?GetWindows
Static task
static1
Behavioral task
behavioral1
Sample
877e50c3e0933c7fd29944568baa3d4c62399bbaa513b13706ec0c86a496332c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
877e50c3e0933c7fd29944568baa3d4c62399bbaa513b13706ec0c86a496332c.exe
Resource
win10v2004-20220812-en
General
-
Target
877e50c3e0933c7fd29944568baa3d4c62399bbaa513b13706ec0c86a496332c
-
Size
161KB
-
MD5
f40b66c191f0592d455490ddab398276
-
SHA1
04e14aa4f9a31dac78984b64f00654d19a37f1f9
-
SHA256
877e50c3e0933c7fd29944568baa3d4c62399bbaa513b13706ec0c86a496332c
-
SHA512
902532519cce518fc8d6c1642536a2834e081d62e6e8050329a96caef9b5719ac0bf38c62da05663b8e023daab8ff363e48959325e0293cbe69adfd8a451f0a7
-
SSDEEP
3072:wiCnyXQAO4abjm8iSwZDhm1eaDlMABYivGnTp3siTPVVzbnlD:wvnLAO4qOTDhnXA+ia3dRtb
Malware Config
Signatures
Files
-
877e50c3e0933c7fd29944568baa3d4c62399bbaa513b13706ec0c86a496332c.exe windows x86
3080e29352d5d0584895d5d03debf6e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
OpenIcon
IsChild
GetForegroundWindow
FindWindowW
DrawMenuBar
DestroyWindow
kernel32
GetStartupInfoW
HeapFree
FindCloseChangeNotification
IsValidLanguageGroup
TryEnterCriticalSection
GetSystemTimeAsFileTime
SetFileAttributesA
CreatePipe
TerminateThread
VirtualProtect
WriteFile
LoadLibraryW
GetAtomNameW
Exports
Exports
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yutyrt Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hjgjgf Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hgffds Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uytytr Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cxcx Size: 512B - Virtual size: 105B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ