?CreateEventJUDhfjkldf@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
771530ef13189a1267a4afe2f5550cc74637819ea0aae6c4b4ce29052d76e2d2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
771530ef13189a1267a4afe2f5550cc74637819ea0aae6c4b4ce29052d76e2d2.exe
Resource
win10v2004-20220812-en
General
-
Target
771530ef13189a1267a4afe2f5550cc74637819ea0aae6c4b4ce29052d76e2d2
-
Size
215KB
-
MD5
e4c3bb1afc27d3d299ab7f7932a87d31
-
SHA1
dda4b1a49cd8a754b353685ad996128bbdaa28be
-
SHA256
771530ef13189a1267a4afe2f5550cc74637819ea0aae6c4b4ce29052d76e2d2
-
SHA512
fb7f1d4d9fd7426f9c79247f4ebe65cb0e0f49b491d75e883107973f739c6b533873b1f5db9fff382a43c088b702a34ec8741228c5c6dabc5098df659256c961
-
SSDEEP
6144:9w1/VHG1peGY//LvQI0cFhmB49H9wCPkNRcc:9w3HG1IGgToI9x9Hm6uR5
Malware Config
Signatures
Files
-
771530ef13189a1267a4afe2f5550cc74637819ea0aae6c4b4ce29052d76e2d2.exe windows x86
ece5974fae68a40009cfe9d9767f5f93
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharLowerA
GrayStringW
GetIconInfo
LoadImageW
LoadCursorW
TranslateAcceleratorW
wvsprintfW
ClipCursor
SetRect
CreateWindowExA
DefFrameProcA
SetUserObjectInformationW
GetShellWindow
DrawFrameControl
UpdateWindow
EqualRect
ShowWindow
LoadIconW
FillRect
keybd_event
DestroyWindow
PostQuitMessage
FindWindowExA
DefDlgProcW
GetSystemMenu
TranslateAcceleratorA
PostMessageW
GetKeyboardType
CharNextW
CharPrevW
FindWindowW
LoadBitmapA
EndDialog
MessageBoxA
kernel32
IsBadWritePtr
UnlockFile
LocalSize
FlushViewOfFile
GetUserDefaultUILanguage
GetLocaleInfoW
GlobalDeleteAtom
TransactNamedPipe
HeapWalk
lstrcpyW
SizeofResource
GetUserDefaultLCID
SetSystemTimeAdjustment
HeapReAlloc
GetNumberFormatA
WriteFile
comctl32
ImageList_Read
ImageList_Create
ImageList_ReplaceIcon
PropertySheetW
msvcrt
strcspn
_controlfp
__set_app_type
__p__fmode
strncpy
sprintf
wcstol
strpbrk
__p__commode
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
rand
time
_cexit
fclose
__setusermatherr
__getmainargs
mbtowc
ftell
gdi32
Polygon
GetCurrentObject
UnrealizeObject
GetDIBits
ExtTextOutA
CreatePatternBrush
PatBlt
CreateCompatibleBitmap
CreateBrushIndirect
SetWindowExtEx
SelectObject
RestoreDC
ExtFloodFill
CreateDIBSection
GetFontData
Exports
Exports
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idat Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.diag_x Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.div Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.diag_y Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imul Size: 512B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.plus Size: 1024B - Virtual size: 681B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.minus Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ