Static task
static1
Behavioral task
behavioral1
Sample
013fc0bfa2d061508b01596620bb4800e1c91693c56c37a75ca79445b505875c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
013fc0bfa2d061508b01596620bb4800e1c91693c56c37a75ca79445b505875c.exe
Resource
win10v2004-20220812-en
General
-
Target
013fc0bfa2d061508b01596620bb4800e1c91693c56c37a75ca79445b505875c
-
Size
544KB
-
MD5
6b979e784aa9853368444bf94ebb91d9
-
SHA1
c984cc8ce344133e6305a958bfa4e831f5cf3323
-
SHA256
013fc0bfa2d061508b01596620bb4800e1c91693c56c37a75ca79445b505875c
-
SHA512
e21ab6057177b37e990d8d4a6daf87384917bee4a8b78ab22e615e2194bb217bc573dd09251d2e8e30b0ac544973dd7ff1f10f2c6a417bbcd779da9775a274e3
-
SSDEEP
6144:qnU8BAlO6v+PFrymOh9sOKL75oFMDnwsX66/uhwi82uoMi0V/2Y/sFIFVvzXo:qU8Glw2OL75oqwsX64i86aYIXzXo
Malware Config
Signatures
Files
-
013fc0bfa2d061508b01596620bb4800e1c91693c56c37a75ca79445b505875c.exe windows x86
3a3ce8eba64e8b70ccde9ed879954729
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SubtractRect
HideCaret
EmptyClipboard
LoadIconA
GetPropA
SetWindowTextW
SendMessageW
DrawStateW
DrawFrameControl
SetMenu
UnionRect
IsChild
GetMenuState
IsWindowUnicode
TrackPopupMenu
GetCursorPos
ShowCaret
WinHelpA
TranslateAcceleratorA
BeginPaint
SetWindowLongA
GetMenuStringW
DrawMenuBar
MapDialogRect
FindWindowA
IsIconic
ClientToScreen
GetDC
IsDialogMessageA
LoadImageW
ScrollWindow
GetClassNameW
RegisterClassW
CopyRect
RegisterHotKey
PostQuitMessage
RegisterClipboardFormatA
GetWindowTextLengthA
FillRect
CreateDialogIndirectParamA
GetDCEx
SetMenuDefaultItem
GetMessageTime
ReuseDDElParam
GetMessageW
SetMenuItemInfoW
GetDesktopWindow
IsClipboardFormatAvailable
CharLowerA
FrameRect
CallNextHookEx
DrawTextA
LoadImageA
GetSystemMenu
CopyAcceleratorTableA
DestroyMenu
ReleaseDC
OemToCharA
GetMessagePos
UpdateWindow
CreateDialogParamA
PeekMessageA
TabbedTextOutA
CreateDialogIndirectParamW
DrawTextW
RegisterWindowMessageA
GetDlgItem
SetWindowPos
GetClipboardFormatNameA
InvalidateRect
DialogBoxIndirectParamA
GetWindow
GetFocus
SendMessageA
DrawTextExW
WindowFromPoint
InsertMenuItemA
IsZoomed
GetScrollRange
SetPropA
SetClassLongA
SetWindowRgn
LoadStringA
GetSystemMetrics
CharUpperA
SetDlgItemTextA
GetSubMenu
GrayStringW
SetForegroundWindow
DrawEdge
CharNextA
GetMenuItemCount
DialogBoxParamA
FindWindowExA
GetDlgItemInt
InvertRect
SetTimer
EqualRect
GetWindowLongA
ScreenToClient
CheckMenuItem
GetMenuItemInfoA
IsRectEmpty
EnumWindows
EndPaint
UnregisterClassA
GetMessageA
ReleaseCapture
TranslateMessage
InsertMenuA
CheckDlgButton
RedrawWindow
AttachThreadInput
TrackPopupMenuEx
GetPropW
DefDlgProcA
SetClipboardData
LockWindowUpdate
EndDialog
DdeFreeStringHandle
SystemParametersInfoW
SetFocus
wvsprintfA
GetNextDlgGroupItem
KillTimer
CreatePopupMenu
DeleteMenu
GetParent
GetWindowTextA
GetWindowPlacement
LoadCursorA
SetMenuItemBitmaps
CallWindowProcA
GetClientRect
GetMenuItemID
DefWindowProcA
BringWindowToTop
GetLastActivePopup
GetMenuItemInfoW
wsprintfW
GetTabbedTextExtentA
UnpackDDElParam
GetIconInfo
SetScrollInfo
IsWindow
GetWindowLongW
GetKeyState
SystemParametersInfoA
MessageBoxA
GetUpdateRect
GetClassInfoA
LoadBitmapA
DispatchMessageA
SetWindowsHookExA
SetCursor
IsDlgButtonChecked
RemovePropA
DestroyWindow
IntersectRect
UnregisterHotKey
SetActiveWindow
GetWindowThreadProcessId
CreateAcceleratorTableA
ExcludeUpdateRgn
IsWindowVisible
GetDlgCtrlID
CreateCaret
GetWindowDC
AppendMenuA
SetWindowTextA
MsgWaitForMultipleObjects
GetCapture
IsMenu
CreateIconIndirect
IsCharLowerA
DdeFreeDataHandle
GetScrollInfo
CheckMenuRadioItem
wsprintfA
SetScrollRange
GetForegroundWindow
ModifyMenuA
GetSysColor
OpenClipboard
GetKeyboardLayout
EnableWindow
TabbedTextOutW
RegisterClassA
GetAsyncKeyState
SetRectEmpty
GetActiveWindow
ValidateRect
LoadAcceleratorsA
DrawFocusRect
DeferWindowPos
CharUpperW
DestroyIcon
SetWindowContextHelpId
FlashWindow
LoadMenuA
GetNextDlgTabItem
MessageBeep
GetClipboardViewer
SetScrollPos
DrawIcon
TrackMouseEvent
ModifyMenuW
CreateWindowExW
AdjustWindowRectEx
DdeUninitialize
SetParent
SendDlgItemMessageA
DdeClientTransaction
IsWindowEnabled
GetWindowRect
PostMessageA
MoveWindow
ShowScrollBar
CreateMenu
GetCaretPos
GetSysColorBrush
SetRect
SetDlgItemInt
GetClassNameA
GetOpenClipboardWindow
GetMenu
RegisterClassExA
ShowWindow
ShowOwnedPopups
GetQueueStatus
DdeDisconnect
LoadBitmapW
InsertMenuItemW
SetPropW
MapWindowPoints
EnableMenuItem
OffsetRect
PostThreadMessageA
GetWindowRgn
UnhookWindowsHookEx
PtInRect
SetCapture
GetDialogBaseUnits
GetMenuStringA
advapi32
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyW
RegQueryValueW
InitializeSecurityDescriptor
FreeSid
RegQueryValueExW
RegSetValueExW
SetSecurityDescriptorDacl
RegQueryValueA
GetSidLengthRequired
RegConnectRegistryA
CryptDestroyHash
RegEnumValueW
RegEnumKeyExW
LookupPrivilegeValueA
CryptGetHashParam
RegCreateKeyA
AdjustTokenPrivileges
CryptDestroyKey
CopySid
GetLengthSid
ImpersonateSelf
CreateProcessAsUserA
OpenProcessToken
RegOpenKeyA
GetFileSecurityW
InitializeAcl
RegQueryInfoKeyA
RegSetValueExA
ControlService
EqualSid
RegDeleteKeyA
CryptReleaseContext
CloseServiceHandle
RegCreateKeyExA
CryptCreateHash
RegOpenKeyExA
AccessCheck
RegQueryInfoKeyW
DeleteService
OpenThreadToken
ConvertStringSidToSidA
RegEnumKeyA
RegOpenKeyExW
RegEnumValueA
RegDeleteValueA
RegSetValueA
GetUserNameA
OpenServiceA
IsValidSecurityDescriptor
SetTokenInformation
CryptHashData
RegCloseKey
OpenSCManagerA
GetTokenInformation
DuplicateTokenEx
ChangeServiceConfigA
winmm
mixerClose
waveOutPrepareHeader
waveInClose
waveOutOpen
waveInOpen
waveOutUnprepareHeader
waveInAddBuffer
timeGetDevCaps
waveInStop
mmioDescend
timeBeginPeriod
mmioRead
timeKillEvent
waveOutReset
mixerGetNumDevs
waveInReset
PlaySoundA
timeEndPeriod
mmioOpenA
waveOutPause
waveInStart
mciGetErrorStringA
waveOutRestart
waveOutGetDevCapsA
waveInGetNumDevs
mixerOpen
waveOutGetNumDevs
mmioClose
waveInPrepareHeader
mmioWrite
waveOutWrite
timeSetEvent
waveInUnprepareHeader
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoW
winspool.drv
ClosePrinter
EnumPrintersA
ord204
GetPrinterDriverDirectoryA
EnumJobsA
WritePrinter
DeviceCapabilitiesA
AddPrinterDriverA
AddPrinterA
OpenPrinterA
DocumentPropertiesA
StartDocPrinterA
EndDocPrinter
SetPrinterA
EnumPrinterDriversA
comctl32
ImageList_EndDrag
InitCommonControlsEx
ImageList_Draw
_TrackMouseEvent
ImageList_GetBkColor
ImageList_GetIcon
ImageList_DrawEx
PropertySheetW
ImageList_Create
ImageList_GetIconSize
ImageList_Read
PropertySheetA
DestroyPropertySheetPage
ImageList_LoadImageA
ImageList_Remove
ord17
CreatePropertySheetPageW
ImageList_BeginDrag
ImageList_DragShowNolock
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_Add
ImageList_Write
ImageList_DragEnter
ImageList_LoadImageW
ImageList_Destroy
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Replace
CreatePropertySheetPageA
ImageList_DragLeave
ImageList_DragMove
ImageList_ReplaceIcon
mfc42
ord1576
kernel32
InterlockedExchange
ExitThread
GetCPInfo
QueryDosDeviceA
CreateDirectoryA
QueryPerformanceFrequency
GetTempPathA
GetEnvironmentStringsW
GetDriveTypeA
LCMapStringW
GetDiskFreeSpaceExW
lstrcatA
FormatMessageW
IsBadWritePtr
ConvertDefaultLocale
FindClose
FormatMessageA
GetCommandLineA
GetLocaleInfoA
HeapReAlloc
CreateMutexA
GetLocaleInfoW
RemoveDirectoryW
GetFileAttributesA
FatalAppExitA
GetEnvironmentStrings
GlobalUnlock
LoadResource
InterlockedIncrement
GetUserDefaultLCID
TlsGetValue
GetWindowsDirectoryA
GlobalFlags
CreateDirectoryW
GetStartupInfoA
SetUnhandledExceptionFilter
CreateThread
GetCurrentDirectoryA
WriteConsoleA
FindNextChangeNotification
FileTimeToSystemTime
CreateFileA
lstrcmpW
EnterCriticalSection
WaitForSingleObject
SetFileAttributesW
RaiseException
GetPrivateProfileStringA
CopyFileW
GetTimeZoneInformation
SetFilePointer
GetThreadLocale
GetConsoleMode
GlobalAlloc
lstrcpynA
GetStartupInfoW
GetOEMCP
SetEvent
FindNextFileA
GetDateFormatA
SetErrorMode
InitializeCriticalSection
GetCurrentProcessId
MoveFileExA
GetFileSize
DebugBreak
GetFileAttributesW
IsBadReadPtr
GetStdHandle
GetDiskFreeSpaceA
LCMapStringA
GetTimeFormatA
RtlUnwind
DeleteFileA
GetLocalTime
GlobalLock
lstrlenA
lstrcpynW
FreeEnvironmentStringsW
GetCurrentThread
LoadLibraryA
ExitProcess
ReadFile
VirtualProtect
MultiByteToWideChar
FreeResource
SetFileAttributesA
VirtualFreeEx
WriteFile
WinExec
CopyFileA
GetProcessHeap
SystemTimeToFileTime
MoveFileA
GetSystemTimeAsFileTime
CompareStringA
HeapSize
GetCommandLineW
MulDiv
TlsSetValue
SetLastError
FreeEnvironmentStringsA
GetFileType
GetFileSizeEx
GetModuleHandleW
TlsFree
FindFirstFileA
ResumeThread
GetModuleFileNameA
GlobalGetAtomNameA
LockResource
Sleep
CreateEventA
CompareStringW
IsProcessorFeaturePresent
GetSystemDirectoryA
SetStdHandle
VirtualFree
FreeLibrary
QueryPerformanceCounter
GetCurrentProcess
GetPrivateProfileIntA
GlobalSize
GetProcAddress
CloseHandle
DosDateTimeToFileTime
SizeofResource
WritePrivateProfileStringA
UnhandledExceptionFilter
GetVersionExW
GlobalAddAtomA
FindCloseChangeNotification
FlushFileBuffers
VirtualQuery
DeleteFileW
HeapCreate
InterlockedDecrement
IsValidCodePage
lstrcmpiA
SetHandleCount
WideCharToMultiByte
GlobalHandle
GlobalFree
WaitForMultipleObjects
GetWindowsDirectoryW
SetEndOfFile
TerminateThread
GlobalMemoryStatus
FindResourceExA
GetModuleHandleA
HeapDestroy
GetSystemTime
GetLastError
ResetEvent
GetStringTypeA
GetCurrentThreadId
GlobalReAlloc
HeapFree
CreateFileW
SetEnvironmentVariableA
FindNextFileW
GlobalFindAtomA
GetProfileIntW
GlobalDeleteAtom
GetDateFormatW
ReadDirectoryChangesW
FileTimeToLocalFileTime
_llseek
DeleteCriticalSection
VirtualAlloc
FindResourceW
UnlockFile
OpenMutexA
DuplicateHandle
LocalFree
GetFullPathNameW
GetUserDefaultLangID
lstrlenW
GetFileTime
IsBadCodePtr
GetSystemInfo
GetTickCount
lstrcmpA
IsValidLocale
LocalReAlloc
TerminateProcess
lstrcpyA
TlsAlloc
GetVersionExA
HeapAlloc
EnumSystemLocalesA
InterlockedCompareExchange
GetModuleFileNameW
LockFile
GetFullPathNameA
GetStringTypeW
GetVolumeInformationA
LeaveCriticalSection
GetVersion
GetCurrentDirectoryW
GetACP
LocalAlloc
OpenProcess
oleaut32
LoadTypeLi
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 261KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ