Static task
static1
Behavioral task
behavioral1
Sample
ab0f2a04fc173585eb3977293c340e30fd0005a2980777d1c19df105e94aa37f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab0f2a04fc173585eb3977293c340e30fd0005a2980777d1c19df105e94aa37f.exe
Resource
win10v2004-20220812-en
General
-
Target
ab0f2a04fc173585eb3977293c340e30fd0005a2980777d1c19df105e94aa37f
-
Size
5.4MB
-
MD5
63f019296580cfc5282e2b0c2399c19d
-
SHA1
ecabcc7e98821117d5f3a713a531bef2a212f7a6
-
SHA256
ab0f2a04fc173585eb3977293c340e30fd0005a2980777d1c19df105e94aa37f
-
SHA512
42f5ec408fa79960c25056d6510032419029b9413cf1c74c9841ecb63577f5dd23354e006f8469ac3f540131dfaa9a8831404552d7c5fd18a3624b3e53b0a30f
-
SSDEEP
49152:mI/+be831XQ13hR+txfsPFscRzUPUadcyDgWMVYb0q01Tm2tB9lN8/Lbxn3k2MW:rme831XSD4q7qMTmSuLFJrChT
Malware Config
Signatures
Files
-
ab0f2a04fc173585eb3977293c340e30fd0005a2980777d1c19df105e94aa37f.exe windows x86
bf74c828826ae91d604adc00de709d10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetReadFile
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
InternetErrorDlg
imm32
ImmGetOpenStatus
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ws2_32
inet_addr
gethostbyname
WSACleanup
WSAStartup
connect
socket
htons
bind
closesocket
listen
inet_ntoa
getsockname
accept
select
htonl
shutdown
send
sendto
WSAGetLastError
recv
setsockopt
ioctlsocket
getsockopt
gethostbyaddr
gethostname
WSAAsyncSelect
WSAAsyncGetHostByAddr
WSAAsyncGetHostByName
recvfrom
mpr
WNetGetConnectionA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
js32
JS_SetErrorReporter
JS_CompileFile
JS_ExecuteScript
JS_DestroyScript
JS_DestroyContext
JS_Finish
JS_ShutDown
JS_Init
JS_NewContext
JS_InitStandardClasses
JS_PropertyStub
JS_ResolveStub
JS_ConvertStub
JS_EnumerateStub
JS_NewArrayObject
JS_DefineProperty
JS_DeleteElement
JS_SetArrayLength
JS_GetElement
JS_GetParent
JS_NewObject
JS_DefineFunctions
JS_DefineProperties
JS_GetProperty
JS_IsArrayObject
JS_FinalizeStub
JS_SetPrivate
JS_GetPrivate
JS_NewStringCopyN
JS_GetStringBytes
JS_ValueToString
JS_DefineObject
JS_SetElement
JS_GetArrayLength
JS_SetBranchCallback
tidylib
_tidyBufFree@4
_tidySaveFile@8
_tidyRunDiagnostics@4
_tidyCleanAndRepair@4
_tidyParseFile@8
_tidyRelease@4
_tidySetErrorBuffer@8
_tidyOptSetValue@12
_tidyOptSetInt@12
_tidyOptSetBool@12
_tidyCreate@0
_tidyLoadConfig@8
sftpdll
Sftp_ListDir
Sftp_Abort
Sftp_GetServerErrorText
Sftp_GetServerErrorCode
Sftp_GetErrorText
Sftp_SetAuthentication
Sftp_SetBlocking
Sftp_Create
Sftp_Destroy
Sftp_Disconnect
Sftp_GetFile
Sftp_SetTransferMode
Sftp_SetRemotePath
Sftp_GetListItem
Sftp_RealPath
Sftp_GetRemotePath
Sftp_Connect
Sftp_LoadPrivateKey
Sftp_SetPort
Sftp_SetPassword
Sftp_SetLogin
Sftp_SetHostname
Sftp_SetCompression
Sftp_PutFile
Sftp_SetAttributes
Sftp_MakeDir
Sftp_Rename
Sftp_DeleteFile
Sftp_RemoveDir
Sftp_SetProxyHostname
Sftp_SetProxyPort
Sftp_GetAttributes
Sftp_GetState
kernel32
GetPrivateProfileIntA
WritePrivateProfileStringA
lstrlenA
GetPrivateProfileStringA
MultiByteToWideChar
GetCurrentDirectoryA
DeleteFileA
CreateDirectoryA
FreeLibrary
SetLastError
lstrcmpA
GetLocaleInfoA
GetFileTime
CreateFileA
GlobalFree
GlobalAlloc
GlobalSize
EnumSystemLocalesA
EnumSystemCodePagesA
GetACP
FindClose
FindNextFileA
FindFirstFileA
MulDiv
GetModuleHandleA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileW
SetFileAttributesA
GetFileInformationByHandle
GetCPInfo
lstrcpyA
GetVolumeInformationA
lstrcpynA
GetFullPathNameA
GlobalReAlloc
lstrlenW
GetTickCount
GlobalAddAtomA
ReleaseMutex
GetExitCodeProcess
WaitForSingleObject
GetProfileIntA
GetProfileStringA
WinExec
CopyFileA
GetWindowsDirectoryA
CreateProcessA
WriteFile
GetTempFileNameA
ExitProcess
GetSystemTime
GetShortPathNameA
Sleep
SetThreadPriority
ResumeThread
CreateThread
GetVersion
GetModuleFileNameA
SetEnvironmentVariableA
IsDBCSLeadByteEx
GetOEMCP
LocalSize
GetFileSize
OpenFile
GetFileAttributesA
_lclose
ReadFile
SetFilePointer
SetEndOfFile
ExitThread
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
CreatePipe
WritePrivateProfileSectionA
GlobalDeleteAtom
GlobalGetAtomNameA
MoveFileA
GetComputerNameA
GetDiskFreeSpaceExA
SetErrorMode
GetSystemDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
IsDBCSLeadByte
LocalLock
LocalUnlock
LocalFree
LocalAlloc
FlushFileBuffers
GetTimeFormatA
GetDateFormatA
GetLocalTime
IsBadWritePtr
IsBadReadPtr
lstrcatA
GetPrivateProfileSectionA
GetCurrentProcess
GetCurrentProcessId
IsBadStringPtrA
GetTempPathA
SetUnhandledExceptionFilter
SetProcessWorkingSetSize
SetFileTime
RemoveDirectoryA
GlobalLock
CompareStringA
CompareStringW
lstrcmpiA
lstrcmpiW
GetEnvironmentVariableW
GetStringTypeExA
GetStringTypeExW
EnumResourceLanguagesA
LoadLibraryExA
CompareFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetEvent
TerminateThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
DuplicateHandle
GetCurrentThread
CreateEventA
UnmapViewOfFile
GlobalMemoryStatus
GetDiskFreeSpaceA
MapViewOfFile
CreateFileMappingA
VirtualFree
VirtualAlloc
lstrcmpW
GlobalFindAtomA
FreeResource
GetModuleFileNameW
SuspendThread
VirtualProtect
GetThreadLocale
LockFile
UnlockFile
GlobalFlags
ConvertDefaultLocale
SearchPathA
GetAtomNameA
CreateSemaphoreA
ReleaseSemaphore
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
FindResourceExA
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapFree
PeekNamedPipe
GetFileType
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
SetStdHandle
HeapSize
LCMapStringA
LCMapStringW
GetStdHandle
IsValidCodePage
HeapDestroy
HeapCreate
FatalAppExitA
GetStringTypeA
GetStringTypeW
SetHandleCount
CreateFileW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
IsValidLocale
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetConsoleCtrlHandler
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetEnvironmentVariableA
LoadLibraryA
GetProcAddress
FormatMessageA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
CloseHandle
CreateMutexA
GlobalUnlock
GetVersionExA
SetCurrentDirectoryA
InterlockedExchange
GetLastError
GetCurrentThreadId
user32
IsCharUpperW
IsCharLowerW
CharLowerW
CharUpperW
IsCharAlphaW
DrawStateA
LoadBitmapA
CheckMenuItem
SetMenuDefaultItem
GetMenuItemID
GetMenuState
ModifyMenuA
RemoveMenu
DrawMenuBar
IsZoomed
GetWindowDC
GetActiveWindow
GetKeyboardState
CallWindowProcA
EndDeferWindowPos
GetTopWindow
BeginDeferWindowPos
AdjustWindowRectEx
DestroyMenu
SetMenu
ToAscii
DestroyIcon
MapVirtualKeyA
DrawIconEx
GetIconInfo
CopyImage
LoadImageA
WinHelpA
DestroyAcceleratorTable
SetMenuItemInfoA
SetKeyboardState
GetAsyncKeyState
SystemParametersInfoA
WindowFromDC
EnableScrollBar
ShowScrollBar
GetScrollPos
GetTabbedTextExtentW
GetDoubleClickTime
FindWindowExA
IsWindowEnabled
ShowWindow
EqualRect
InflateRect
DrawFocusRect
MessageBeep
CopyIcon
IsRectEmpty
GetClassInfoA
GetMessagePos
IntersectRect
GetMenuStringA
LoadMenuIndirectA
GetDCEx
DeferWindowPos
GetClassInfoExA
EnumChildWindows
PostThreadMessageA
CharLowerBuffA
CharLowerBuffW
GetWindowPlacement
SetWindowPlacement
TrackPopupMenuEx
MapWindowPoints
GetMessageTime
GetLastActivePopup
GetForegroundWindow
GetWindowTextLengthA
RemovePropA
GetPropA
SetPropA
SendDlgItemMessageA
EnableMenuItem
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
CharUpperA
GetWindowThreadProcessId
TabbedTextOutA
DrawTextExA
GrayStringA
TranslateAcceleratorA
InsertMenuItemA
ReuseDDElParam
UnpackDDElParam
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
MapDialogRect
GetMenuItemInfoA
GetSystemMenu
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
RegisterClipboardFormatA
IsClipboardFormatAvailable
SetWindowRgn
InSendMessage
CopyAcceleratorTableA
CreateMenu
MsgWaitForMultipleObjects
GetDialogBaseUnits
UnionRect
InvalidateRgn
GetNextDlgGroupItem
SendNotifyMessageA
GetSubMenu
GetSysColor
SetCursorPos
ReleaseCapture
DrawFrameControl
FillRect
DrawTextA
DestroyCursor
SetClipboardData
SetCursor
ShowCursor
LoadCursorA
WindowFromPoint
SetCapture
GetCapture
RedrawWindow
BringWindowToTop
TrackPopupMenu
EmptyClipboard
CloseClipboard
OpenClipboard
GetDesktopWindow
IsWindowVisible
ClientToScreen
PostMessageA
InsertMenuA
AppendMenuA
CreatePopupMenu
PtInRect
UpdateWindow
PeekMessageA
TranslateMessage
DispatchMessageA
WaitMessage
GetDlgItem
ReleaseDC
GetDC
wsprintfA
GetSystemMetrics
GetWindowTextA
GetMenu
GetWindow
DestroyWindow
CreateWindowExA
SetWindowPos
GetClassNameA
SetFocus
IsWindowUnicode
IsWindow
GetFocus
GetParent
GetWindowLongA
LoadIconA
GetKeyState
SetWindowLongA
InvalidateRect
CopyRect
GetWindowRect
ScreenToClient
GetClientRect
MoveWindow
SendMessageA
EnableWindow
CharLowerA
IsCharAlphaA
IsCharLowerA
IsCharUpperA
GetClipboardData
OemToCharBuffA
DefWindowProcW
GetUpdateRect
BeginPaint
EndPaint
GetClassLongA
GetKeyboardLayout
CharToOemBuffA
GetTabbedTextExtentA
GetScrollRange
GetScrollInfo
SetScrollPos
SetCaretPos
SetScrollRange
SetScrollInfo
ValidateRect
HideCaret
ScrollWindow
CharNextA
SetClassLongA
SetWindowLongW
GetWindowLongW
DestroyCaret
CreateCaret
ShowCaret
KillTimer
GetCaretPos
SetWindowsHookExA
RegisterWindowMessageA
RegisterClassA
SetTimer
TileWindows
UnregisterClassA
FindWindowA
LoadMenuA
LoadAcceleratorsA
GetMessageA
DispatchMessageW
GetMessageW
SetForegroundWindow
LockWindowUpdate
GetMenuItemCount
DeleteMenu
UnhookWindowsHookEx
CallNextHookEx
DefWindowProcA
SetParent
OffsetRect
SetRectEmpty
MessageBoxA
GetCursorPos
SetActiveWindow
GetDlgCtrlID
SetRect
GetSysColorBrush
IsIconic
GetKeyNameTextA
DrawIcon
LoadStringA
LoadStringW
IsChild
gdi32
CreatePen
GetTextExtentPointA
DeleteDC
BitBlt
SelectClipRgn
LineTo
MoveToEx
ExtTextOutA
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPoint32W
ExtTextOutW
GetCharWidthA
GetCharacterPlacementW
GetCharWidth32W
Rectangle
TextOutA
RoundRect
CreateRectRgn
GetTextMetricsA
GetClipBox
PatBlt
GetCharWidth32A
DPtoLP
GetTextColor
GetCurrentObject
CreateDIBSection
GetNearestColor
GetTextExtentPoint32A
GetBkColor
CopyMetaFileA
CreateDCA
GetDCOrgEx
CreateBitmap
CreateRectRgnIndirect
SaveDC
RestoreDC
CreateMetaFileA
GetWindowOrgEx
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetRgnBox
EnumFontFamiliesExA
SetPixelV
GetCharacterPlacementA
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
Ellipse
LPtoDP
CreateEllipticRgn
GetViewportOrgEx
GetMapMode
CombineRgn
SetRectRgn
StretchDIBits
CreateFontA
CreateHatchBrush
ExtCreatePen
SetTextColor
SetBkColor
GetBkMode
SetBkMode
CreateSolidBrush
GetPixel
GetObjectA
GetStockObject
CloseMetaFile
DeleteMetaFile
GetDeviceCaps
CreateFontIndirectA
CreateBrushIndirect
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreatePatternBrush
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
RectVisible
PtVisible
StartDocA
GetWindowExtEx
GetViewportExtEx
SelectClipPath
GetClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
SetTextAlign
DeleteObject
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
GetJobA
advapi32
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
IsTextUnicode
GetUserNameA
RegEnumKeyExA
RegSetValueA
RegOpenKeyA
SetFileSecurityA
GetFileSecurityA
RegEnumKeyA
RegQueryValueA
RegCreateKeyA
RegSetValueExA
shell32
SHGetFileInfoA
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
DragAcceptFiles
Shell_NotifyIconA
DragFinish
DragQueryFileW
ExtractIconA
SHChangeNotify
ShellExecuteExA
SHGetMalloc
SHGetDesktopFolder
SHFileOperationA
DragQueryFileA
comctl32
ImageList_Duplicate
shlwapi
SHDeleteKeyA
PathIsRelativeA
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathIsUNCA
PathRelativePathToA
PathFindFileNameA
oledlg
ord8
ole32
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleSave
WriteClassStm
OleSaveToStream
CreateStreamOnHGlobal
OleLockRunning
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
GetHGlobalFromILockBytes
CoGetClassObject
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
OleIsRunning
GetRunningObjectTable
CreateFileMoniker
CoGetMalloc
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateOleAdviseHolder
CreateDataAdviseHolder
OleGetClipboard
OleSetMenuDescriptor
OleQueryCreateFromData
OleQueryLinkFromData
DoDragDrop
StringFromGUID2
OleRun
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CoDisconnectObject
OleRegGetMiscStatus
OleRegEnumVerbs
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoCreateGuid
CoCreateInstance
CoUninitialize
OleSetContainedObject
CoInitialize
CreateILockBytesOnHGlobal
oleaut32
VariantTimeToSystemTime
VariantInit
SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
SysFreeString
SysStringByteLen
OleCreateFontIndirect
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SystemTimeToVariantTime
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
LoadTypeLi
SafeArrayAccessData
SafeArrayUnaccessData
CreateErrorInfo
SysAllocStringLen
VariantClear
GetErrorInfo
SetErrorInfo
SafeArrayCreateVector
rpcrt4
RpcStringFreeA
UuidCreate
UuidToStringA
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 696KB - Virtual size: 694KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 608KB - Virtual size: 906KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SHARED Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 65B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ