?CreateEventJUDhfjkldf@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
b48a5bfd4fb37e698335eaa87c9d2c5d894cb25f125e79f2144e5354b1260da1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b48a5bfd4fb37e698335eaa87c9d2c5d894cb25f125e79f2144e5354b1260da1.exe
Resource
win10v2004-20221111-en
General
-
Target
b48a5bfd4fb37e698335eaa87c9d2c5d894cb25f125e79f2144e5354b1260da1
-
Size
216KB
-
MD5
43ffa05c3cdfa87c08821436ba0c9afd
-
SHA1
500edd4ae95732552c88158a2bf9ab68225f7020
-
SHA256
b48a5bfd4fb37e698335eaa87c9d2c5d894cb25f125e79f2144e5354b1260da1
-
SHA512
18baaeed76339c9ff08734645db6bf2a2a7f2779b8f43f4b1d1540a81ff090a2c85d38f756a0cfcbacd8033de9a21633bd59ab71c3faa519a2f32d3bf78a03a2
-
SSDEEP
6144:aX6yzHLMILObG3nGWvGa+1pQniieJvpPkGmSPiSzRG:ZUg6ObkGWH+PsjQldWS
Malware Config
Signatures
Files
-
b48a5bfd4fb37e698335eaa87c9d2c5d894cb25f125e79f2144e5354b1260da1.exe windows x86
d528ec19257d3d6b8adfe522bcd18d23
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextExtentPoint32W
RemoveFontResourceW
RectInRegion
GetDeviceCaps
LPtoDP
MoveToEx
GetDIBits
CreateSolidBrush
RestoreDC
EndDoc
SelectPalette
ScaleWindowExtEx
CreateICW
SetDIBColorTable
kernel32
HeapWalk
SearchPathA
GetCommConfig
GetFileAttributesA
GlobalFree
SetTimerQueueTimer
GetPriorityClass
GetSystemTimeAsFileTime
GetCommTimeouts
VirtualAlloc
lstrcpyW
MulDiv
CreateWaitableTimerW
SystemTimeToFileTime
GetComputerNameW
TransactNamedPipe
user32
InflateRect
IsDlgButtonChecked
DefDlgProcW
EnableScrollBar
DrawFrameControl
CascadeWindows
GrayStringW
DefWindowProcA
GetKeyboardType
RemovePropW
SetTimer
CallWindowProcA
RedrawWindow
ShowOwnedPopups
GetKeyNameTextW
keybd_event
CharToOemBuffA
PostThreadMessageA
OpenInputDesktop
SetRect
OpenDesktopW
LoadBitmapA
MoveWindow
ChildWindowFromPointEx
EnumThreadWindows
CharUpperBuffA
SetCursor
CharToOemW
OpenIcon
DefFrameProcW
IsIconic
SetForegroundWindow
InternalGetWindowText
msvcrt
strtok
strchr
perror
iswprint
_controlfp
floor
__set_app_type
__p__fmode
__p__commode
wcscpy
_amsg_exit
_initterm
_acmdln
swprintf
exit
mktime
_ismbblead
isxdigit
_XcptFilter
puts
_exit
_cexit
__setusermatherr
__getmainargs
comctl32
ImageList_LoadImageW
ImageList_Destroy
ImageList_GetIcon
Exports
Exports
Sections
.text Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idat Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.diag_x Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.div Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.diag_y Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imul Size: 512B - Virtual size: 230B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.plus Size: 1024B - Virtual size: 725B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.minus Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ