Static task
static1
Behavioral task
behavioral1
Sample
3eed349fbff8973a244228d5f65d376b5f92f60af894edd9f95ad3a489d07599.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3eed349fbff8973a244228d5f65d376b5f92f60af894edd9f95ad3a489d07599.exe
Resource
win10v2004-20220812-en
General
-
Target
3eed349fbff8973a244228d5f65d376b5f92f60af894edd9f95ad3a489d07599
-
Size
1.4MB
-
MD5
d8558df807619b5111a89e5f7bfa4338
-
SHA1
d711bc83ac27d8b7f3964f00080b16df3c3bcd6f
-
SHA256
3eed349fbff8973a244228d5f65d376b5f92f60af894edd9f95ad3a489d07599
-
SHA512
c80aef079679c220cc49f453a1e21f41714b47dd9d93b8bba7651bc7b7a3f56d912bb33aea7d40589c18fd23810ef6980edbb961029cf95c2b4c96ab5fb51395
-
SSDEEP
24576:zW2VDj2lnBVTqr8n3M64/TZXECpqY2JPGUNeLGRT4ZEqP:BjUV28nwXEIqY2JxLVC
Malware Config
Signatures
Files
-
3eed349fbff8973a244228d5f65d376b5f92f60af894edd9f95ad3a489d07599.exe windows x86
050760514459901f461dccfbac92fae8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetReadFile
InternetQueryDataAvailable
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
winmm
timeGetTime
mixerGetNumDevs
mixerGetDevCapsA
mixerOpen
mixerClose
waveOutGetErrorTextA
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveOutOpen
waveOutWrite
waveOutPrepareHeader
waveInUnprepareHeader
waveInOpen
waveInGetNumDevs
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInReset
waveInClose
waveOutGetPosition
waveOutRestart
waveOutPause
psapi
GetProcessMemoryInfo
wmvcore
WMCreateWriter
WMCreateEditor
WMCreateReader
avifil32
AVIFileOpenA
AVISaveOptionsFree
AVIFileInfoA
AVIStreamWrite
AVIStreamSetFormat
AVIFileCreateStreamA
AVIStreamTimeToSample
AVIStreamStart
AVIStreamLength
AVISaveOptions
AVIFileRelease
AVIStreamRelease
AVIStreamInfoA
AVIFileGetStream
AVIMakeCompressedStream
AVIStreamRead
AVIStreamReadFormat
AVIStreamSampleToTime
AVIStreamGetFrame
AVIFileInit
AVIFileExit
AVIStreamGetFrameClose
msvfw32
DrawDibRealize
DrawDibClose
DrawDibDraw
msimg32
TransparentBlt
keyboarddriver
??0CKeyHook@@QAE@XZ
??1CKeyHook@@UAE@XZ
?Stop@CKeyHook@@QAEHXZ
?GetInfo@CKeyHook@@QAEPAU_KeyHookInfo@@XZ
?Start@CKeyHook@@QAEPAUHHOOK__@@HPAUHWND__@@@Z
mousedriver
?Start@CMouseHook@@QAEPAUHHOOK__@@HPAUHWND__@@@Z
?Stop@CMouseHook@@QAEHXZ
??1CMouseHook@@UAE@XZ
??0CMouseHook@@QAE@XZ
?GetInfo@CMouseHook@@QAEPAU_MouseHookInfo@@XZ
kernel32
GetFileTime
CreateDirectoryA
CreateProcessA
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
HeapFree
HeapAlloc
CreateFileMappingA
InterlockedExchange
CreateThread
GetACP
SetThreadPriority
GetCurrentThread
ReadConsoleInputA
GetNumberOfConsoleInputEvents
GetStdHandle
SetPriorityClass
GlobalDeleteAtom
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
LocalFree
FormatMessageA
FileTimeToLocalFileTime
SetLastError
DuplicateHandle
FlushFileBuffers
LockFile
GetVolumeInformationA
GetThreadLocale
GlobalFlags
LocalAlloc
TlsAlloc
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
GetCurrentDirectoryA
RtlUnwind
HeapReAlloc
ExitProcess
GetSystemTime
GetLocalTime
SetConsoleCtrlHandler
GetStartupInfoA
GetCommandLineA
RaiseException
ExitThread
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
HeapDestroy
HeapCreate
IsBadWritePtr
UnhandledExceptionFilter
SetStdHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
RemoveDirectoryA
FindClose
GetDriveTypeA
FindFirstFileA
FindNextFileA
UnlockFile
FileTimeToSystemTime
GetTimeZoneInformation
GetTempPathA
lstrcmpiA
GetCurrentProcess
GetProcessTimes
GetModuleFileNameA
LoadLibraryExA
GetFileInformationByHandle
FindResourceA
LoadResource
LockResource
SizeofResource
lstrcmpA
GetModuleHandleA
OutputDebugStringA
ReleaseMutex
SetFileAttributesA
SetEndOfFile
GetSystemWindowsDirectoryA
GetCurrentThreadId
WinExec
GetWindowsDirectoryA
SetFilePointer
ResetEvent
InterlockedDecrement
InterlockedIncrement
WaitForSingleObject
DebugBreak
CreateEventA
EnterCriticalSection
LeaveCriticalSection
SetEvent
DeleteCriticalSection
InitializeCriticalSection
HeapValidate
PeekNamedPipe
lstrcpyA
DeleteFileA
MoveFileA
Sleep
CopyFileA
MultiByteToWideChar
VirtualAlloc
VirtualFree
WriteFile
GetFileType
ReadFile
CreateFileA
GetFileSize
GetFullPathNameA
MulDiv
GetSystemDirectoryA
lstrcpynA
GetProfileStringA
GetTickCount
lstrcatA
LoadLibraryA
GetProcAddress
FreeLibrary
ResumeThread
SuspendThread
GetLastError
CloseHandle
GlobalAlloc
GlobalSize
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
GetFileAttributesA
WideCharToMultiByte
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrlenA
GlobalFindAtomA
user32
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
CheckDlgButton
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
GetScrollInfo
GetScrollRange
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
RegisterWindowMessageA
PostThreadMessageA
wvsprintfA
IsWindowVisible
GetSystemMenu
AppendMenuA
ShowWindow
SetMenuDefaultItem
SetForegroundWindow
TrackPopupMenu
GetWindowDC
MapDialogRect
GetIconInfo
SetClipboardData
GetCursorInfo
IsDialogMessageA
GetCapture
GetMenuItemCount
GetMenuItemID
GetMenuStringA
ModifyMenuA
UnhookWindowsHookEx
CallWindowProcA
GetClassNameA
CallNextHookEx
SetWindowsHookExA
DrawStateA
GrayStringA
TabbedTextOutA
CopyIcon
WindowFromPoint
GetDesktopWindow
GetWindowLongA
SetWindowLongA
GetMessagePos
SystemParametersInfoA
IsWindow
RedrawWindow
OffsetRect
DrawEdge
DrawFocusRect
ClientToScreen
LoadBitmapA
MessageBoxA
LoadMenuA
GetSubMenu
GetKeyState
SetRect
GetCursorPos
SetRectEmpty
SetWindowRgn
SetCapture
ReleaseCapture
SetWindowPos
IsIconic
DrawIcon
FillRect
LoadStringA
GetAsyncKeyState
GetClipboardOwner
IsDlgButtonChecked
OpenClipboard
EmptyClipboard
CloseClipboard
UpdateWindow
SetActiveWindow
SetWindowTextA
SetScrollPos
GetScrollPos
InflateRect
FrameRect
wsprintfA
GetSysColor
LoadCursorA
SetCursor
PostMessageA
DestroyCursor
DestroyIcon
LoadImageA
LoadCursorFromFileA
DrawIconEx
GetWindow
GetDlgCtrlID
LoadIconA
MessageBeep
UnregisterHotKey
RegisterHotKey
PostQuitMessage
DrawTextA
SetTimer
PeekMessageA
TranslateMessage
DispatchMessageA
SetWindowContextHelpId
RegisterClipboardFormatA
CharUpperA
DestroyMenu
GetMessageA
ValidateRect
EndPaint
BeginPaint
MoveWindow
GetDC
ReleaseDC
KillTimer
IsRectEmpty
ScreenToClient
PtInRect
GetParent
GetWindowRect
GetSystemMetrics
CopyRect
InvalidateRect
GetClientRect
EnableWindow
SendMessageA
GetNextDlgGroupItem
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
SetScrollRange
gdi32
CreateDIBitmap
CreateBitmap
LineTo
MoveToEx
SetBkMode
SelectPalette
ExtSelectClipRgn
SetROP2
GetClipBox
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
RoundRect
GetViewportExtEx
GetWindowExtEx
GetMapMode
DPtoLP
GetTextColor
LPtoDP
CreateDCA
CreatePolygonRgn
PaintRgn
Escape
RectVisible
PtVisible
CreateCompatibleBitmap
GetDeviceCaps
RealizePalette
GetTextExtentPoint32A
CreatePalette
Polygon
CreateRoundRectRgn
StretchBlt
BitBlt
GetDIBits
CreateCompatibleDC
DeleteDC
Arc
Ellipse
CreateRectRgn
GetTextMetricsA
CreateEllipticRgn
CreateFontIndirectA
SetTextColor
ExcludeClipRect
TextOutA
GetBkColor
CreateSolidBrush
SetBkColor
ExtTextOutA
PatBlt
SelectObject
Rectangle
DeleteObject
GetTextExtentPointA
CreatePen
GetStockObject
GetPixel
GetObjectA
comdlg32
GetSaveFileNameA
PrintDlgA
GetFileTitleA
ChooseColorA
ChooseFontA
GetOpenFileNameA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
shell32
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
comctl32
_TrackMouseEvent
ImageList_GetIcon
FlatSB_EnableScrollBar
ImageList_Destroy
InitializeFlatSB
ImageList_Draw
ord17
oledlg
ord8
ole32
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromProgID
CoTaskMemAlloc
CoCreateGuid
CLSIDFromString
CreateStreamOnHGlobal
CoInitialize
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeEx
olepro32
ord250
ord253
oleaut32
SysAllocString
VariantCopy
VariantChangeType
SysAllocStringLen
SysAllocStringByteLen
SysStringLen
VariantTimeToSystemTime
VariantClear
SysFreeString
gdiplus
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipSaveImageToFile
GdipLoadImageFromStream
GdipCreateBitmapFromResource
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCloneBitmapArea
GdiplusStartup
GdiplusShutdown
GdipDeletePen
GdipDeleteGraphics
GdipDrawRectangleI
GdipCreateFromHDC
GdipCreatePen1
GdipDeleteBrush
GdipCreateSolidFill
GdipAlloc
GdipCloneBrush
GdipFree
GdipFillRectangleI
GdipDrawImageRectI
GdipGetImageHeight
GdipGetImageWidth
GdipCreateLineBrushFromRectI
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdipCloneBitmapAreaI
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipCloneImage
GdipFillEllipseI
GdipSetSmoothingMode
GdipCreatePath
GdipDeletePath
GdipDrawEllipseI
GdipDrawLineI
GdipDrawPath
GdipFillPath
GdipSetPenEndCap
GdipSetPenStartCap
GdipSetPenDashStyle
GdipDeleteRegion
GdipGetRegionHRgn
GdipCreateRegionPath
GdipAddPathRectangleI
GdipResetPath
GdipAddPathEllipseI
GdipAddPathArcI
GdipDrawImageRectRect
GdipFillRectangle
GdipLoadImageFromFile
GdipCreateLineBrushFromRectWithAngleI
GdipGetImageThumbnail
GdipCreateBitmapFromHBITMAP
GdipDeleteFont
GdipDeleteStringFormat
GdipDrawString
GdipGetImageGraphicsContext
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateStringFormat
GdipDeleteFontFamily
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipFillPolygonI
GdipDrawPolygonI
GdipDrawImageRect
Sections
.text Size: 928KB - Virtual size: 926KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 212KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 874KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ