?XO_T_AWTBrro_YY_T@@YGXPAH@Z
Static task
static1
Behavioral task
behavioral1
Sample
f9b9622e1899bdf9ce97f84570b17f2c3e0e968fc8bf365276b6098c24f9b038.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9b9622e1899bdf9ce97f84570b17f2c3e0e968fc8bf365276b6098c24f9b038.exe
Resource
win10v2004-20220812-en
General
-
Target
f9b9622e1899bdf9ce97f84570b17f2c3e0e968fc8bf365276b6098c24f9b038
-
Size
120KB
-
MD5
dca13422c73b84c5060374e0a50321f9
-
SHA1
dd7a32e3382574a8b7bfdea043a57c208738dc5f
-
SHA256
f9b9622e1899bdf9ce97f84570b17f2c3e0e968fc8bf365276b6098c24f9b038
-
SHA512
d02e523283581836902ad506097e8a2fc0a3f63ecb26db38f979bea10452111a5f7e827f54b03feb670fe6bea71bdb9235488cd30b4661096cc83b31c5828139
-
SSDEEP
3072:QLwTqCL0l1wtvwJF+u8mduqkL4k6PpJY/:IwTK1wVUF+neO
Malware Config
Signatures
Files
-
f9b9622e1899bdf9ce97f84570b17f2c3e0e968fc8bf365276b6098c24f9b038.exe windows x86
4e662be2160e1a30144c033e810fe27e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlGetPartW
StrSpnW
StrCmpW
user32
IsWindowVisible
GetKeyboardLayoutList
GetKeyboardLayoutNameW
GetMessageA
SystemParametersInfoW
GetUserObjectInformationA
IsCharLowerA
ShowWindow
GetClassNameW
InflateRect
OpenDesktopW
AdjustWindowRect
SetWindowTextW
CharUpperA
DragObject
OpenIcon
InsertMenuItemW
CreateAcceleratorTableW
ShowCaret
DestroyMenu
mouse_event
GetKeyState
RegisterClassA
HiliteMenuItem
DrawTextW
CheckRadioButton
HideCaret
IsDlgButtonChecked
ntdll
memset
comctl32
ImageList_Remove
ImageList_AddMasked
CreateToolbarEx
kernel32
LocalUnlock
GetCommProperties
CompareFileTime
CreateMutexA
GetSystemDefaultUILanguage
GetComputerNameExW
CreateFileMappingA
GetCurrentProcessId
GetLocaleInfoA
CreateFileA
GlobalAddAtomA
lstrlenW
lstrcatA
WaitForMultipleObjects
SetMailslotInfo
CreateWaitableTimerA
WaitForDebugEvent
GetShortPathNameA
lstrcpyA
gdi32
WidenPath
StartDocW
FillRgn
GetStockObject
SetBkColor
SetAbortProc
GetCharWidth32W
GetViewportOrgEx
PolyBezier
CreatePen
ScaleViewportExtEx
Polygon
DeleteDC
Exports
Exports
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ