?KJFDkljfljhUYDFuifUKYFlKFilFUYFUIh@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
e84b9df3da31900f07f86e8fc438c83072a639285bc5f8e1257d44645aae003d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e84b9df3da31900f07f86e8fc438c83072a639285bc5f8e1257d44645aae003d.exe
Resource
win10v2004-20220901-en
General
-
Target
e84b9df3da31900f07f86e8fc438c83072a639285bc5f8e1257d44645aae003d
-
Size
221KB
-
MD5
436f13011ae0e48fbfb514c3eb2c25fb
-
SHA1
e4978af9476fccd60375596419fdf0ed754cf1d5
-
SHA256
e84b9df3da31900f07f86e8fc438c83072a639285bc5f8e1257d44645aae003d
-
SHA512
af930c3de70e693f1804bb441190fd7a25719f4cc4a9ee53a6fccb4de51d86578df40ef3b656cb2f398bd898d46a3b8b4e5b88b7fcfec99f27c6d72249e25b2a
-
SSDEEP
6144:YasCOj/RycdbUT5AHsgZSa6LhrduxiSIwocP4/FLhCCsMn:Cj/q+ua+hAxiS1KgLMn
Malware Config
Signatures
Files
-
e84b9df3da31900f07f86e8fc438c83072a639285bc5f8e1257d44645aae003d.exe windows x86
4f0f0c5bacd6f752cd199890159cfd5b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RemovePropW
ActivateKeyboardLayout
RegisterHotKey
GetSystemMenu
DestroyWindow
InvertRect
SetCursorPos
IsCharAlphaW
ModifyMenuW
DefFrameProcW
CreateAcceleratorTableW
InSendMessageEx
PostQuitMessage
LoadCursorW
InsertMenuW
GetMessageExtraInfo
SetPropW
UpdateWindow
FindWindowW
RegisterClassA
InsertMenuItemW
CharToOemA
GetTopWindow
SetMenuItemInfoW
IsMenu
SetUserObjectInformationW
DrawEdge
CreateIconIndirect
AdjustWindowRect
GetKeyState
kernel32
GetFileAttributesW
CreateEventA
SystemTimeToFileTime
LocalLock
LocalAlloc
LocalFree
SetHandleCount
MoveFileW
DeleteFileW
VirtualFree
OpenSemaphoreW
WaitForSingleObjectEx
GetFileInformationByHandle
GetCurrentThreadId
comctl32
ImageList_Write
ImageList_GetIconSize
ImageList_Destroy
gdi32
PatBlt
CreateRectRgnIndirect
IntersectClipRect
EndDoc
SetWindowExtEx
TextOutW
DeleteObject
EndPage
GetStockObject
GetTextExtentPointW
SetBitmapBits
BeginPath
GetPixel
comdlg32
PageSetupDlgW
CommDlgExtendedError
ReplaceTextW
Exports
Exports
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 34KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ