?_HideCaret@@YGPAXPAKPAEPAI@Z
Static task
static1
Behavioral task
behavioral1
Sample
a242b819e79b3540504a461aa662c56a1e4e697dcd1d31929423ef18c98b4341.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a242b819e79b3540504a461aa662c56a1e4e697dcd1d31929423ef18c98b4341.exe
Resource
win10v2004-20221111-en
General
-
Target
a242b819e79b3540504a461aa662c56a1e4e697dcd1d31929423ef18c98b4341
-
Size
37KB
-
MD5
1d15cb8e816b4fa98dd4d3d8c9d319f2
-
SHA1
f0c85864f2dbfdacca50f68f8fa46939a3a7bb3b
-
SHA256
a242b819e79b3540504a461aa662c56a1e4e697dcd1d31929423ef18c98b4341
-
SHA512
93e0c98f570f40f772c636544f011d6c43fd5b3e09542a62a3fedf84f06f743773377506c5ffc467784bd149849360c2577b2364b1c133f695460f55b67c8f03
-
SSDEEP
768:PSaBtM0YADvwYBqI20vTmlywAJIPw5rPFbPTR:PTtM0xvwYBqNywcx5RTR
Malware Config
Signatures
Files
-
a242b819e79b3540504a461aa662c56a1e4e697dcd1d31929423ef18c98b4341.exe windows x86
c7d6f5f7cf2b3374563ca0706be3b79f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrRChrIA
StrCpyW
StrCmpNIW
PathCanonicalizeW
ord158
PathFindNextComponentW
ChrCmpIW
kernel32
LoadLibraryExW
GetCommConfig
CopyFileW
CreateFileMappingW
FileTimeToDosDateTime
GetCommProperties
ClearCommBreak
OpenEventW
GlobalUnlock
GetLogicalDriveStringsA
GetTapeStatus
WaitCommEvent
GetDiskFreeSpaceExA
TerminateJobObject
lstrcatW
GetModuleFileNameA
OpenWaitableTimerA
CreateMailslotW
CancelDeviceWakeupRequest
user32
GetWindowTextW
CallMsgFilterW
CheckMenuRadioItem
GetKeyboardLayout
SetPropW
ReplyMessage
NotifyWinEvent
EnumDisplayDevicesW
ClientToScreen
GetMenuState
SendDlgItemMessageW
CreateIconFromResource
GetCaretPos
SetMenuContextHelpId
EnumDesktopsA
EnableScrollBar
HiliteMenuItem
DestroyMenu
GetPropW
RegisterDeviceNotificationA
LoadCursorA
RegisterClassW
gdi32
PolyDraw
SelectObject
GetWinMetaFileBits
DeleteEnhMetaFile
UpdateColors
GetCurrentPositionEx
GetTextExtentPointW
CreatePalette
GdiFlush
CreateDIBPatternBrush
GetPixelFormat
PolyBezierTo
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icode Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m_data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.n_data Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 858B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ