?_AddFontResourceA@@YGKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
b58b13a4fbfd07caf41045d68a95dad4560f2c34e64dfc297141a2ccbd19693f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b58b13a4fbfd07caf41045d68a95dad4560f2c34e64dfc297141a2ccbd19693f.exe
Resource
win10v2004-20221111-en
General
-
Target
b58b13a4fbfd07caf41045d68a95dad4560f2c34e64dfc297141a2ccbd19693f
-
Size
130KB
-
MD5
3e05e5d33afbe365661a8d631f3bb373
-
SHA1
4a931e829ac73c7c30b5e0e4d484693485178670
-
SHA256
b58b13a4fbfd07caf41045d68a95dad4560f2c34e64dfc297141a2ccbd19693f
-
SHA512
5ddd3d2cfa4934623d030b8a09568908f495ec043b5a3a64c9375c46afdf77139b432cc35c8f8b043699739fb8e888a20d77c68d85d93e6bb5d6e6f50888e008
-
SSDEEP
1536:w0KKylupSzVLKPslK97YvjAkJXyjowQaAyHYZh8saKQ/kZk1VlK9ucQ4r:w0KHXLqsE9MsOCQc4Z6yMmKlK9u+
Malware Config
Signatures
Files
-
b58b13a4fbfd07caf41045d68a95dad4560f2c34e64dfc297141a2ccbd19693f.exe windows x86
d62f1cb95266f73e4874f9ab937ccb10
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCmpNIW
StrCmpNIA
PathAddBackslashW
kernel32
GetTempFileNameA
DeviceIoControl
GlobalAlloc
HeapAlloc
HeapUnlock
CreateEventA
WaitCommEvent
CreateMutexW
GetStringTypeA
CreateFileA
GetCurrentDirectoryA
HeapDestroy
VirtualQueryEx
gdi32
GetMapMode
LineDDA
GetCharWidth32W
ExtTextOutW
CreateFontW
BitBlt
GetTextExtentPoint32A
comctl32
ImageList_GetIconSize
CreatePropertySheetPageW
ImageList_AddMasked
comdlg32
GetSaveFileNameW
GetOpenFileNameA
ReplaceTextW
ChooseFontW
PrintDlgW
user32
AdjustWindowRect
ChangeMenuW
CharNextExA
SetMessageExtraInfo
SetRectEmpty
GetMenu
GetCursorPos
CopyImage
GetMenuItemCount
CreateCaret
CreatePopupMenu
CharUpperBuffW
SetRect
GetForegroundWindow
GetWindowTextLengthW
advapi32
GetSidLengthRequired
CloseEventLog
Exports
Exports
Sections
.itext Size: 2KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ