?LeaveCriticalSectionGDhkyjkjhHFJlF@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236.exe
Resource
win10v2004-20220812-en
General
-
Target
e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236
-
Size
217KB
-
MD5
41f5a09c260f1c53f7d36077fbd61586
-
SHA1
3708764abb41ee06a7f3d78da8fd6144daa8c0d6
-
SHA256
e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236
-
SHA512
fcbb9cdd6ea5b7ebe6027222f50607932311cdd016b49c5d09c0b7c08b3dc717b8fcee81319092e144179a94132771829003a0fb8e481f8904227980ccc3ad0c
-
SSDEEP
6144:0bH3MhU6sM8fP6SPqRZto4fcvg+xh5Jfq:QH3MhU63SqtbX+
Malware Config
Signatures
Files
-
e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236.exe windows x86
2eaa4644e1b7c76a35cc93a5d72c8fa7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
Polyline
SaveDC
SetStretchBltMode
AbortDoc
DeleteDC
CreateRectRgn
GetTextMetricsA
EndPath
GetTextExtentPointW
EnumFontFamiliesExW
ScaleWindowExtEx
GetNearestPaletteIndex
GetViewportOrgEx
GetBitmapBits
CreateSolidBrush
comctl32
PropertySheetW
ImageList_Destroy
ImageList_Create
ImageList_Write
kernel32
lstrlenW
LockResource
ReadFile
GlobalHandle
MulDiv
CreateNamedPipeA
FlushViewOfFile
lstrcatW
OpenFile
HeapCreate
FreeResource
IsBadWritePtr
IsBadStringPtrW
GlobalLock
EnumResourceLanguagesA
FindResourceExW
GetVersionExW
GetFileAttributesW
user32
CreateIconIndirect
IsChild
AdjustWindowRect
LoadBitmapW
DefFrameProcW
InternalGetWindowText
CharUpperBuffA
SetRectEmpty
EnableMenuItem
CreateIconFromResource
DestroyCaret
RegisterClassExW
KillTimer
DefWindowProcW
SystemParametersInfoA
ShowWindow
InvertRect
SetDlgItemInt
SetDlgItemTextA
GetActiveWindow
GetKeyNameTextW
GetKeyboardLayoutList
LoadCursorA
CharPrevW
SetWindowTextW
AdjustWindowRectEx
wvsprintfA
SetPropW
OpenInputDesktop
IsIconic
CreateCaret
TabbedTextOutW
GetMenuStringA
GetForegroundWindow
wsprintfW
IsWindow
RedrawWindow
msvcrt
mktime
_controlfp
__set_app_type
strstr
__p__fmode
isupper
__p__commode
_amsg_exit
toupper
puts
strchr
_initterm
iswalpha
_acmdln
exit
_ismbblead
_XcptFilter
remove
_exit
_cexit
__setusermatherr
__getmainargs
gmtime
strrchr
comdlg32
ReplaceTextW
ChooseColorW
Exports
Exports
Sections
.text Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.diag_x Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.diag_y Size: 512B - Virtual size: 85B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idat Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.div Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imul Size: 512B - Virtual size: 115B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.plus Size: 1024B - Virtual size: 773B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.minus Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ