?COMWndProc@@YGJPAUHWND__@@IIJ@Z
Static task
static1
Behavioral task
behavioral1
Sample
845f0a2ccc350aefc9b07c313cd2b72fc41e30cd98451f4ca94635652347e167.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
845f0a2ccc350aefc9b07c313cd2b72fc41e30cd98451f4ca94635652347e167.exe
Resource
win10v2004-20220812-en
General
-
Target
845f0a2ccc350aefc9b07c313cd2b72fc41e30cd98451f4ca94635652347e167
-
Size
979KB
-
MD5
76529167e1797513a5ff1ea24302ec10
-
SHA1
967570356a8d0d7eab3ec9e076c8ff45a851842e
-
SHA256
845f0a2ccc350aefc9b07c313cd2b72fc41e30cd98451f4ca94635652347e167
-
SHA512
aa9e3864e63ff5e305e04e1053d18980acec76a47de67e4f127bf536d34367890c0005bbd82e1a6844df2c76eebcb00d9ba3924d2e8a4dc104a4426c87c62055
-
SSDEEP
24576:kR3XqaKwsb+EWyfu5LBN/rBs/aB8Ueoht:C3XVKwsb+EmftIaB83
Malware Config
Signatures
Files
-
845f0a2ccc350aefc9b07c313cd2b72fc41e30cd98451f4ca94635652347e167.exe windows x86
194673e6bf1780cc22ce39c24f47e663
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetCPInfo
GetOEMCP
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileSizeEx
GetFileTime
HeapFree
RtlUnwind
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
HeapAlloc
ExitThread
CreateThread
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetDriveTypeA
SetEnvironmentVariableA
SetCurrentDirectoryA
HeapReAlloc
FlushFileBuffers
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
GetStringTypeA
GetStringTypeW
CompareStringW
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeExA
MoveFileA
GlobalFlags
GetCurrentDirectoryA
SystemTimeToFileTime
GetThreadLocale
GetAtomNameA
TlsFree
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
GetModuleHandleW
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
FreeResource
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentProcessId
CreateEventA
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
InterlockedExchange
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GetModuleHandleA
SetLastError
CopyFileA
GlobalSize
RemoveDirectoryA
GetFileAttributesA
CreateDirectoryA
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
GetModuleFileNameA
lstrcpynA
LocalLock
LocalUnlock
LocalSize
LocalReAlloc
GetShortPathNameA
GetVersion
RaiseException
OutputDebugStringA
SetFilePointer
WriteFile
GetTickCount
MulDiv
CreateFileA
ReadFile
GetCurrentThreadId
FindFirstFileA
ReleaseMutex
DeleteFileA
FindNextFileA
FindClose
LocalAlloc
GetPrivateProfileSectionNamesA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
GlobalAddAtomA
GlobalDeleteAtom
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
OpenMutexA
Sleep
CreateMutexA
GetPrivateProfileSectionA
lstrlenA
GetSystemDefaultLangID
GetWindowsDirectoryA
GetTempPathA
lstrcatA
CreateProcessA
CloseHandle
WaitForSingleObject
OpenEventA
SetEvent
lstrcpyA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetLastError
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
lstrcmpiA
FindResourceA
LoadResource
LockResource
SizeofResource
HeapSize
WideCharToMultiByte
user32
ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatA
SetTimer
KillTimer
GetKeyNameTextA
MapVirtualKeyA
SetParent
UnionRect
PostThreadMessageA
GetDCEx
LockWindowUpdate
InvalidateRect
IsRectEmpty
CopyAcceleratorTableA
CharUpperA
DestroyIcon
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
DeleteMenu
UnregisterClassA
GetSysColorBrush
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
LoadIconA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
CallWindowProcA
GetMenu
LoadMenuA
GetWindowPlacement
DestroyMenu
InflateRect
SetWindowContextHelpId
MapDialogRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetLastActivePopup
MessageBoxA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetFocus
ScrollWindowEx
SetFocus
MoveWindow
GetDlgCtrlID
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetWindowRect
UpdateWindow
DrawIcon
SetWindowPlacement
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
UnhookWindowsHookEx
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetSubMenu
RemoveMenu
GetWindow
GetClassNameA
GetWindowTextLengthA
GetWindowTextA
GetMenuBarInfo
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorA
GetDialogBaseUnits
SetRectEmpty
MessageBeep
GetNextDlgGroupItem
IntersectRect
InvalidateRgn
SendMessageA
GetSystemMenu
IsIconic
GetClientRect
EnableWindow
OffsetRect
CopyRect
GetDesktopWindow
LoadImageA
GetSystemMetrics
RegisterWindowMessageA
PostMessageA
wsprintfA
LoadStringA
CharNextA
IsWindowEnabled
GetDlgItem
SetRect
SystemParametersInfoA
SetWindowPos
GetParent
IsWindow
ReleaseDC
GetDC
PeekMessageA
DispatchMessageA
TranslateMessage
SetWindowLongA
DefWindowProcA
GetWindowLongA
PostQuitMessage
MsgWaitForMultipleObjects
ShowWindow
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
CreateWindowExA
RegisterClassA
LoadCursorA
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuItemCount
SetWindowTextA
gdi32
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
GetTextExtentPoint32A
GetDCOrgEx
CreateDIBPatternBrushPt
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
GetCharWidthA
StretchDIBits
CreateCompatibleBitmap
ExtSelectClipRgn
DeleteDC
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
CreateRectRgnIndirect
GetTextMetricsA
RectVisible
PtVisible
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
CreateDCA
CopyMetaFileA
GetStockObject
SelectObject
CreateFontIndirectA
StretchBlt
BitBlt
GetDeviceCaps
CreateCompatibleDC
GetObjectA
CreateFontA
TextOutA
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegSetValueA
RegQueryValueExW
RegSetValueExA
RegSetValueExW
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteValueA
shell32
ExtractIconA
DragFinish
DragQueryFileA
SHGetFileInfoA
shlwapi
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveExtensionA
PathRemoveFileSpecW
oledlg
ord8
ole32
OleIsCurrentClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleRun
CoInitializeEx
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
OleFlushClipboard
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateFileMoniker
CoGetInstanceFromFile
ProgIDFromCLSID
CoTaskMemFree
CreateBindCtx
StringFromGUID2
MkParseDisplayName
GetRunningObjectTable
CoInitialize
CoUninitialize
CoCreateInstance
CoRegisterMessageFilter
CreateStreamOnHGlobal
ReleaseStgMedium
oleaut32
SysStringLen
SysFreeString
VarBstrCat
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysAllocString
VarBstrCmp
SetErrorInfo
CreateErrorInfo
GetErrorInfo
VariantClear
VariantChangeType
VariantInit
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
OleCreateFontIndirect
Exports
Exports
Sections
.text Size: 578KB - Virtual size: 577KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ