IsValidWindowEx
Static task
static1
Behavioral task
behavioral1
Sample
712c703af8ae4c18a1057d844cf244f64ff9d9b1f442d21eae77b58171e1d161.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
712c703af8ae4c18a1057d844cf244f64ff9d9b1f442d21eae77b58171e1d161.exe
Resource
win10v2004-20220812-en
General
-
Target
712c703af8ae4c18a1057d844cf244f64ff9d9b1f442d21eae77b58171e1d161
-
Size
169KB
-
MD5
a2a3e42baf2f042ca1cdf4ad30af7bdf
-
SHA1
605c597d1de888feeb95644a6d3a1846b545d39a
-
SHA256
712c703af8ae4c18a1057d844cf244f64ff9d9b1f442d21eae77b58171e1d161
-
SHA512
c716cc3203a5ce0689d25bdfa8eda7f751e1e85029fa5bb06fe4c781a6ba4cb4aa5f4fb86971df84b430104d4f4c2ff8c0ba2939cf9402ecc58c6421236b366b
-
SSDEEP
3072:Zz4JXOvqiorvQEEO3joli+L4kL/bjaNoOg8HQr90IYlaLkY8C+WrbIFkW:Zz4ElorIEB3cli+5HjaNKp2l2HlbIF
Malware Config
Signatures
Files
-
712c703af8ae4c18a1057d844cf244f64ff9d9b1f442d21eae77b58171e1d161.exe windows x86
0488407f3c5a8bf642954db9e5d3fdc8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateGuid
CoInitialize
shlwapi
PathAddBackslashW
gdi32
GetObjectA
ExtTextOutW
SetStretchBltMode
LPtoDP
SetBkMode
GetNearestPaletteIndex
CreateBitmap
ExtFloodFill
GetTextFaceW
TextOutW
CreateBrushIndirect
CreateRectRgnIndirect
GetNearestColor
MoveToEx
LineTo
GetFontData
GetTextExtentPointA
RemoveFontResourceW
SetTextAlign
GetWindowOrgEx
StartDocW
CreatePolygonRgn
CreateSolidBrush
SetDIBits
GetSystemPaletteUse
PatBlt
GetObjectW
SelectPalette
CreateDIBitmap
LineDDA
PathToRegion
CreateEllipticRgnIndirect
StretchBlt
SelectClipRgn
SetViewportOrgEx
GetTextCharsetInfo
GetTextColor
GetStockObject
CreateDCW
SetWindowExtEx
SetDIBitsToDevice
SetRectRgn
GetDIBits
GetViewportOrgEx
rpcrt4
NdrServerInitialize
kernel32
LCMapStringA
HeapLock
OpenEventA
CreateMailslotW
LeaveCriticalSection
VerSetConditionMask
FindCloseChangeNotification
GetVersionExA
GlobalMemoryStatusEx
SetThreadExecutionState
FindResourceExA
CreateMutexW
GetSystemTime
GetSystemTimeAdjustment
Sleep
FindResourceW
SetCurrentDirectoryW
ReadFile
LockResource
FindFirstFileW
GetPrivateProfileIntA
GetExitCodeThread
CreateDirectoryW
CreateDirectoryA
FormatMessageA
SetNamedPipeHandleState
SetCommMask
GetDateFormatA
WaitForMultipleObjectsEx
SetupComm
GetSystemWindowsDirectoryW
GetTimeZoneInformation
lstrcpyA
DeviceIoControl
GetVersion
GetThreadContext
SetFileAttributesW
FindNextFileW
HeapWalk
IsValidLocale
FindNextFileA
GetTempFileNameW
LocalFree
GlobalSize
TlsGetValue
FreeLibrary
GlobalLock
lstrcmpW
LocalUnlock
GetUserDefaultLCID
LCMapStringW
FindFirstFileA
GetNumberFormatA
MulDiv
EnumResourceNamesW
GlobalHandle
CreateFileW
GlobalGetAtomNameW
lstrcmpiA
SearchPathA
IsValidLanguageGroup
SetPriorityClass
RegisterWaitForSingleObject
GetSystemDefaultUILanguage
GetFullPathNameW
GlobalUnlock
GetComputerNameExW
IsDBCSLeadByte
SetThreadLocale
CloseHandle
OpenFileMappingA
FileTimeToDosDateTime
OpenEventW
SetLocalTime
SetWaitableTimer
CreateNamedPipeW
ResumeThread
GetCommTimeouts
GetDateFormatW
IsDBCSLeadByteEx
FormatMessageW
OpenSemaphoreW
FindNextChangeNotification
CreateEventW
VirtualProtect
RaiseException
GetThreadLocale
EnumResourceNamesA
SetCommBreak
CreateMutexA
SetUnhandledExceptionFilter
ConnectNamedPipe
MapViewOfFile
lstrlenA
LoadLibraryA
HeapCreate
LoadLibraryExW
FreeResource
FindResourceExW
GetSystemDirectoryA
comctl32
ImageList_Draw
ImageList_ReplaceIcon
PropertySheetW
ImageList_Remove
ImageList_Destroy
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetIconSize
user32
OemToCharA
GetMenuStringA
EndPaint
SendDlgItemMessageA
GetMenuCheckMarkDimensions
RegisterClassW
SetScrollInfo
DrawEdge
InsertMenuA
IsChild
SetUserObjectInformationW
SendMessageTimeoutA
GetClassInfoW
wvsprintfW
LoadMenuW
GetMenu
DefDlgProcA
AppendMenuW
SetMenuDefaultItem
CharUpperA
GetWindowPlacement
SetScrollRange
PtInRect
MessageBoxA
DrawStateA
GetMenuStringW
SwapMouseButton
CreateWindowExW
VkKeyScanW
DefWindowProcW
ScrollWindow
MessageBoxW
CreateCursor
SetSysColors
mouse_event
SetParent
GetMessageA
PostMessageW
LockWindowUpdate
SetRect
ClientToScreen
RegisterClassA
TranslateAcceleratorW
ScrollWindowEx
ChildWindowFromPointEx
FindWindowA
GetDesktopWindow
EnumWindows
IsCharUpperA
PostQuitMessage
HideCaret
CheckMenuItem
wsprintfW
SendMessageA
SetClassLongW
GetMenuItemRect
GetWindowTextW
ArrangeIconicWindows
LoadStringW
SendNotifyMessageW
GetCursorPos
LoadCursorW
ShowCursor
DrawIcon
GetDoubleClickTime
LoadStringA
BringWindowToTop
IsZoomed
RedrawWindow
LoadImageW
ModifyMenuW
LookupIconIdFromDirectory
GetSubMenu
DrawTextW
InflateRect
ShowOwnedPopups
CharPrevA
GetKeyNameTextW
CheckRadioButton
DeleteMenu
GetClassNameW
SendDlgItemMessageW
GetWindowTextA
MapDialogRect
DefFrameProcA
EnumThreadWindows
SetScrollPos
LoadIconA
RegisterWindowMessageW
SetMenuItemBitmaps
LoadAcceleratorsA
FindWindowW
CharToOemBuffA
GetClassInfoA
IsDialogMessageW
SetDlgItemInt
IsMenu
CloseDesktop
SwitchToThisWindow
GetPropW
SetCursorPos
GetDlgItemInt
OpenInputDesktop
CharLowerBuffW
WindowFromPoint
atl
AtlComPtrAssign
Exports
Exports
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Agio Size: 7KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.musty Size: 512B - Virtual size: 211B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Much Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lex Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sat Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fix Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oypac Size: 512B - Virtual size: 335B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jibmed Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ