?XO_T_AWTBrro_YY_T@@YGXPAH@Z
Static task
static1
Behavioral task
behavioral1
Sample
a4482b1dad268a6511734f3ff748bbff466334f63f4e1571f198c9c0d127c4f4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a4482b1dad268a6511734f3ff748bbff466334f63f4e1571f198c9c0d127c4f4.exe
Resource
win10v2004-20221111-en
General
-
Target
a4482b1dad268a6511734f3ff748bbff466334f63f4e1571f198c9c0d127c4f4
-
Size
120KB
-
MD5
d23f50627e942bda6c8dc3438a29f944
-
SHA1
1eb90e0f476fcbaef9a8320bdd9874c158dfdd1c
-
SHA256
a4482b1dad268a6511734f3ff748bbff466334f63f4e1571f198c9c0d127c4f4
-
SHA512
ba2ed9c5c940f4dd8c54b23c36143ed729277c67c45dfc40824702eb9a0bbf700a55f9dec6177b4a4358f996343e76e0de10bf038a44e4bed7c8247345859852
-
SSDEEP
3072:ULwTqCL0l1wtvwJF+u86dd0kLFNXZa8J9:cwTK1wVUF+n1
Malware Config
Signatures
Files
-
a4482b1dad268a6511734f3ff748bbff466334f63f4e1571f198c9c0d127c4f4.exe windows x86
4e662be2160e1a30144c033e810fe27e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlGetPartW
StrSpnW
StrCmpW
user32
IsWindowVisible
GetKeyboardLayoutList
GetKeyboardLayoutNameW
GetMessageA
SystemParametersInfoW
GetUserObjectInformationA
IsCharLowerA
ShowWindow
GetClassNameW
InflateRect
OpenDesktopW
AdjustWindowRect
SetWindowTextW
CharUpperA
DragObject
OpenIcon
InsertMenuItemW
CreateAcceleratorTableW
ShowCaret
DestroyMenu
mouse_event
GetKeyState
RegisterClassA
HiliteMenuItem
DrawTextW
CheckRadioButton
HideCaret
IsDlgButtonChecked
ntdll
memset
comctl32
ImageList_Remove
ImageList_AddMasked
CreateToolbarEx
kernel32
LocalUnlock
GetCommProperties
CompareFileTime
CreateMutexA
GetSystemDefaultUILanguage
GetComputerNameExW
CreateFileMappingA
GetCurrentProcessId
GetLocaleInfoA
CreateFileA
GlobalAddAtomA
lstrlenW
lstrcatA
WaitForMultipleObjects
SetMailslotInfo
CreateWaitableTimerA
WaitForDebugEvent
GetShortPathNameA
lstrcpyA
gdi32
WidenPath
StartDocW
FillRgn
GetStockObject
SetBkColor
SetAbortProc
GetCharWidth32W
GetViewportOrgEx
PolyBezier
CreatePen
ScaleViewportExtEx
Polygon
DeleteDC
Exports
Exports
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ