Static task
static1
Behavioral task
behavioral1
Sample
9781c92bf811b988ded974c96d6ffe1f8268179dd21dd1db0d95417df2581bb1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9781c92bf811b988ded974c96d6ffe1f8268179dd21dd1db0d95417df2581bb1.exe
Resource
win10v2004-20220901-en
General
-
Target
9781c92bf811b988ded974c96d6ffe1f8268179dd21dd1db0d95417df2581bb1
-
Size
598KB
-
MD5
89cff7a01f31e8ca8b47208c523655d9
-
SHA1
b7712ebda2d9439045d960f545816699b19a185f
-
SHA256
9781c92bf811b988ded974c96d6ffe1f8268179dd21dd1db0d95417df2581bb1
-
SHA512
cf80b894621188f4a8bd1c063d596413575108d6a93d541fdd1b5704078310c945449165512edb55577b4e2376ea6ff8dd40727951e5703cbb42439b510ce958
-
SSDEEP
6144:fDbtdNpnrJAB0jud48rYVYb1cWugoEx81qx1k7f3wh69k6cT1HBy1cxOjbYS/6ch:bbt9KdbYVYbyQs61kqs1uROH56ch
Malware Config
Signatures
Files
-
9781c92bf811b988ded974c96d6ffe1f8268179dd21dd1db0d95417df2581bb1.exe windows x86
ff7b40f2716595947e2d9cdf8e0d468e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHFreeNameMappings
ExtractAssociatedIconExA
ExtractAssociatedIconW
SHGetFileInfoW
SheChangeDirExW
RealShellExecuteExW
RealShellExecuteW
ExtractIconW
SHGetSettings
SHGetDataFromIDListW
ShellExecuteExW
SHBrowseForFolder
DragQueryFileAorW
ShellAboutW
SHGetDataFromIDListA
InternalExtractIconListA
ExtractIconExA
DragQueryFileW
SHGetFileInfo
RealShellExecuteA
SHQueryRecycleBinW
SHGetSpecialFolderPathA
SHFormatDrive
ShellExecuteEx
SHUpdateRecycleBinIcon
FindExecutableA
SHGetPathFromIDList
InternalExtractIconListW
ExtractIconA
SheSetCurDrive
FindExecutableW
SHLoadInProc
SHEmptyRecycleBinA
ShellExecuteExA
DoEnvironmentSubstA
CommandLineToArgvW
SHFileOperationW
CheckEscapesW
ShellExecuteA
SHEmptyRecycleBinW
SHFileOperation
RealShellExecuteExA
ShellAboutA
SHGetPathFromIDListA
ExtractAssociatedIconA
FreeIconList
SHAppBarMessage
DragQueryFile
DragAcceptFiles
SHAddToRecentDocs
SHQueryRecycleBinA
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
SHGetNewLinkInfo
SHBrowseForFolderA
SHGetDesktopFolder
SHInvokePrinterCommandW
DragQueryPoint
SHGetDiskFreeSpaceA
SHBrowseForFolderW
ExtractIconEx
SHGetInstanceExplorer
DuplicateIcon
SHGetFileInfoA
DoEnvironmentSubstW
SheChangeDirA
SHGetPathFromIDListW
ExtractAssociatedIconExW
DragFinish
DragQueryFileA
ShellHookProc
ShellExecuteW
SHInvokePrinterCommandA
SheGetDirA
SHFileOperationA
ExtractIconExW
user32
BeginPaint
GetWindowContextHelpId
SetDeskWallpaper
FrameRect
VkKeyScanExW
DestroyWindow
GetDialogBaseUnits
GetKeyboardType
GetClassWord
DestroyIcon
GetComboBoxInfo
FindWindowA
CheckMenuRadioItem
IsDialogMessage
DispatchMessageA
wsprintfA
IsClipboardFormatAvailable
SetSystemCursor
SetWindowLongW
CascadeChildWindows
GetScrollRange
GetListBoxInfo
UpdateWindow
GetTitleBarInfo
DdeInitializeA
SetClipboardData
SetFocus
ArrangeIconicWindows
IsCharAlphaNumericA
GetDoubleClickTime
SetClassLongA
PeekMessageA
AppendMenuA
DrawStateA
AdjustWindowRect
GetIconInfo
SetDoubleClickTime
GetDlgItem
SwapMouseButton
MessageBeep
CreateMDIWindowA
CreateWindowStationA
HideCaret
MessageBoxW
GetKeyboardLayoutNameW
CascadeWindows
GetGuiResources
SetProcessWindowStation
ScrollWindow
GetCursorInfo
GetPropW
GetClipCursor
UnregisterClassA
GetMenuItemInfoW
SetMessageQueue
FindWindowExW
VkKeyScanExA
GetWindowRect
wsprintfW
SetUserObjectInformationA
EnumDesktopsA
MapDialogRect
LoadBitmapW
DdeAbandonTransaction
SetWinEventHook
GetMenuBarInfo
GetKeyboardLayout
GetInputState
SetShellWindow
ActivateKeyboardLayout
DialogBoxParamA
GetMenu
RemoveMenu
DdeQueryNextServer
CreateIcon
ReplyMessage
LoadKeyboardLayoutA
ChangeDisplaySettingsExW
InternalGetWindowText
PaintDesktop
LoadMenuIndirectA
GetLastActivePopup
WinHelpW
CharUpperBuffA
PtInRect
GetWindowRgn
GetKeyNameTextA
DefDlgProcA
SystemParametersInfoW
CallNextHookEx
SetCaretBlinkTime
ToUnicode
SetDebugErrorLevel
SetClipboardViewer
SendMessageTimeoutW
DdePostAdvise
CharLowerBuffA
SwitchDesktop
BlockInput
RemovePropA
EnumWindowStationsA
IsZoomed
DdeUninitialize
IsDialogMessageA
GetMenuDefaultItem
CharPrevExA
GetTopWindow
SetWindowTextW
DrawTextW
SetWindowsHookExW
CharToOemBuffA
CopyAcceleratorTableW
InvertRect
GetMenuInfo
RegisterDeviceNotificationA
SendNotifyMessageA
GetClassInfoExW
SetKeyboardState
GetUserObjectSecurity
MapVirtualKeyExA
VkKeyScanA
OpenDesktopA
DdeSetQualityOfService
UnpackDDElParam
GetMenuStringW
DdeSetUserHandle
SetCapture
OpenIcon
LockWindowUpdate
ShowWindowAsync
SetMenuItemInfoW
SetTimer
OpenClipboard
LoadMenuW
GetWindowTextW
SetLastErrorEx
GetSysColorBrush
ToUnicodeEx
MapWindowPoints
SetWindowWord
CharNextExA
ChangeMenuA
LoadMenuA
GetWindowInfo
ShowCaret
DrawFrame
CreateIconIndirect
UnregisterHotKey
LookupIconIdFromDirectoryEx
GetPriorityClipboardFormat
EndDeferWindowPos
InsertMenuItemA
LookupIconIdFromDirectory
SystemParametersInfoA
UnregisterClassW
TranslateMessage
PostQuitMessage
OpenDesktopW
DdeConnect
SetMessageExtraInfo
GetClipboardViewer
CloseClipboard
DdeGetLastError
TrackPopupMenu
ReuseDDElParam
LoadCursorFromFileW
VkKeyScanW
SendNotifyMessageW
DlgDirSelectExA
CharLowerW
GetSysColor
IsCharAlphaNumericW
GetClipboardFormatNameW
LoadCursorFromFileA
DefFrameProcA
DdeClientTransaction
CreateAcceleratorTableW
IsRectEmpty
SetScrollInfo
GetMessagePos
DdeUnaccessData
FindWindowW
GetUserObjectInformationW
SendDlgItemMessageA
DrawFocusRect
WaitMessage
SendInput
UnionRect
SetWindowContextHelpId
InsertMenuW
GetWindowLongA
IsCharUpperW
IsDialogMessageW
PackDDElParam
GetDlgItemTextW
CreateIconFromResource
DdeNameService
GetDCEx
GetDlgItemTextA
SetWindowsHookExA
DdeCreateDataHandle
LoadCursorW
SetParent
AppendMenuW
GetKeyState
AdjustWindowRectEx
GetOpenClipboardWindow
WINNLSEnableIME
CopyAcceleratorTableA
EnumWindows
ShowScrollBar
DdeAddData
DefMDIChildProcA
EnumDisplayDevicesW
MoveWindow
InSendMessageEx
CheckMenuItem
DrawAnimatedRects
RegisterClipboardFormatW
GetClassInfoW
EnumDisplaySettingsExW
KillTimer
MessageBoxA
CreateDialogIndirectParamW
MapVirtualKeyA
GetKeyNameTextW
DeleteMenu
GetUpdateRgn
MonitorFromWindow
CharToOemW
CheckDlgButton
MessageBoxIndirectW
WINNLSGetEnableStatus
CheckRadioButton
NotifyWinEvent
RegisterClassExA
CallMsgFilterA
CharLowerBuffW
FindWindowExA
GetKeyboardState
DdeCreateStringHandleA
SetSysColors
EmptyClipboard
EnableMenuItem
LoadAcceleratorsA
DdeFreeStringHandle
GetMenuItemRect
MessageBoxExW
ExitWindowsEx
IsDlgButtonChecked
GetCaretBlinkTime
GetInputDesktop
SendMessageTimeoutA
GetCursorPos
SwitchToThisWindow
ChangeClipboardChain
EnumClipboardFormats
CreateDesktopA
EnumDesktopsW
CreateMenu
OpenInputDesktop
GetScrollBarInfo
SetMenuContextHelpId
PostThreadMessageA
RealGetWindowClass
TabbedTextOutW
GetWindowTextA
LoadMenuIndirectW
GetShellWindow
CreateCursor
ToAscii
CreateDialogIndirectParamA
GetClassLongW
CloseDesktop
AnimateWindow
CreateIconFromResourceEx
SetWindowRgn
CallMsgFilter
SetDlgItemTextW
MsgWaitForMultipleObjectsEx
GetMessageA
CharToOemBuffW
SetWindowPos
SetCaretPos
SetPropW
SetScrollRange
GetScrollInfo
DlgDirListA
CharNextW
ExcludeUpdateRgn
SetMenuItemInfoA
GetCaretPos
SetScrollPos
EnumPropsW
DlgDirSelectComboBoxExW
LoadIconA
CharPrevW
RealChildWindowFromPoint
GetSystemMetrics
GetMenuItemInfoA
GetMonitorInfoW
LoadCursorA
GrayStringA
RedrawWindow
SetCursor
RegisterDeviceNotificationW
EqualRect
CreateDesktopW
DlgDirListComboBoxA
CountClipboardFormats
DdeConnectList
GetClassNameW
EnableWindow
GetWindow
InvalidateRgn
MessageBoxExA
DdeReconnect
GetClassNameA
CharNextA
CreateCaret
CharLowerA
LoadBitmapA
SendMessageA
CreateMDIWindowW
GetClipboardFormatNameA
OemToCharW
PostMessageW
GetMessageTime
EndTask
DrawMenuBar
ReleaseCapture
PostMessageA
DialogBoxParamW
RegisterClassA
DdeGetData
GetWindowWord
GrayStringW
WindowFromPoint
IsCharUpperA
GetWindowDC
GetKeyboardLayoutList
ValidateRect
LoadStringA
GetDlgCtrlID
MonitorFromPoint
GetWindowLongW
RegisterWindowMessageW
DdeDisconnect
ScrollDC
DestroyCaret
GetAltTabInfo
TabbedTextOutA
AttachThreadInput
LoadAcceleratorsW
DdeQueryStringA
LoadStringW
ChangeDisplaySettingsExA
GetMenuContextHelpId
SendIMEMessageExA
PeekMessageW
CallWindowProcW
DragObject
CreateWindowExW
SetWindowPlacement
CreateWindowStationW
GetMenuStringA
RegisterClipboardFormatA
LoadImageW
GetUpdateRect
ModifyMenuW
CharToOemA
AnyPopup
GetMenuItemID
RegisterClassExW
FreeDDElParam
MessageBoxIndirectA
DestroyAcceleratorTable
MenuItemFromPoint
InvalidateRect
InsertMenuItemW
GetNextDlgTabItem
MapVirtualKeyExW
EnumDesktopWindows
InSendMessage
SetWindowLongA
IsWindowVisible
GetMessageExtraInfo
DefDlgProcW
ScrollWindowEx
BringWindowToTop
EnumDisplayMonitors
InflateRect
DdeCreateStringHandleW
EnumPropsExW
DrawIconEx
InsertMenuA
MsgWaitForMultipleObjects
ShowOwnedPopups
ChangeDisplaySettingsA
EnumChildWindows
SetWindowsHookW
PostThreadMessageW
UnhookWindowsHook
GetWindowTextLengthA
GetProcessDefaultLayout
SetProcessDefaultLayout
GetWindowModuleFileNameA
FlashWindowEx
GetScrollPos
DestroyCursor
GetWindowTextLengthW
WaitForInputIdle
SetActiveWindow
IsWindowEnabled
DialogBoxIndirectParamW
IntersectRect
DlgDirListW
CallWindowProcA
EndPaint
DdeDisconnectList
GetClipboardSequenceNumber
GetActiveWindow
DdeCmpStringHandles
EnumDisplaySettingsW
CreateDialogParamW
ChangeMenuW
GetAncestor
EnumDisplayDevicesA
TrackPopupMenuEx
IsWindowUnicode
SetRectEmpty
GetAsyncKeyState
EnumWindowStationsW
DdeQueryConvInfo
TranslateAccelerator
DdeInitializeW
WINNLSGetIMEHotkey
CopyImage
CharUpperA
LoadKeyboardLayoutW
GetClipboardOwner
GetMessageW
GetMonitorInfoA
GetFocus
DispatchMessageW
SetWindowTextA
SetClassWord
CharUpperW
DrawIcon
GetTabbedTextExtentW
LoadImageA
GetClientRect
TranslateAcceleratorW
GetTabbedTextExtentA
OemKeyScan
GetClassLongA
LoadIconW
GetSubMenu
CopyIcon
SetRect
DrawStateW
GetDlgItemInt
DragDetect
FlashWindow
wvsprintfA
GetMenuItemCount
EndDialog
TileWindows
SetDlgItemInt
CharPrevA
DlgDirSelectComboBoxExA
IsWindow
DestroyMenu
BeginDeferWindowPos
RegisterWindowMessageA
OemToCharBuffW
SetWindowsHookA
FillRect
GetNextDlgGroupItem
DrawFrameControl
SetMenuDefaultItem
CloseWindowStation
CloseWindow
DdeKeepStringHandle
IsCharLowerW
ReleaseDC
WinHelpA
UnhookWinEvent
TileChildWindows
IsCharAlphaW
GetQueueStatus
SetClassLongW
GetParent
DrawEdge
OpenWindowStationW
GetKBCodePage
ShowCursor
EnumDisplaySettingsExA
GetDC
BroadcastSystemMessage
wininet
InternetReadFileExW
FtpGetFileW
CreateUrlCacheContainerW
FtpDeleteFileW
InternetTimeFromSystemTimeW
HttpQueryInfoA
InternetCombineUrlW
InternetCanonicalizeUrlW
InternetCreateUrlW
ShowClientAuthCerts
FindFirstUrlCacheGroup
InternetReadFile
InternetTimeToSystemTime
FtpRenameFileA
IsUrlCacheEntryExpiredW
FreeUrlCacheSpaceW
FtpCreateDirectoryA
InternetSetCookieA
InternetConfirmZoneCrossingA
InternetReadFileExA
DeleteUrlCacheEntryW
FtpGetCurrentDirectoryA
InternetOpenUrlW
InternetConfirmZoneCrossingW
HttpEndRequestW
InternetAlgIdToStringA
FtpGetFileSize
InternetSetDialState
GetUrlCacheGroupAttributeW
InternetSetCookieW
InternetOpenUrlA
UnlockUrlCacheEntryFileA
DeleteUrlCacheContainerW
GetUrlCacheEntryInfoExW
InternetErrorDlg
InternetFindNextFileA
FindCloseUrlCache
SetUrlCacheEntryGroup
SetUrlCacheGroupAttributeW
DetectAutoProxyUrl
InternetGetConnectedState
InternetGetCookieW
InternetWriteFile
ShowX509EncodedCertificate
HttpAddRequestHeadersW
SetUrlCacheConfigInfoW
InternetGetCertByURLA
GetUrlCacheEntryInfoExA
InternetQueryFortezzaStatus
InternetGetConnectedStateExA
UnlockUrlCacheEntryFileW
InternetGetConnectedStateEx
FindNextUrlCacheEntryExA
GopherCreateLocatorA
FindNextUrlCacheGroup
InternetOpenW
FtpPutFileW
InternetSecurityProtocolToStringA
SetUrlCacheEntryInfoW
InternetWriteFileExW
SetUrlCacheEntryGroupA
GopherGetAttributeA
InternetGetLastResponseInfoW
InternetAutodialHangup
FtpRemoveDirectoryA
FtpCommandA
InternetConnectA
RetrieveUrlCacheEntryFileW
FtpGetCurrentDirectoryW
RetrieveUrlCacheEntryFileA
FtpFindFirstFileA
CreateUrlCacheEntryW
InternetDialW
RegisterUrlCacheNotification
InternetQueryOptionW
RunOnceUrlCache
CreateUrlCacheEntryA
InternetShowSecurityInfoByURLW
InternetSetDialStateA
InternetOpenA
SetUrlCacheEntryGroupW
InternetCrackUrlA
InternetQueryDataAvailable
InternetHangUp
GopherGetAttributeW
InternetCreateUrlA
InternetTimeFromSystemTimeA
InternetGetConnectedStateExW
HttpQueryInfoW
FtpDeleteFileA
InternetTimeToSystemTimeA
HttpAddRequestHeadersA
InternetCombineUrlA
GopherCreateLocatorW
SetUrlCacheEntryInfoA
FindFirstUrlCacheEntryA
IncrementUrlCacheHeaderData
InternetInitializeAutoProxyDll
IsHostInProxyBypassList
InternetGetCookieA
InternetGoOnline
FindFirstUrlCacheContainerW
InternetSecurityProtocolToStringW
InternetShowSecurityInfoByURL
FtpFindFirstFileW
InternetSetOptionExA
IsUrlCacheEntryExpiredA
FindFirstUrlCacheEntryW
HttpOpenRequestA
FtpOpenFileA
GopherFindFirstFileA
InternetDialA
InternetSetOptionExW
FtpPutFileA
DeleteUrlCacheEntry
gdi32
GetCharWidthA
Rectangle
GetICMProfileA
CreateDIBPatternBrushPt
InvertRgn
Chord
SetPixel
GetViewportOrgEx
PtVisible
FixBrushOrgEx
CreateEnhMetaFileW
PlgBlt
SetAbortProc
AngleArc
GetEnhMetaFileDescriptionA
EnumFontFamiliesExA
GetICMProfileW
StartDocW
GetCharWidthFloatW
SetBkMode
SelectPalette
SetFontEnumeration
CreateBrushIndirect
ExtSelectClipRgn
GetPolyFillMode
GetBrushOrgEx
GetTextExtentPoint32W
CreateDIBSection
GetTextExtentPointW
CreateEllipticRgnIndirect
AbortDoc
EnumEnhMetaFile
ResetDCA
SetRectRgn
ExtCreateRegion
CopyMetaFileW
PathToRegion
OffsetRgn
CreatePen
PatBlt
GetCharABCWidthsA
CreateDIBPatternBrush
TextOutA
GetMetaFileA
SetDIBits
CreateCompatibleBitmap
GetWindowExtEx
ExtFloodFill
CreateScalableFontResourceW
StrokeAndFillPath
SetMiterLimit
GetArcDirection
GetTextAlign
GetStockObject
GetTextFaceW
comdlg32
FindTextW
PrintDlgA
GetFileTitleW
ReplaceTextW
ChooseColorA
GetFileTitleA
ChooseColorW
LoadAlterBitmap
ReplaceTextA
GetSaveFileNameA
FindTextA
PageSetupDlgA
GetOpenFileNameA
PrintDlgW
PageSetupDlgW
GetOpenFileNameW
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 262KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE