?_Y_J__U_@@YGKJ@Z
Static task
static1
Behavioral task
behavioral1
Sample
dba40b459e3a0c7519de2dd0cfc3eaa0fff3f1b92303c59f82dea85e109cafe8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dba40b459e3a0c7519de2dd0cfc3eaa0fff3f1b92303c59f82dea85e109cafe8.exe
Resource
win10v2004-20220901-en
General
-
Target
dba40b459e3a0c7519de2dd0cfc3eaa0fff3f1b92303c59f82dea85e109cafe8
-
Size
143KB
-
MD5
0e51fadb53ac175049d5fce2a7a78cde
-
SHA1
8b275d89c576767e767ec2d418695760bab44442
-
SHA256
dba40b459e3a0c7519de2dd0cfc3eaa0fff3f1b92303c59f82dea85e109cafe8
-
SHA512
4f3877ebf927e779dabb88d072c0ddcd6156806e828aeab8adfe9806c2e47ec23d01fa82899fc361172e4737a2f0f5fa5a9991aad0fd039be297fb4765a896cb
-
SSDEEP
3072:lZJFfyn43sWMDycmu8pP0wws+Mazm/C0oeGQyl3P5GH:XJFfU6vMqnpcwwzrefcw
Malware Config
Signatures
Files
-
dba40b459e3a0c7519de2dd0cfc3eaa0fff3f1b92303c59f82dea85e109cafe8.exe windows x86
df23f99647249be488b2ca4dd137901e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetMenuItemInfoW
LoadImageA
ShowWindow
GetMessageW
DestroyCaret
CreateCursor
LoadMenuW
GetMenuStringW
PostThreadMessageA
CreateAcceleratorTableW
SetDlgItemTextW
FindWindowA
GetScrollPos
SetCursorPos
SetLastErrorEx
IsWindowUnicode
SetWindowTextA
GetForegroundWindow
SendNotifyMessageW
CreateMenu
ReplyMessage
ShowOwnedPopups
MapWindowPoints
CharNextW
GetUserObjectInformationA
GetCaretPos
DeferWindowPos
ShowScrollBar
TileWindows
shlwapi
UrlGetPartW
StrCmpW
StrSpnW
kernel32
lstrcpyA
CreateEventA
GetTimeZoneInformation
IsDBCSLeadByte
WaitForDebugEvent
HeapFree
ReleaseSemaphore
EnumResourceNamesW
GetCurrentProcessId
SetCommBreak
CreateNamedPipeW
lstrlenW
GetThreadContext
SetLastError
ReadFile
CopyFileW
GlobalAddAtomA
lstrcatA
gdi32
LineTo
GetMapMode
SetLayout
ScaleWindowExtEx
Ellipse
MoveToEx
RemoveFontResourceW
Rectangle
GetWindowOrgEx
Polygon
CreateDIBSection
GetSystemPaletteUse
RestoreDC
ntdll
memset
Exports
Exports
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.iat Size: 512B - Virtual size: 491B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 33KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ