_RegisterClassARegisterClassARegisterClassA@0
Static task
static1
Behavioral task
behavioral1
Sample
b9f478d0562737aaea75096163b2b7a1c979f7ed4b8152507bfea921e9bb01ce.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b9f478d0562737aaea75096163b2b7a1c979f7ed4b8152507bfea921e9bb01ce.exe
Resource
win10v2004-20221111-en
General
-
Target
b9f478d0562737aaea75096163b2b7a1c979f7ed4b8152507bfea921e9bb01ce
-
Size
199KB
-
MD5
68d7f34104a1a256d67f45aae3c71cbb
-
SHA1
8cb5a07003e28e12c5d5a5a6701a74a0fb42a52c
-
SHA256
b9f478d0562737aaea75096163b2b7a1c979f7ed4b8152507bfea921e9bb01ce
-
SHA512
b87cb93152c140639c73b3b0aae9d9acf123e0371214e3aefa5a6943e7523be4e14520ff530b4763c0d8bb81c43ec150186c6e8cd55a17553acf2f901ffbfec2
-
SSDEEP
3072:smI334EC9+MiWsfDbyFNAh14RgVwTtEmzTRqFAmgM8j65E+jeFkVFwAo4qBHq:ZI3oECYWkUgVPCTcFAPM8j6DRabq
Malware Config
Signatures
Files
-
b9f478d0562737aaea75096163b2b7a1c979f7ed4b8152507bfea921e9bb01ce.exe windows x86
5e10a123f341c655d0ea84a0946b1485
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemWindowsDirectoryA
Sleep
FindClose
GetCurrentThread
FindResourceW
GlobalLock
GetTickCount
CreateWaitableTimerW
user32
MapVirtualKeyA
DrawMenuBar
SetScrollRange
DrawStateA
GetClassLongW
CreateWindowExW
DlgDirSelectExW
CharNextA
DlgDirListComboBoxW
IsDialogMessageW
SetUserObjectInformationW
LoadStringW
GetCursorPos
WaitMessage
AdjustWindowRectEx
SetFocus
ChildWindowFromPointEx
RegisterClassExA
DrawStateW
MapWindowPoints
gdi32
CreatePalette
Polygon
IntersectClipRect
CreateEllipticRgnIndirect
GetDIBits
DeleteDC
GetDIBColorTable
ResizePalette
RestoreDC
atl
AtlAxGetHost
AtlAxGetControl
ole32
CoInitializeEx
CoCopyProxy
CoCreateGuid
shlwapi
PathFileExistsA
Exports
Exports
Sections
.rtty Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mnbgf Size: 512B - Virtual size: 111B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oiujh Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ewrew Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jhgjg Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ