?EnumExpressionW@@IJMJPAHJ@X
Static task
static1
Behavioral task
behavioral1
Sample
c0f7a0c2d1466568ff47efe1e98c47a9095315f786c087f673327d0ba46de24d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c0f7a0c2d1466568ff47efe1e98c47a9095315f786c087f673327d0ba46de24d.exe
Resource
win10v2004-20221111-en
General
-
Target
c0f7a0c2d1466568ff47efe1e98c47a9095315f786c087f673327d0ba46de24d
-
Size
215KB
-
MD5
8118a66149afd9ca2d18875c053c8a6a
-
SHA1
676710a8589e1cccdacce7baa55881c619162e3d
-
SHA256
c0f7a0c2d1466568ff47efe1e98c47a9095315f786c087f673327d0ba46de24d
-
SHA512
dead3b68f2d634efbbe68c13ba4288472f562c4087efcb8075dc29d0d36988bc931a7fb3e80a11d366caa5c9d4a9146998effb648917bc1c408d2f0bd113d757
-
SSDEEP
3072:yw22zqb6PLlOn4ABdTAE8Lghp9nMPDtBIDtRGUDetbIIr0xI4oK6mHgpFWE0Vn8w:5q2PQ1LJKDejetbIIS7eWEjHetZ
Malware Config
Signatures
Files
-
c0f7a0c2d1466568ff47efe1e98c47a9095315f786c087f673327d0ba46de24d.exe windows x86
26e0f020eb5cde6dc0367a2676afa561
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrStrA
gdi32
SetWindowExtEx
CreateRectRgn
EnumFontFamiliesW
GetBitmapBits
GetROP2
SelectObject
GetBkMode
SetBkColor
WidenPath
RectVisible
EnumFontsW
GetDIBColorTable
StartDocW
CreateRectRgnIndirect
RemoveFontResourceW
SetTextColor
SetAbortProc
SetViewportOrgEx
CreateDIBitmap
SetTextAlign
DPtoLP
LineTo
DeleteDC
OffsetRgn
CreateCompatibleBitmap
CreateBrushIndirect
GetNearestPaletteIndex
GetTextAlign
CreateDCW
CreateRoundRectRgn
CreatePen
Escape
CreateFontW
SelectClipRgn
PtInRegion
CreateICW
CreateBitmap
MoveToEx
StretchDIBits
SetDIBits
GetTextCharsetInfo
GetSystemPaletteUse
PathToRegion
SetDIBitsToDevice
GetViewportOrgEx
SetBitmapBits
GetPixel
FillRgn
SetStretchBltMode
GetDIBits
SetPaletteEntries
GetTextExtentPoint32W
ExcludeClipRect
GetObjectW
AddFontResourceW
CreateFontIndirectA
SelectPalette
CreatePalette
ExtTextOutW
GetTextExtentPointW
GetObjectA
ExtFloodFill
GetNearestColor
GetMapMode
Polyline
comctl32
CreateStatusWindowW
ImageList_AddMasked
ImageList_Read
PropertySheetW
ImageList_GetImageCount
InitCommonControlsEx
ImageList_SetIconSize
DestroyPropertySheetPage
CreateToolbarEx
user32
SwapMouseButton
MonitorFromRect
LoadBitmapW
MoveWindow
LoadMenuA
CharNextA
SetParent
DragObject
DispatchMessageW
GetUpdateRgn
GetDlgItemTextA
GetScrollInfo
DrawIconEx
CheckMenuItem
FindWindowA
ShowWindow
CharPrevA
keybd_event
GetWindowTextA
GetAsyncKeyState
FillRect
GetDCEx
GetMenu
ScrollWindow
SetMenu
LoadCursorW
InvalidateRect
GetNextDlgGroupItem
IntersectRect
LoadImageW
GetWindowTextW
UnionRect
LoadImageA
MapWindowPoints
DrawTextExW
CallWindowProcA
DestroyMenu
ActivateKeyboardLayout
CreatePopupMenu
CopyImage
PostQuitMessage
RegisterClassExW
EnableMenuItem
SetCursorPos
MessageBoxW
GetClassInfoExA
GrayStringW
ScrollWindowEx
GetCaretPos
GetMonitorInfoW
IsMenu
GetMenuItemInfoW
DefWindowProcA
GetUpdateRect
RegisterHotKey
DrawEdge
GetMessagePos
GetKeyboardLayoutNameW
GetDlgCtrlID
SetFocus
MessageBoxExW
RegisterWindowMessageW
SetUserObjectInformationW
InSendMessageEx
PostThreadMessageW
GetMenuState
AdjustWindowRect
GetLastActivePopup
GetCaretBlinkTime
GetTopWindow
InsertMenuA
GetMenuItemRect
SetWindowTextW
GetParent
IsDialogMessageA
ExitWindowsEx
GetClassInfoA
DrawMenuBar
DrawTextW
SwitchToThisWindow
GetForegroundWindow
CharToOemBuffA
IsZoomed
OpenDesktopW
CreateAcceleratorTableW
CharToOemW
LoadAcceleratorsW
AppendMenuW
GetWindowTextLengthW
OemToCharA
FindWindowExA
InSendMessage
GetSubMenu
SetCaretPos
WindowFromPoint
EndPaint
SetScrollRange
LoadBitmapA
IsWindowUnicode
IsWindowVisible
SendDlgItemMessageA
CreateDialogParamW
GetClassLongA
ShowOwnedPopups
GetSysColorBrush
SetWindowTextA
DrawFocusRect
RegisterClassA
SetWindowLongA
CreateCursor
SetWindowPlacement
GetDlgItemTextW
OpenIcon
IsIconic
DispatchMessageA
CreateIconIndirect
SendDlgItemMessageW
DialogBoxIndirectParamW
DefDlgProcA
PostMessageA
GetClientRect
EqualRect
ScreenToClient
SetMenuDefaultItem
WaitMessage
CreateDialogIndirectParamW
BeginDeferWindowPos
CharToOemA
GetClassLongW
SetWindowPos
CopyAcceleratorTableW
GetKeyNameTextW
DestroyWindow
SetPropW
OpenInputDesktop
DestroyCaret
DialogBoxParamA
DialogBoxParamW
EnableScrollBar
ChildWindowFromPointEx
CharUpperA
DestroyAcceleratorTable
DestroyIcon
AdjustWindowRectEx
InflateRect
PtInRect
GetSystemMenu
GetScrollPos
GetDlgItemInt
FindWindowExW
CheckMenuRadioItem
GetMessageA
KillTimer
GetWindowRect
DestroyCursor
InvertRect
CreateWindowExA
OemToCharBuffA
LoadStringW
ShowCaret
TranslateAcceleratorW
RegisterClassW
kernel32
GetTempFileNameW
QueryPerformanceCounter
GlobalFlags
RemoveDirectoryW
GlobalFindAtomW
GlobalDeleteAtom
RegisterWaitForSingleObject
CreateFileMappingA
GetCommConfig
FindResourceExW
GetStringTypeExW
GetOverlappedResult
SetFileAttributesW
GetComputerNameExW
GetSystemWindowsDirectoryW
SearchPathW
SetThreadLocale
DeleteCriticalSection
DuplicateHandle
WaitForSingleObject
MoveFileA
HeapUnlock
SetCommTimeouts
CancelWaitableTimer
GetFileAttributesA
HeapLock
FindFirstFileW
FindFirstFileA
GetThreadPriority
FlushViewOfFile
GetFileTime
GetSystemDirectoryA
ConnectNamedPipe
GetComputerNameExA
GlobalUnlock
GetTempPathW
TryEnterCriticalSection
IsBadStringPtrW
GetTickCount
GetSystemTimeAsFileTime
GetNumberFormatA
AddAtomW
SetCommState
LocalUnlock
IsValidLocale
ExitThread
lstrcpyA
GetACP
SetFilePointer
SetWaitableTimer
GetCommandLineW
GetPriorityClass
GetComputerNameA
OpenFile
FindNextChangeNotification
SearchPathA
GetModuleFileNameW
LocalReAlloc
IsBadReadPtr
GetThreadTimes
GetModuleHandleA
GetModuleFileNameA
IsBadCodePtr
WideCharToMultiByte
GetTimeZoneInformation
MultiByteToWideChar
TransactNamedPipe
GetShortPathNameA
FreeResource
GetTempPathA
GetCurrentDirectoryW
OpenFileMappingA
SetHandleInformation
FreeLibrary
lstrcmpA
CreateFileW
msvcrt
isalpha
strncmp
iswprint
getc
wcstombs
localtime
_controlfp
rand
setvbuf
wcstol
setlocale
exit
isalnum
wcspbrk
ungetc
fprintf
__set_app_type
__p__fmode
__p__commode
free
strchr
time
vsprintf
_amsg_exit
strrchr
mktime
memset
wcsstr
toupper
strspn
putc
strcoll
wcscoll
wcstok
_initterm
iswdigit
fseek
_ismbblead
perror
gets
wcstoul
remove
strtok
strstr
_XcptFilter
strerror
_exit
wcscpy
bsearch
iswspace
_cexit
fgetc
strncpy
clock
strpbrk
iswalpha
__setusermatherr
wcsncpy
malloc
wcschr
__getmainargs
Exports
Exports
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ