?LeaveCriticalSectionGDhkyjkjhHFJlF@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
9a527fda693a28b009c2e60fdbfed57a28068011bb5ec1197e74ac6da3d5f1dc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a527fda693a28b009c2e60fdbfed57a28068011bb5ec1197e74ac6da3d5f1dc.exe
Resource
win10v2004-20220812-en
General
-
Target
9a527fda693a28b009c2e60fdbfed57a28068011bb5ec1197e74ac6da3d5f1dc
-
Size
215KB
-
MD5
1ee1e18c9cef1993bb749602a1349841
-
SHA1
eae3e54778ca9e97aa38dc627494c286ec81c677
-
SHA256
9a527fda693a28b009c2e60fdbfed57a28068011bb5ec1197e74ac6da3d5f1dc
-
SHA512
00039513527cd65c3b26da4bf99b726ed3c9438616571f79651b0701122a39168527d41ac9768aad48cfdff9ccfec08355af9cdca7a160c09080f0e222bb4946
-
SSDEEP
6144:6sQLSWYtytH7wcMvAfGMwmvVkFzHOMmY7Vm8:6s3OH7wcMmGQ5MmM
Malware Config
Signatures
Files
-
9a527fda693a28b009c2e60fdbfed57a28068011bb5ec1197e74ac6da3d5f1dc.exe windows x86
f0e192d8fe2f87d1ed6bd40367df7862
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
AbortDoc
GetMapMode
GetObjectA
CreateBitmap
WidenPath
CreateRectRgn
CreateDiscardableBitmap
GetTextMetricsA
ScaleWindowExtEx
CreateHatchBrush
PathToRegion
SetBkColor
GetWindowOrgEx
user32
EndDialog
UnloadKeyboardLayout
TileWindows
GetUpdateRgn
CharNextA
DrawMenuBar
SetClassLongW
GetForegroundWindow
GetKeyboardType
ModifyMenuW
DrawTextExW
ToUnicodeEx
GetClassInfoW
IsWindow
DrawFocusRect
ScreenToClient
DrawTextA
CharToOemW
IsZoomed
GetWindowDC
GetActiveWindow
DestroyCaret
WaitMessage
GetMenuItemID
DispatchMessageA
AdjustWindowRectEx
SetWindowRgn
SendMessageTimeoutA
CharUpperW
SetUserObjectInformationW
TabbedTextOutW
CreateWindowExA
CreateCaret
SendMessageTimeoutW
CreateDialogParamA
KillTimer
msvcrt
_controlfp
wcschr
clock
__set_app_type
rand
__p__fmode
__p__commode
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
strchr
fwrite
_XcptFilter
_exit
_cexit
wcscpy
gets
sprintf
strcpy
__setusermatherr
getenv
__getmainargs
comdlg32
PageSetupDlgW
GetOpenFileNameW
kernel32
lstrlenA
lstrcmpW
GlobalFree
GetThreadTimes
GetFileAttributesExW
EscapeCommFunction
IsBadStringPtrA
LockResource
SetErrorMode
lstrcatW
FileTimeToDosDateTime
GetDateFormatA
WaitForMultipleObjects
GetBinaryTypeW
ExitThread
SetTimerQueueTimer
FreeLibrary
GlobalFindAtomW
ResumeThread
Exports
Exports
Sections
.text Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.diag_x Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.diag_y Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.div Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idat Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imul Size: 512B - Virtual size: 307B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.plus Size: 512B - Virtual size: 474B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.minus Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ