?HistoryLoggingOn@@YGKDKPAX:O
Static task
static1
Behavioral task
behavioral1
Sample
fc780cc8c8c475e83d93d9efa92e81da5bbce4cbfc8409626c8e9bc2e880035f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fc780cc8c8c475e83d93d9efa92e81da5bbce4cbfc8409626c8e9bc2e880035f.exe
Resource
win10v2004-20220812-en
General
-
Target
fc780cc8c8c475e83d93d9efa92e81da5bbce4cbfc8409626c8e9bc2e880035f
-
Size
42KB
-
MD5
ab25a4199094645162ba85757fc4bccf
-
SHA1
2403b1512125e772f7ebdb1611f696153fa37389
-
SHA256
fc780cc8c8c475e83d93d9efa92e81da5bbce4cbfc8409626c8e9bc2e880035f
-
SHA512
bd26cef2dc435a441183b7a6a36146922c318c24b8fc18bce63966c849f89d1e515272f0321dc5cabeb9f9f8c9a3dcef17a860e172989a1481eeab110d998520
-
SSDEEP
768:khpbH+LmVO25bUNNksHsXxDx+OqHeJRdJX1EuHbA3CZLpIAemCvSSv4aNUZ:opbiCd1UN64sXxDx+OqHiHbLwAJcv
Malware Config
Signatures
Files
-
fc780cc8c8c475e83d93d9efa92e81da5bbce4cbfc8409626c8e9bc2e880035f.exe windows x86
5bf93aba338bd48d7ee56abba05680fd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
exit
_controlfp
iswxdigit
localtime
__set_app_type
wcsncpy
iswdigit
getenv
swprintf
strtoul
wcstol
__p__fmode
strstr
strncpy
__p__commode
_amsg_exit
gets
calloc
getc
fclose
ftell
_initterm
memset
_ismbblead
clock
wcschr
gmtime
system
_XcptFilter
_exit
_cexit
isalpha
sscanf
wcscat
printf
__setusermatherr
__getmainargs
shlwapi
UrlGetLocationA
kernel32
GetHandleInformation
GlobalAlloc
GlobalSize
FindFirstFileA
SearchPathW
MapViewOfFile
LocalLock
FindNextFileW
GetModuleFileNameA
MoveFileExW
SetCommBreak
SetThreadLocale
FileTimeToDosDateTime
GetTempPathA
FindCloseChangeNotification
SetLastError
TlsFree
ReleaseMutex
lstrcmpiW
GetFileInformationByHandle
TlsGetValue
FlushViewOfFile
CancelWaitableTimer
ExitThread
WaitCommEvent
CancelIo
UnlockFile
CompareStringW
SetThreadPriority
GetThreadTimes
RemoveDirectoryW
GetFileSize
GetStdHandle
IsBadReadPtr
LoadLibraryW
SetCommState
GetTempFileNameW
RemoveDirectoryA
ResetEvent
comdlg32
PrintDlgW
CommDlgExtendedError
ChooseFontW
user32
PostMessageA
SendMessageW
IsCharAlphaA
LoadMenuA
CallWindowProcA
FindWindowExA
DestroyCursor
CascadeWindows
DialogBoxParamW
TranslateAcceleratorW
SetSysColors
IsCharAlphaNumericW
LoadStringA
AdjustWindowRectEx
DrawTextW
GetMenuItemInfoW
DrawFrameControl
DefDlgProcW
SetPropW
SetDlgItemInt
UpdateWindow
GetWindowTextW
DrawAnimatedRects
FindWindowW
DestroyIcon
LoadIconA
GetWindowDC
WaitForInputIdle
IntersectRect
RegisterClassA
SetWindowRgn
CreateIconFromResource
CharNextA
GetDlgItemInt
GetMenu
ScrollWindow
GetScrollPos
UnloadKeyboardLayout
OpenDesktopW
SendDlgItemMessageW
IsDialogMessageA
DefDlgProcA
InvertRect
MonitorFromRect
CopyAcceleratorTableW
SetCursorPos
LoadAcceleratorsA
InflateRect
TranslateMessage
SetDlgItemTextW
GetMenuItemID
LoadAcceleratorsW
SetScrollPos
GetCursorPos
RegisterClassW
GetWindowTextA
RegisterWindowMessageW
HideCaret
LoadCursorA
DeleteMenu
GetDlgItemTextW
GetSysColorBrush
GetClassInfoExA
WindowFromPoint
keybd_event
SetWindowTextA
SendMessageA
GetAsyncKeyState
wsprintfW
GetDlgItem
KillTimer
CharUpperA
LoadMenuW
SwitchToThisWindow
DrawStateW
MapVirtualKeyA
InvalidateRgn
EnumChildWindows
SetForegroundWindow
SetActiveWindow
GetDlgCtrlID
SetWindowPos
GetSubMenu
IsChild
SystemParametersInfoW
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eplan Size: 512B - Virtual size: 91B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ainit Size: 1024B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iplan Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdbg Size: 512B - Virtual size: 103B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.run Size: 1024B - Virtual size: 543B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.0dat Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ