?DeleteSecurityDescriptorHdfjhjkfK@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
91a631c9bf276531c70c03ba8f34feb48f6976e9a1eac12cacf838389a2e9aac.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
91a631c9bf276531c70c03ba8f34feb48f6976e9a1eac12cacf838389a2e9aac.exe
Resource
win10v2004-20220812-en
General
-
Target
91a631c9bf276531c70c03ba8f34feb48f6976e9a1eac12cacf838389a2e9aac
-
Size
214KB
-
MD5
b9127a2bf6596a1be7c9820af4641ad9
-
SHA1
a3e39863616b50bc08aaae63f39774de0e9eb271
-
SHA256
91a631c9bf276531c70c03ba8f34feb48f6976e9a1eac12cacf838389a2e9aac
-
SHA512
c52c658a2c5e7be8ab88ec18735381f6666a3e3ddeaa8f1ea3096c2b8975eed7dcd533afd3541a9d38afacf619a24d14f01f32d3a88c232ec8e8fa94e64006c9
-
SSDEEP
3072:s1IrCGCyzfGfHYYmvfB3tlLZkc+ORFRin/wYJT4hkONiVWVPk7eMgzSH+HqwN:s1WCGCyyOh9d2KRu/bJTNzYVPkMmHYp
Malware Config
Signatures
Files
-
91a631c9bf276531c70c03ba8f34feb48f6976e9a1eac12cacf838389a2e9aac.exe windows x86
67024ac8d4d9dda1bdd031c70e4b803d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ord195
ord196
msvcrt
fgets
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
isspace
_acmdln
exit
_ismbblead
_XcptFilter
wcscpy
isprint
_exit
_cexit
strerror
mktime
strncpy
__setusermatherr
strpbrk
srand
qsort
__getmainargs
user32
GetWindowTextA
GetDC
GetWindowLongA
GetMenuState
EndPaint
SetParent
CheckMenuItem
ExitWindowsEx
LoadCursorW
LoadStringW
SetCursor
DragObject
GetUpdateRgn
GetUpdateRect
GetWindowDC
DestroyCaret
PeekMessageA
DrawMenuBar
LoadImageA
GetKeyboardLayoutList
GetClassNameW
FrameRect
EnableMenuItem
UpdateWindow
SetScrollInfo
EnumChildWindows
SetSysColors
EnumWindows
ChildWindowFromPoint
GetNextDlgGroupItem
AttachThreadInput
GetWindowRect
CharToOemA
GetClientRect
comdlg32
GetOpenFileNameA
GetOpenFileNameW
ChooseColorW
kernel32
InitializeCriticalSection
Sleep
SetThreadExecutionState
CreateDirectoryA
TlsFree
HeapLock
GetModuleHandleW
WaitForSingleObject
SetCommState
lstrcmpW
SearchPathA
FindResourceA
SearchPathW
OpenEventA
GetUserDefaultUILanguage
gdi32
GetClipBox
CreateFontW
GetWindowOrgEx
CreateHalftonePalette
SetDIBits
Rectangle
ExtTextOutA
CreateFontIndirectA
SetBkColor
GetTextAlign
SetTextAlign
SetDIBitsToDevice
EnumFontFamiliesW
GetNearestPaletteIndex
comctl32
DestroyPropertySheetPage
ImageList_AddMasked
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_Write
Exports
Exports
Sections
.text Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idat Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.div Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.diag_x Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.diag_y Size: 512B - Virtual size: 89B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imul Size: 512B - Virtual size: 258B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.plus Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.minus Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ