?OwnerInitDescriptor@@YGK_KK:O
Static task
static1
Behavioral task
behavioral1
Sample
2e504c61897e5ad43ff190a4779fa558938ee94e01691219431b135eb2124203.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2e504c61897e5ad43ff190a4779fa558938ee94e01691219431b135eb2124203.exe
Resource
win10v2004-20220812-en
General
-
Target
2e504c61897e5ad43ff190a4779fa558938ee94e01691219431b135eb2124203
-
Size
155KB
-
MD5
ae8b98e1933d9a1e7102d64a6209698b
-
SHA1
55017688b5c00b1c769eb279bd50d9d40fb08e22
-
SHA256
2e504c61897e5ad43ff190a4779fa558938ee94e01691219431b135eb2124203
-
SHA512
55fd26ce34d710f1e538077a95abd1390a39a36f150507e262e3b8cdc63ba3e295bcc17edbeb14af5ee1cac074951a975a65d363c1bf9cc46cf981553e8705e8
-
SSDEEP
3072:t8SNT/iW+anmglAFLV/TAshjS2aKu8WGJjZDF1h3RZXqUB9FSXnNL:pNrLv+/TAMS/KtBdDqUreL
Malware Config
Signatures
Files
-
2e504c61897e5ad43ff190a4779fa558938ee94e01691219431b135eb2124203.exe windows x86
b47f81f73d9b6afeb767c8af6bc2eba8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgCtrlID
SetCaretPos
ShowCursor
SetWindowPlacement
DestroyCursor
EnableMenuItem
PostMessageW
SetDlgItemTextA
UpdateWindow
GetMessageExtraInfo
RegisterClassExW
EnumThreadWindows
EndPaint
SetDlgItemTextW
MessageBoxExA
ScrollWindow
EqualRect
TrackPopupMenuEx
ReleaseDC
DefDlgProcW
GetClassInfoExA
GetSystemMenu
TranslateAcceleratorA
LoadStringA
CreateWindowExA
WindowFromPoint
DialogBoxParamW
SetSysColors
GetNextDlgTabItem
AdjustWindowRect
HideCaret
LookupIconIdFromDirectory
ActivateKeyboardLayout
MapWindowPoints
GetWindowTextW
DialogBoxParamA
AttachThreadInput
GetMenuState
WaitForInputIdle
InsertMenuA
CharToOemW
SwitchToThisWindow
GetSysColorBrush
GetMenu
MonitorFromPoint
GetForegroundWindow
OpenDesktopW
ScrollWindowEx
DrawTextA
keybd_event
DeleteMenu
ScreenToClient
FillRect
MapVirtualKeyW
GrayStringW
CreateIconIndirect
SetForegroundWindow
RegisterHotKey
SetScrollInfo
TabbedTextOutW
SetMenu
CharLowerBuffW
SetMenuDefaultItem
IsDlgButtonChecked
CheckRadioButton
GetScrollInfo
IsCharUpperA
IsWindowEnabled
SendMessageA
SystemParametersInfoW
LoadImageA
LoadIconW
CopyImage
GetMessageA
GetSysColor
FindWindowExA
SetRectEmpty
SendNotifyMessageW
SetWindowTextA
DrawMenuBar
GetMessageTime
MessageBoxW
GetScrollRange
CharToOemA
SetMenuItemBitmaps
GetCursorPos
InSendMessageEx
PostMessageA
RedrawWindow
GetMenuItemRect
DialogBoxIndirectParamA
CascadeWindows
EnableScrollBar
SetRect
ShowScrollBar
DrawIcon
GetClassNameW
GetMessageW
DefFrameProcW
LockWindowUpdate
CharToOemBuffA
SetParent
SendInput
IsMenu
IsRectEmpty
ArrangeIconicWindows
GetKeyboardType
DrawFrameControl
CreateMenu
IsCharLowerA
TileWindows
FindWindowW
LoadCursorA
InvertRect
BeginPaint
CreateIconFromResource
InSendMessage
IsDialogMessageA
DispatchMessageW
GetShellWindow
CharPrevW
CloseDesktop
shlwapi
PathIsUNCW
msvcrt
_controlfp
__set_app_type
mbtowc
iswprint
wcstod
swscanf
strchr
fread
__p__fmode
__p__commode
strcspn
strcpy
fputc
_amsg_exit
mktime
_initterm
strcoll
setlocale
fflush
srand
memset
towlower
iswspace
toupper
_ismbblead
clearerr
fseek
fprintf
strtol
islower
atol
_XcptFilter
_exit
ftell
printf
setvbuf
iswdigit
strncmp
tolower
wcsncpy
fgets
wcscspn
sprintf
rand
_cexit
localtime
__setusermatherr
__getmainargs
kernel32
GlobalDeleteAtom
GlobalMemoryStatusEx
IsDBCSLeadByte
InitializeCriticalSection
lstrcmpiW
OpenEventW
FoldStringW
LCMapStringW
lstrcmpA
HeapReAlloc
SetThreadLocale
GetPriorityClass
IsBadReadPtr
FindResourceExA
GetCommProperties
lstrlenW
SetFilePointer
ConvertDefaultLocale
lstrlenA
lstrcmpW
LockResource
CompareStringW
SetCurrentDirectoryA
VerSetConditionMask
IsBadStringPtrW
UnlockFile
ResetEvent
GetThreadPriority
VerifyVersionInfoW
FileTimeToSystemTime
LocalAlloc
CreateFileW
SetHandleInformation
HeapUnlock
ReleaseMutex
LocalReAlloc
GetOEMCP
lstrcpyW
FindNextFileW
GetCommState
GetModuleFileNameA
CancelWaitableTimer
GetWindowsDirectoryA
RaiseException
ResumeThread
GetCommandLineA
ReleaseSemaphore
GetCurrentThread
EnumResourceLanguagesA
SetFileApisToOEM
GetDateFormatW
ClearCommError
lstrcpynA
GetSystemDirectoryW
FindResourceW
lstrcpynW
Exports
Exports
Sections
.itext Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ips1 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ips2 Size: 512B - Virtual size: 89B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ntrs Size: 1024B - Virtual size: 583B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ips3 Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mode Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ