Static task
static1
Behavioral task
behavioral1
Sample
87e83f68ea5acbc934d77831d3a88a8a5db41d3836c804e9e70deb0750db8fc6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
87e83f68ea5acbc934d77831d3a88a8a5db41d3836c804e9e70deb0750db8fc6.exe
Resource
win10v2004-20220812-en
General
-
Target
87e83f68ea5acbc934d77831d3a88a8a5db41d3836c804e9e70deb0750db8fc6
-
Size
740KB
-
MD5
7beb983b83dee819b1455525bc6a38b5
-
SHA1
acaef7aa99048978adbf914ff7f549423fda33b8
-
SHA256
87e83f68ea5acbc934d77831d3a88a8a5db41d3836c804e9e70deb0750db8fc6
-
SHA512
44590c771e352be48abc426a1ced9d82c89c02c00f19e040a52d29cee03beeaabfd1f35ac58fe1b9e2d3ef71e5f6c01d797e0b741f963cf5be4fb0c074a47481
-
SSDEEP
12288:7fFViaUuyLvhQoRJLBN/rNufgaN/+khxhznEP5IDRgNVKUs:DjfByLvhQALb/5up/+khrEP6DRgNch
Malware Config
Signatures
Files
-
87e83f68ea5acbc934d77831d3a88a8a5db41d3836c804e9e70deb0750db8fc6.exe windows x86
de1edfef75acc43eea26a001082779aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
SetPrinterDataW
ord204
GetJobA
FindFirstPrinterChangeNotification
FindNextPrinterChangeNotification
GetJobW
FreePrinterNotifyInfo
OpenPrinterW
ClosePrinter
GetPrinterA
SetJobW
DocumentPropertiesW
DeviceCapabilitiesA
GetPrinterW
DocumentPropertiesA
EnumPrintersW
SetPrinterW
OpenPrinterA
EnumPortsW
kernel32
GetLastError
DeleteFileA
GetFileType
WritePrivateProfileStringW
FindFirstFileA
lstrlenW
GetProcessVersion
RemoveDirectoryA
GetStdHandle
CopyFileA
InterlockedExchange
FormatMessageW
GetExitCodeThread
OpenMutexA
CreateFileW
ExpandEnvironmentStringsW
HeapFree
GetProcessHeap
Sleep
GetEnvironmentStringsW
lstrcpynA
SetHandleInformation
VirtualQuery
FindResourceExA
HeapAlloc
IsBadWritePtr
CreateProcessA
GlobalAlloc
LeaveCriticalSection
GetModuleHandleW
GetCurrentProcessId
FormatMessageA
GetSystemDirectoryA
SetCurrentDirectoryA
GetVolumeInformationW
GetFileAttributesW
GetEnvironmentStrings
SetStdHandle
GetOverlappedResult
ExitThread
GetProfileIntA
IsBadCodePtr
LoadLibraryW
GlobalSize
GetTempPathW
GlobalFindAtomW
IsDebuggerPresent
GetFileAttributesA
GetStringTypeW
GetSystemTimeAsFileTime
IsBadReadPtr
LockFile
SetUnhandledExceptionFilter
GetTempFileNameA
GetCurrentThreadId
CompareStringA
FlushFileBuffers
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedDecrement
CreateDirectoryA
GetModuleHandleA
GetModuleFileNameA
SetFileAttributesW
GlobalFindAtomA
GetConsoleCP
WritePrivateProfileStringA
GetPrivateProfileIntA
TerminateThread
FindClose
VirtualFree
GlobalMemoryStatus
GetTickCount
HeapSize
HeapCreate
LockResource
SystemTimeToFileTime
InitializeCriticalSection
lstrcmpiW
TerminateProcess
GetVolumeInformationA
GetSystemTime
EnterCriticalSection
ResumeThread
lstrcmpW
SetHandleCount
SizeofResource
RtlUnwind
lstrcpyA
GetCurrentDirectoryA
GetDiskFreeSpaceA
EnumSystemLocalesA
GlobalGetAtomNameA
GetTimeFormatA
HeapReAlloc
GetPriorityClass
GetExitCodeProcess
GetOEMCP
WriteFile
LoadLibraryExW
GetStartupInfoW
DeviceIoControl
GetTimeZoneInformation
GlobalUnlock
WideCharToMultiByte
GetPrivateProfileSectionA
GetLocaleInfoA
GetProcAddress
GetFileTime
TlsFree
PeekNamedPipe
UnmapViewOfFile
ReadFile
LCMapStringA
UnlockFile
GlobalFlags
CreateFileA
GetVersion
TlsAlloc
FreeEnvironmentStringsW
GetThreadLocale
FreeResource
IsBadStringPtrA
TlsSetValue
GetConsoleOutputCP
SetLastError
CreateDirectoryW
GetShortPathNameA
GetDiskFreeSpaceExA
FatalAppExitA
LoadLibraryExA
DeleteCriticalSection
SetFilePointerEx
GetACP
SetThreadPriority
InterlockedIncrement
LoadLibraryA
GetStringTypeA
CompareStringW
GetConsoleMode
MoveFileA
GlobalLock
GetSystemDefaultLCID
lstrcmpA
lstrcatW
GetProfileStringA
GetWindowsDirectoryA
WinExec
lstrcatA
RaiseException
IsValidLocale
HeapDestroy
CloseHandle
GetTempPathA
GetCommandLineA
GetStartupInfoA
CreateToolhelp32Snapshot
WriteConsoleW
CreateMutexA
FindResourceA
IsValidCodePage
GetLocalTime
GetVersionExA
GlobalFree
FindNextFileW
CreateThread
UnhandledExceptionFilter
SetEndOfFile
FreeLibrary
FindNextFileA
GetPrivateProfileStringA
GetCPInfo
GetEnvironmentVariableA
LocalFree
DuplicateHandle
GetCurrentProcess
FreeEnvironmentStringsA
SetEvent
SetEnvironmentVariableA
GetTimeFormatW
FileTimeToSystemTime
VirtualAlloc
TlsGetValue
DebugBreak
lstrlenA
GlobalDeleteAtom
LoadResource
WriteConsoleA
MultiByteToWideChar
GetNumberFormatA
FileTimeToLocalFileTime
ExitProcess
GetEnvironmentVariableW
ConvertDefaultLocale
SetFilePointer
GetVersionExW
LCMapStringW
GetFileSize
LocalAlloc
WaitForSingleObject
WaitForMultipleObjects
GetCurrentThread
GlobalHandle
user32
GetClassNameW
BeginPaint
LoadStringW
PtInRect
IsZoomed
RedrawWindow
FrameRect
IsWindow
SetRectEmpty
SetMenuItemInfoW
SetForegroundWindow
FindWindowW
AppendMenuA
SetWindowLongW
DdeInitializeW
CheckMenuItem
DrawEdge
IsIconic
DestroyIcon
CheckDlgButton
SendMessageW
SetDlgItemTextW
PeekMessageA
CreatePopupMenu
EnableMenuItem
CallNextHookEx
GetDlgItemTextA
MapWindowPoints
HideCaret
GetMenuState
CloseWindow
GetClassInfoExA
CreateMenu
GetWindowPlacement
GetScrollInfo
WinHelpA
GetClientRect
ScrollWindowEx
CreateIconFromResourceEx
EndDeferWindowPos
ReleaseDC
GetClassInfoA
ShowCaret
GetClassInfoW
IsDlgButtonChecked
LockWindowUpdate
SetMenu
RegisterClassExA
GetMenu
GetParent
DestroyCaret
GetScrollRange
PostMessageA
TranslateAcceleratorA
ValidateRect
GetCursorPos
SetMenuItemInfoA
SetFocus
GetMenuCheckMarkDimensions
SystemParametersInfoA
SetParent
SetWindowsHookExW
GetClassNameA
DrawMenuBar
GetSystemMetrics
GetDC
CreateAcceleratorTableA
GetQueueStatus
ShowScrollBar
IntersectRect
SetWindowsHookExA
GrayStringA
SendDlgItemMessageA
GetFocus
DestroyMenu
RegisterClipboardFormatA
CopyIcon
GetAncestor
AdjustWindowRectEx
InflateRect
GetMenuItemCount
CopyRect
GetMessageTime
DispatchMessageW
FillRect
RegisterClipboardFormatW
GetDlgCtrlID
GetPropA
DrawIcon
SetDlgItemInt
GetActiveWindow
InvalidateRgn
GetSysColorBrush
PeekMessageW
LoadStringA
IsChild
LoadMenuW
AppendMenuW
TabbedTextOutA
GetKeyState
GetSystemMenu
ScreenToClient
GetNextDlgTabItem
UnregisterClassA
DefWindowProcW
SystemParametersInfoW
IsWindowVisible
MessageBeep
OffsetRect
GetWindowDC
MoveWindow
RegisterClassA
ModifyMenuW
GetDCEx
SendDlgItemMessageW
OemToCharA
GetDlgItemInt
ShowOwnedPopups
SetScrollInfo
OpenClipboard
SetActiveWindow
DrawTextW
PostThreadMessageA
GetPropW
DefWindowProcA
GetWindowTextA
RemovePropA
GetDlgItemTextW
GetUpdateRect
GetMenuStringA
RemovePropW
ShowWindow
GetWindowLongW
SetLayeredWindowAttributes
ReleaseCapture
KillTimer
GetMenuItemInfoW
PostQuitMessage
WinHelpW
GetMenuItemID
CallWindowProcW
GetCapture
SetMenuItemBitmaps
CharNextA
SetWindowRgn
SetCapture
GetMenuStringW
IsRectEmpty
ClientToScreen
DrawStateA
CopyAcceleratorTableA
GetDesktopWindow
GetClassLongW
GetClassLongA
IsCharAlphaA
LoadAcceleratorsA
LoadBitmapW
SetCursorPos
wsprintfA
SetTimer
IsDialogMessageA
SetWindowLongA
DefMDIChildProcA
LoadMenuA
GetClipboardOwner
TrackPopupMenuEx
AttachThreadInput
CharUpperA
GetWindowTextLengthA
UnhookWindowsHookEx
LoadBitmapA
CharUpperW
UpdateWindow
GetForegroundWindow
UnregisterClassW
WindowFromPoint
SetWindowTextA
DeferWindowPos
EnableWindow
MapVirtualKeyA
UnregisterHotKey
GetWindowLongA
IsWindowUnicode
DrawFocusRect
SetScrollRange
UnionRect
GetIconInfo
IsDialogMessageW
SendMessageA
GetNextDlgGroupItem
GetMessageA
CreateDialogParamA
CreateIconIndirect
SetMenuDefaultItem
DrawFrameControl
SetRect
LoadCursorA
GetAsyncKeyState
DrawTextExA
CreateWindowExA
CallWindowProcA
LoadIconA
RegisterWindowMessageW
BringWindowToTop
EndDialog
LoadCursorW
DispatchMessageA
SetPropW
EnumWindows
GetSysColor
GetMessagePos
CopyAcceleratorTableW
WaitMessage
SetWindowContextHelpId
GetTopWindow
GetWindowTextLengthW
DeleteMenu
InvalidateRect
GetSubMenu
SetWindowPos
IsClipboardFormatAvailable
DestroyCursor
TranslateMessage
BeginDeferWindowPos
GetWindowTextW
DdeCreateStringHandleW
GetDlgItem
GetProcessWindowStation
GetWindowRect
keybd_event
GetScrollPos
EqualRect
GetWindow
EndPaint
EnumChildWindows
CharLowerW
TrackPopupMenu
GetWindowThreadProcessId
DrawTextA
DestroyWindow
MessageBoxA
CloseClipboard
InsertMenuA
DestroyAcceleratorTable
ole32
OleGetIconOfClass
WriteClassStm
ReadClassStg
CoTreatAsClass
CoRegisterClassObject
CreateGenericComposite
RevokeDragDrop
GetRunningObjectTable
IsAccelerator
StringFromCLSID
SetConvertStg
CoSuspendClassObjects
OleLockRunning
OleDestroyMenuDescriptor
CreateBindCtx
OleUninitialize
CLSIDFromString
CoTaskMemRealloc
OleCreateFromData
OleGetClipboard
OleSetContainedObject
ReleaseStgMedium
RegisterDragDrop
OleCreateLinkToFile
ReadFmtUserTypeStg
CLSIDFromProgID
StringFromGUID2
OleCreateFromFile
OleCreateLinkFromData
OleCreateMenuDescriptor
CoTaskMemAlloc
CoUninitialize
OleRegGetMiscStatus
OleIsRunning
CreateILockBytesOnHGlobal
OleCreate
OleDuplicateData
DoDragDrop
CreateOleAdviseHolder
CoLockObjectExternal
OleCreateStaticFromData
GetHGlobalFromILockBytes
CoInitialize
OleRun
WriteFmtUserTypeStg
OleTranslateAccelerator
StgOpenStorageOnILockBytes
GetClassFile
CoRegisterMessageFilter
CreateStreamOnHGlobal
CreateFileMoniker
StgCreateDocfileOnILockBytes
StgIsStorageILockBytes
WriteClassStg
OleInitialize
OleFlushClipboard
OleLoad
CoRevokeClassObject
CoGetClassObject
CoCreateInstance
CoDisconnectObject
CoInitializeEx
CoTaskMemFree
OleRegEnumVerbs
OleIsCurrentClipboard
OleSave
CoCreateGuid
CreateDataAdviseHolder
CoResumeClassObjects
CreateItemMoniker
OleSetMenuDescriptor
CoFreeUnusedLibraries
gdi32
ExtEscape
CreateDIBitmap
GetStretchBltMode
PtInRegion
GetCharABCWidthsFloatA
SetPixelV
SelectClipRgn
ExtCreateRegion
SetWindowExtEx
CreateBitmap
GetTextExtentExPointA
RoundRect
CreateDIBPatternBrushPt
PolylineTo
LineTo
CreateBrushIndirect
GetStockObject
SetBkMode
CreatePalette
GetDCOrgEx
CreateDIBSection
SetWindowOrgEx
GetColorAdjustment
PlayMetaFile
CloseEnhMetaFile
Escape
CopyMetaFileA
ExtSelectClipRgn
GetMapMode
RectInRegion
GetKerningPairsA
SetBrushOrgEx
GetMiterLimit
ExtTextOutW
SetMapperFlags
AngleArc
OffsetClipRgn
CreateCompatibleBitmap
DrawEscape
SaveDC
FillPath
DeleteMetaFile
CreateEnhMetaFileA
ExcludeClipRect
AnimatePalette
GetCharWidthFloatA
GetWindowExtEx
PtVisible
SetDIBitsToDevice
GetPolyFillMode
GetObjectA
GetPath
Pie
Arc
PlgBlt
CombineRgn
CreateCompatibleDC
CreateMetaFileA
CreateHalftonePalette
ExtTextOutA
FillRgn
GetCurrentPositionEx
SetDIBColorTable
CreatePen
StretchBlt
TextOutW
GetTextCharsetInfo
SetTextColor
GetSystemPaletteEntries
GetTextColor
DeleteEnhMetaFile
GetTextExtentPoint32W
EnumObjects
SetArcDirection
CreateRectRgnIndirect
SetViewportOrgEx
PathToRegion
AbortPath
StrokeAndFillPath
GetCharABCWidthsW
GetTextMetricsA
PolyPolygon
GetNearestPaletteIndex
ScaleViewportExtEx
GetRgnBox
PolyBezierTo
CreatePolygonRgn
Polyline
CreateBitmapIndirect
SetStretchBltMode
GetGlyphOutlineA
BitBlt
SetMapMode
SetPolyFillMode
GetBrushOrgEx
BeginPath
Rectangle
CreateICA
ScaleWindowExtEx
ArcTo
EnumFontFamiliesA
GetCurrentObject
CreateDCA
SetPixel
StartPage
SetTextAlign
SetWinMetaFileBits
GetObjectType
SelectObject
GdiComment
GetObjectW
GetROP2
GetDeviceCaps
CloseMetaFile
CreateEllipticRgn
SetViewportExtEx
SetBitmapBits
PolyBezier
GetTextExtentPoint32A
GetBkMode
SetRectRgn
SetTextJustification
CreateEllipticRgnIndirect
GetWindowOrgEx
GetCharABCWidthsFloatW
ModifyWorldTransform
GetTextFaceA
StrokePath
GetBkColor
GetTextMetricsW
GetTextExtentPointA
GetViewportExtEx
GetCharWidthA
RestoreDC
IntersectClipRect
ExtFloodFill
EndPath
GetTextExtentExPointW
DPtoLP
SetBkColor
GetNearestColor
SetColorAdjustment
PatBlt
TextOutA
LPtoDP
GetEnhMetaFileW
GetAspectRatioFilterEx
CreateFontIndirectA
CreateRoundRectRgn
Polygon
EnumMetaFile
SelectPalette
GetDIBits
GdiFlush
OffsetRgn
GetPaletteEntries
CreateSolidBrush
GetCharABCWidthsA
UnrealizeObject
StartDocA
GetDIBColorTable
GetClipBox
SetROP2
SetMiterLimit
CloseFigure
WidenPath
CreateFontA
Ellipse
SetGraphicsMode
EndPage
PolyDraw
MoveToEx
GetClipRgn
AbortDoc
GetPixel
ExtCreatePen
CreateDiscardableBitmap
CreateRectRgn
CreatePatternBrush
SelectClipPath
RectVisible
EndDoc
GetTextCharacterExtra
SetPaletteEntries
EnumFontFamiliesExA
MaskBlt
FlattenPath
OffsetViewportOrgEx
PlayMetaFileRecord
RealizePalette
GetTextAlign
StretchDIBits
DeleteDC
EqualRgn
GetGlyphOutlineW
GetFontData
DeleteObject
comdlg32
CommDlgExtendedError
ChooseFontA
PageSetupDlgW
GetOpenFileNameA
PageSetupDlgA
PrintDlgA
ChooseFontW
GetSaveFileNameA
ChooseColorA
advapi32
RegOpenKeyW
SetServiceStatus
CreateServiceW
EqualSid
RegQueryValueExW
RegOpenKeyExW
DeleteService
RegCreateKeyExA
AllocateAndInitializeSid
GetSecurityDescriptorDacl
RegEnumKeyExW
RegEnumValueA
InitializeAcl
RegQueryInfoKeyW
SetSecurityDescriptorDacl
RegQueryValueW
ReportEventA
RegOpenCurrentUser
CryptEncrypt
SetEntriesInAclW
FreeSid
RegCloseKey
RegisterServiceCtrlHandlerW
ControlService
RevertToSelf
RegOpenKeyA
OpenThreadToken
RegDeleteKeyW
RegQueryInfoKeyA
StartServiceCtrlDispatcherW
RegEnumKeyW
RegCreateKeyExW
RegOpenKeyExA
StartServiceA
QueryServiceStatus
CryptAcquireContextA
CloseServiceHandle
RegNotifyChangeKeyValue
SetFileSecurityA
OpenServiceA
AdjustTokenPrivileges
IsValidSecurityDescriptor
OpenServiceW
OpenProcessToken
RegQueryValueExA
OpenSCManagerA
RegEnumKeyExA
GetLengthSid
InitializeSecurityDescriptor
OpenSCManagerW
CryptReleaseContext
GetFileSecurityA
RegSetValueExA
RegDeleteValueA
GetTokenInformation
GetUserNameA
RegDeleteValueW
ReportEventW
CryptDecrypt
RegDeleteKeyA
RegQueryValueA
RegSetValueExW
wininet
HttpQueryInfoW
InternetSetCookieA
InternetSetStatusCallbackW
InternetGetCookieA
InternetAutodial
HttpOpenRequestA
InternetGetLastResponseInfoW
InternetWriteFile
HttpSendRequestExA
InternetOpenA
InternetQueryOptionA
InternetReadFile
InternetErrorDlg
InternetCloseHandle
InternetGetConnectedState
InternetCrackUrlA
InternetOpenW
InternetGetLastResponseInfoA
InternetConnectA
HttpEndRequestA
InternetOpenUrlA
InternetSetStatusCallback
HttpQueryInfoA
HttpSendRequestA
InternetQueryDataAvailable
InternetSetFilePointer
comctl32
ImageList_DragMove
ImageList_DragShowNolock
ImageList_GetImageInfo
PropertySheetW
ImageList_SetBkColor
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_Write
InitCommonControlsEx
ImageList_Destroy
ImageList_DragEnter
ImageList_Add
_TrackMouseEvent
ImageList_EndDrag
ImageList_LoadImageA
ImageList_SetOverlayImage
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_DragLeave
ImageList_Create
ImageList_Read
CreatePropertySheetPageA
ord17
ImageList_DrawEx
ImageList_SetDragCursorImage
ImageList_Remove
PropertySheetA
ImageList_AddMasked
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_LoadImageW
ImageList_Draw
ImageList_BeginDrag
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 460KB - Virtual size: 458KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 140KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ