?ForwardControlItem@@YGK_KK:O
Static task
static1
Behavioral task
behavioral1
Sample
a11a2082344a49bcfc028966fbede4f6d4a88225995778b47fd4f87cdb19c743.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a11a2082344a49bcfc028966fbede4f6d4a88225995778b47fd4f87cdb19c743.exe
Resource
win10v2004-20220812-en
General
-
Target
a11a2082344a49bcfc028966fbede4f6d4a88225995778b47fd4f87cdb19c743
-
Size
149KB
-
MD5
b105de2d88a52052d0bfb094a2dd7504
-
SHA1
b0b534a51e74534889bc4b49df4c0ee68c7901b2
-
SHA256
a11a2082344a49bcfc028966fbede4f6d4a88225995778b47fd4f87cdb19c743
-
SHA512
afbcb05ceccfa07ed33ccad2afff8e45647c9af67121c7e5f74ac4693ccfb8b0611e59b2c6f5c9da2e5cf03bba95c019770e16bd2444344f12f91a3ea83f9e9c
-
SSDEEP
3072:WmqxPT81xK2d3zrepYAMangPZ5fjHy4A+5jJTySH3zf:Mxb09dOYX5Rxa+dND
Malware Config
Signatures
Files
-
a11a2082344a49bcfc028966fbede4f6d4a88225995778b47fd4f87cdb19c743.exe windows x86
993e090b58e448204adb70bf2fcd3d49
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
_controlfp
iswprint
__set_app_type
strcoll
__p__fmode
qsort
isprint
perror
wcstod
__p__commode
wcsstr
tolower
_amsg_exit
strpbrk
strtoul
swscanf
_initterm
_ismbblead
localtime
rand
_XcptFilter
putchar
mbtowc
realloc
wcsncmp
isupper
fwrite
bsearch
_exit
setvbuf
_cexit
strncmp
memset
malloc
strstr
__setusermatherr
getc
calloc
wcsrchr
printf
wcslen
exit
putc
strrchr
free
sscanf
wcstoul
__getmainargs
fflush
kernel32
LoadResource
lstrlenA
SetLocalTime
VirtualAlloc
GetCommandLineW
lstrcmpiW
LoadLibraryW
CreateFileA
GetTimeZoneInformation
GetSystemWindowsDirectoryA
CreateEventA
ResetEvent
WriteFile
ReadFile
GetPriorityClass
FreeResource
VirtualQuery
AddAtomA
CreateSemaphoreA
lstrlenW
GetFileAttributesA
LocalReAlloc
AreFileApisANSI
WaitForSingleObjectEx
FindNextFileW
VirtualProtect
GetCommModemStatus
GlobalHandle
CopyFileW
GetCurrentDirectoryW
HeapFree
GetComputerNameA
GlobalAlloc
SetHandleCount
SetMailslotInfo
SetCommMask
SearchPathA
HeapWalk
GetVersionExA
IsDBCSLeadByteEx
GetTempFileNameA
FindFirstChangeNotificationW
SetFileTime
DisconnectNamedPipe
IsValidLanguageGroup
GetTempFileNameW
GetThreadTimes
CreatePipe
lstrcpyA
SetCommTimeouts
GetFileAttributesW
ClearCommError
SetEndOfFile
SetCommState
SizeofResource
user32
CharNextA
CharUpperBuffW
InvalidateRect
ArrangeIconicWindows
wsprintfA
BeginPaint
GetMenu
GetClientRect
DestroyCursor
GetClassInfoExA
CharPrevW
LoadIconW
SetSysColors
DestroyMenu
LoadMenuA
FindWindowA
SetWindowPos
IntersectRect
PeekMessageA
SetWindowRgn
GetWindowTextLengthW
CheckRadioButton
LoadBitmapW
UpdateWindow
DrawTextExW
GetMenuItemInfoW
EnumChildWindows
GetKeyNameTextW
CallWindowProcW
GetSubMenu
GetMenuCheckMarkDimensions
ExitWindowsEx
RegisterHotKey
BeginDeferWindowPos
GetKeyState
GetUserObjectInformationA
SetRectEmpty
TrackPopupMenu
GetMenuItemID
GetDlgItemTextA
GetUserObjectInformationW
IsIconic
DrawTextA
InsertMenuItemW
LoadCursorA
CharNextW
mouse_event
OpenInputDesktop
FrameRect
LoadAcceleratorsA
IsMenu
ShowWindow
RegisterWindowMessageW
GetWindow
AppendMenuW
IsDialogMessageA
SendDlgItemMessageW
LoadStringA
MessageBoxExA
AllowSetForegroundWindow
GetClassInfoW
GetWindowLongA
GetPropW
EnableMenuItem
CharLowerW
SetScrollRange
DefFrameProcA
SendMessageW
wvsprintfA
GetWindowDC
SendInput
SendMessageTimeoutW
DrawMenuBar
GetMessagePos
FindWindowExA
CreateMenu
GetClassLongW
RegisterWindowMessageA
ChangeMenuW
ShowScrollBar
LoadIconA
PostMessageA
SetUserObjectInformationW
DrawIcon
UnloadKeyboardLayout
MonitorFromRect
IsWindowEnabled
SetWindowTextA
SendDlgItemMessageA
GetClipCursor
RegisterClassExW
GetIconInfo
BringWindowToTop
SetCursorPos
HiliteMenuItem
EnumThreadWindows
IsCharUpperA
RegisterClassW
SystemParametersInfoW
GetMessageTime
AdjustWindowRectEx
MapDialogRect
ScreenToClient
CharUpperA
SetParent
DrawStateA
DestroyWindow
ClientToScreen
EnableWindow
InvertRect
GetClassInfoExW
GetWindowLongW
KillTimer
TranslateAcceleratorA
GetKeyboardType
GetForegroundWindow
IsDialogMessageW
comctl32
CreatePropertySheetPageA
CreateToolbarEx
InitCommonControlsEx
ImageList_ReplaceIcon
PropertySheetW
CreatePropertySheetPageW
shlwapi
PathIsUNCA
Exports
Exports
Sections
.itext Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ips1 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ips2 Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.read Size: 512B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ips3 Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ips4 Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ