_CallWindowProcACallWindowProcA@0
Static task
static1
Behavioral task
behavioral1
Sample
f8206ccfbdeb35bb70b384239312296d3e6f0f4848f5f1740f164a8369186e65.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f8206ccfbdeb35bb70b384239312296d3e6f0f4848f5f1740f164a8369186e65.exe
Resource
win10v2004-20221111-en
General
-
Target
f8206ccfbdeb35bb70b384239312296d3e6f0f4848f5f1740f164a8369186e65
-
Size
169KB
-
MD5
9ec5ea95833e66db1240df7b84abf21d
-
SHA1
8a5cc4728012d9d2a33a351cb85c5a95af253fef
-
SHA256
f8206ccfbdeb35bb70b384239312296d3e6f0f4848f5f1740f164a8369186e65
-
SHA512
61b543e4e2224cf95412e3a1ce8a42ad18dcb191820011612e4d9db0b81f483bfa17e4c9f05edb9708ee7dc8f7c62ffb098522f535b421560a74e4db1f6d8d66
-
SSDEEP
3072:XbJQhLhPeoHVcvh++Z7NHj95x/6kGU4ia2xD8Ht8VPq:XbJQlhmKVcJ+aD9HSkGOa2A/
Malware Config
Signatures
Files
-
f8206ccfbdeb35bb70b384239312296d3e6f0f4848f5f1740f164a8369186e65.exe windows x86
6f5e861ec49820e89df56d0191af0766
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
GetLocaleInfoW
HeapLock
VerifyVersionInfoW
GetThreadPriority
ResumeThread
HeapFree
TryEnterCriticalSection
user32
SetWindowLongA
GetAsyncKeyState
SetWindowTextW
CopyAcceleratorTableW
SetSysColors
DlgDirListA
CreateIconIndirect
SetParent
DrawTextA
MessageBoxA
IsDialogMessageA
GetWindowLongA
CharLowerA
SendMessageTimeoutW
GetKeyboardLayout
DeleteMenu
HideCaret
GetMenuCheckMarkDimensions
CharToOemBuffA
GetMessageTime
gdi32
SetWindowExtEx
CreateCompatibleDC
CreateDIBPatternBrushPt
SetBkColor
CreateFontIndirectW
GetDIBits
StretchDIBits
GetDIBColorTable
MoveToEx
atl
AtlGetVersion
AtlSetErrorInfo
ole32
CoSetState
GetErrorInfo
shlwapi
PathFindExtensionA
Exports
Exports
Sections
.fvgcf Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.r5trtr Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.weew Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ