?GetForegroundWindowGetForegroundWindowGetForegroundWindowGetForegroundWindowGetForegroundWindow@@YGKXZjPfiGVmyVLRfDZdbJTezUnXwjEipYvwgriewiturkljfgjkdljkgfdljhgiopfgoufdoigjfdoijhgoifljhioldjfglhkjdgflkg
Static task
static1
Behavioral task
behavioral1
Sample
e2d1dc11364c380adf86ba22b1b672279ad3d5e6505b8ec29821c20887bae84b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e2d1dc11364c380adf86ba22b1b672279ad3d5e6505b8ec29821c20887bae84b.exe
Resource
win10v2004-20221111-en
General
-
Target
e2d1dc11364c380adf86ba22b1b672279ad3d5e6505b8ec29821c20887bae84b
-
Size
192KB
-
MD5
b0fbe71b1da9c9bda9d66866430afce4
-
SHA1
42e36d17dfee94002d9e8d3ad1fdd7e7e4ad526c
-
SHA256
e2d1dc11364c380adf86ba22b1b672279ad3d5e6505b8ec29821c20887bae84b
-
SHA512
dd2e4e2b1ff0d2dd68f4fada1b70c8637430da9b22c27a71f1042eb8c710e68f3d10b4e4db7978b04e325292328ec4863d7a52e567078e93d807f96824c58c28
-
SSDEEP
3072:EQEhhdogKr/TBSvhIpt/CiPuv9Yf3Fc7LjnxDNriY4LtWj3RmtwjeOd/50tGkFjX:7EigKvYvhIn/fPi9ScjnbiNcj4UEGSj
Malware Config
Signatures
Files
-
e2d1dc11364c380adf86ba22b1b672279ad3d5e6505b8ec29821c20887bae84b.exe windows x86
00aa4e8eed777d74e9fb4225e1b28425
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreatePatternBrush
GetPixel
CreateHatchBrush
GetNearestPaletteIndex
EnumFontFamiliesW
CreateRectRgn
GetLayout
CreateRectRgnIndirect
advapi32
OpenBackupEventLogA
ole32
CoCreateGuid
user32
BeginDeferWindowPos
DefMDIChildProcW
TrackPopupMenu
SetScrollRange
OpenDesktopW
GetFocus
CopyRect
LoadBitmapA
GetKBCodePage
DialogBoxParamA
EnumChildWindows
GetAsyncKeyState
FindWindowW
MessageBoxIndirectA
kernel32
CancelWaitableTimer
lstrcpyW
IsBadStringPtrW
RaiseException
GlobalLock
GetStringTypeExW
GlobalFindAtomA
GetFullPathNameW
Exports
Exports
Sections
.dbgdir Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.poiujh Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mytrrg Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oiuuyt Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.retf Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mnbhg Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ