?GetShiftAltInfo@@YGK_KHE:O
Static task
static1
Behavioral task
behavioral1
Sample
2454b226babc465746b8ee929a3fd51eb42ff86dd54da95e0cdced7e3c1105c6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2454b226babc465746b8ee929a3fd51eb42ff86dd54da95e0cdced7e3c1105c6.exe
Resource
win10v2004-20221111-en
General
-
Target
2454b226babc465746b8ee929a3fd51eb42ff86dd54da95e0cdced7e3c1105c6
-
Size
171KB
-
MD5
b6d23e16c6699fc5168b8b64ab679dd9
-
SHA1
65a51a893dd8b925bf64676e5f5968a84b87c56b
-
SHA256
2454b226babc465746b8ee929a3fd51eb42ff86dd54da95e0cdced7e3c1105c6
-
SHA512
85689a7ea25a3ff3ea549ce8ddd3846827e239556378a9181049907fbf07c22931c0528e1e38fa048ea8c99b50fd55b16992c7217b86ebc461d5be41c9e366e5
-
SSDEEP
3072:99Kdy0wmblLziVsbMunKIrTGofCGnCIJVRlENe7bE3nKRQeGCASvK4B5z9S8I:9OyDmblLtbMuKAGmCGCIllzQebASy4PO
Malware Config
Signatures
Files
-
2454b226babc465746b8ee929a3fd51eb42ff86dd54da95e0cdced7e3c1105c6.exe windows x86
46f61ef129437a091e6ad6d3b92b5468
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetScrollInfo
InternalGetWindowText
CreateWindowExW
IsCharAlphaW
GetWindowTextLengthW
WindowFromPoint
LoadCursorA
GetMenuStringW
InSendMessageEx
GetSubMenu
GetClassNameW
DrawEdge
DialogBoxIndirectParamA
wvsprintfA
GetWindowRect
wsprintfW
MessageBoxExW
GetMessageTime
IsRectEmpty
CheckRadioButton
GetClientRect
GetUpdateRgn
ChangeMenuW
GetActiveWindow
IsIconic
KillTimer
DrawAnimatedRects
ScrollWindow
GetIconInfo
DefDlgProcA
IsDlgButtonChecked
ClipCursor
ToUnicodeEx
GetWindowPlacement
BeginPaint
GetNextDlgGroupItem
GetWindow
CallWindowProcW
GetUserObjectInformationA
GetClassInfoA
IsCharLowerA
MapDialogRect
CreatePopupMenu
CreateCursor
MoveWindow
CharPrevA
InvalidateRect
CharUpperA
SetScrollPos
GetClassLongW
GetMessageA
CloseDesktop
InsertMenuW
IsMenu
InSendMessage
CharToOemA
SetTimer
LoadImageW
InsertMenuA
RemovePropW
WaitMessage
DragObject
ClientToScreen
AdjustWindowRect
GetDC
HideCaret
CharPrevW
LoadBitmapW
GetWindowLongW
PostMessageA
SendNotifyMessageW
UnloadKeyboardLayout
GetKeyboardLayoutNameW
GetWindowTextW
DestroyWindow
GrayStringW
ScrollWindowEx
CopyRect
LoadBitmapA
CharUpperW
GetWindowTextA
SendInput
RegisterClassW
GetPropW
SetParent
ShowCursor
SetDlgItemInt
DestroyAcceleratorTable
PostMessageW
SendMessageTimeoutA
SendMessageTimeoutW
SetDlgItemTextW
DestroyMenu
CharLowerA
ShowScrollBar
GetSysColorBrush
GetForegroundWindow
ShowOwnedPopups
DefFrameProcW
RedrawWindow
SetFocus
EndDialog
RegisterClassExA
GetScrollPos
DispatchMessageA
DefWindowProcW
GetDoubleClickTime
SetCursor
DefFrameProcA
DeleteMenu
SetUserObjectInformationW
SendMessageW
DrawMenuBar
RegisterClassA
MapVirtualKeyExW
PostThreadMessageW
EnumWindows
DrawStateA
FindWindowA
GetSystemMetrics
msvcrt
clearerr
puts
strncpy
putc
wcsncpy
perror
putchar
wcscoll
swprintf
ftell
getenv
wcstombs
atol
wcslen
isdigit
_controlfp
strtok
__set_app_type
fseek
realloc
__p__fmode
wcscpy
__p__commode
strcpy
_amsg_exit
bsearch
strpbrk
tolower
_initterm
system
_ismbblead
strspn
wcscmp
isalnum
wcstod
vsprintf
iswctype
_XcptFilter
fgetc
_exit
iswprint
_cexit
wcsncmp
__setusermatherr
__getmainargs
strrchr
wcsrchr
comdlg32
GetFileTitleW
ChooseFontW
ReplaceTextW
FindTextW
kernel32
ClearCommBreak
HeapCreate
VirtualFree
GetLastError
MulDiv
GetCommTimeouts
QueryPerformanceCounter
FindFirstChangeNotificationW
GetSystemWindowsDirectoryW
CreateSemaphoreW
LocalUnlock
HeapReAlloc
GetSystemDirectoryA
GlobalGetAtomNameW
CopyFileA
CreateThread
TlsFree
LoadLibraryA
LocalAlloc
OpenFileMappingA
GetBinaryTypeW
GetUserDefaultLangID
lstrcpynW
WaitForMultipleObjects
SearchPathW
GetTempPathW
SetCommBreak
lstrlenA
SetNamedPipeHandleState
GlobalReAlloc
GetCurrentThread
GetNumberFormatA
EnumSystemLocalesA
IsBadReadPtr
IsBadCodePtr
SearchPathA
lstrcmpiW
OpenEventW
LocalFree
ConvertDefaultLocale
OpenFileMappingW
CreateNamedPipeA
DeleteFileA
GetTempPathA
GetExitCodeThread
GetFileAttributesA
GetOverlappedResult
GetFullPathNameA
lstrcatA
ClearCommError
PulseEvent
GetFileAttributesExA
GlobalGetAtomNameA
SetThreadAffinityMask
SetFilePointer
WaitForSingleObjectEx
shlwapi
StrToIntW
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bit Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.insec Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.inmin Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wall Size: 1024B - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ