?KJFDkljfljhUYDFuifUKYFlKFilFUYFUIh@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
970f94b742632ba949cecd56fd33775aa70793ebb54fc614fa22612a6d9ee375.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
970f94b742632ba949cecd56fd33775aa70793ebb54fc614fa22612a6d9ee375.exe
Resource
win10v2004-20221111-en
General
-
Target
970f94b742632ba949cecd56fd33775aa70793ebb54fc614fa22612a6d9ee375
-
Size
220KB
-
MD5
edd1a3fd6e4519fb2a3abcfdb4f4e289
-
SHA1
7216d65c2da118243b152353b2ac72da67ad7a9a
-
SHA256
970f94b742632ba949cecd56fd33775aa70793ebb54fc614fa22612a6d9ee375
-
SHA512
0a0969b809d75b539e8486337dfe93daa6d4084108e4e21c783987daec62bff1b686a9e384d687bd4505972ae4017bb35d5aabc875739efcfa45470d980be753
-
SSDEEP
6144:CpGPcmNfoXCAWSIZR/pORbxSUHkMZCMvVM:XfSUV6aUHb0+V
Malware Config
Signatures
Files
-
970f94b742632ba949cecd56fd33775aa70793ebb54fc614fa22612a6d9ee375.exe windows x86
596b39e41cbd031589740efa05495668
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TrackPopupMenu
CreateDialogParamW
AllowSetForegroundWindow
CreateMenu
GetScrollPos
TranslateAcceleratorW
RemoveMenu
DefWindowProcW
SendMessageW
DefDlgProcW
GetClassInfoW
ShowWindow
SetScrollPos
GetSystemMenu
GetMenuCheckMarkDimensions
DrawIconEx
CharNextA
GetMenu
GetKeyState
GetMenuItemRect
DefFrameProcA
CharUpperBuffW
DrawAnimatedRects
MessageBoxW
CharLowerW
DeleteMenu
SetMenu
GetMessageTime
GetMenuStringA
SetWindowRgn
gdi32
Escape
SetTextAlign
CreatePen
GetDIBColorTable
SetBkColor
SaveDC
ResizePalette
ExtTextOutA
StretchBlt
AddFontResourceW
SetDIBColorTable
CreateFontW
SetTextColor
comdlg32
GetOpenFileNameA
PageSetupDlgW
kernel32
LeaveCriticalSection
GetThreadContext
MoveFileExW
LocalFree
GetComputerNameExA
GetSystemWindowsDirectoryA
GetCommTimeouts
LoadLibraryW
LocalAlloc
lstrlenW
EnumResourceNamesA
FormatMessageA
InitializeCriticalSection
FindCloseChangeNotification
GetDateFormatW
Exports
Exports
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 35KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ