?KJFDkljfljhUYDFuifUKYFlKFilFUYFUIh@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
cb50c5ec7b860dd0580ea2e8c235cfec580999690368b4e737fbe469ff7abb25.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb50c5ec7b860dd0580ea2e8c235cfec580999690368b4e737fbe469ff7abb25.exe
Resource
win10v2004-20220812-en
General
-
Target
cb50c5ec7b860dd0580ea2e8c235cfec580999690368b4e737fbe469ff7abb25
-
Size
221KB
-
MD5
2d14dc6b81c6eb5e545e351d3cf3a91b
-
SHA1
e48c7cba9cf88733f3dff156f2f24589031ef8d8
-
SHA256
cb50c5ec7b860dd0580ea2e8c235cfec580999690368b4e737fbe469ff7abb25
-
SHA512
a26da53dda34226d1408374ff514050e94278deec3b9c8c11c361048b5f1602e7d8bc73398cdc8ee514fd4b9b56db57eb49436f7964c1b798598fd81e4aa72f8
-
SSDEEP
6144:9bPVHvNxq1ETW7VO3xBQNK+8oOmBCZ0qRGmYU:9b9jq1EAGfu8oONiqRGy
Malware Config
Signatures
Files
-
cb50c5ec7b860dd0580ea2e8c235cfec580999690368b4e737fbe469ff7abb25.exe windows x86
e0585087315ff9ef52a2723de49be12c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
Escape
ExcludeClipRect
SetRectRgn
GetROP2
CreateDCW
CreateBitmapIndirect
SetStretchBltMode
RemoveFontResourceW
CreatePen
CreateFontA
GetRgnBox
GetTextAlign
SetMapMode
SetLayout
user32
CharToOemBuffA
PostThreadMessageW
HideCaret
GetClassInfoExW
GetWindowLongW
LoadImageW
HiliteMenuItem
SetScrollPos
CreateWindowExA
RemovePropW
LoadStringW
IsWindowVisible
CascadeWindows
GetWindowRect
SwitchToThisWindow
CreateAcceleratorTableW
AdjustWindowRectEx
IsDialogMessageW
GetClassLongA
DrawIconEx
MessageBoxA
GetWindowPlacement
wvsprintfA
DefFrameProcW
GetDoubleClickTime
GetWindowDC
MessageBoxW
SetWindowRgn
BeginDeferWindowPos
kernel32
IsBadReadPtr
FindResourceExW
CreateEventA
LocalFree
CreateFileMappingW
lstrcmpiA
WaitCommEvent
VirtualFree
DefineDosDeviceW
GetUserDefaultUILanguage
LocalAlloc
FindCloseChangeNotification
UnhandledExceptionFilter
FindResourceA
Sleep
lstrcpyA
Exports
Exports
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 35KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ