
__getmainargs
wcscspn
shlwapi
PathIsUNCA
Exports
Exports
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.init Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erts Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wall Size: 512B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.info Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ