Static task
static1
Behavioral task
behavioral1
Sample
5bc6f98378538ab21fa8796fd7d5be8334c246f0f9d7880b84c748978a0bea09.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5bc6f98378538ab21fa8796fd7d5be8334c246f0f9d7880b84c748978a0bea09.exe
Resource
win10v2004-20220812-en
General
-
Target
5bc6f98378538ab21fa8796fd7d5be8334c246f0f9d7880b84c748978a0bea09
-
Size
332KB
-
MD5
630f987ce85048654360a6eb358f8a00
-
SHA1
24e11e3a28f4ae5285df23de80fc49d563480c4c
-
SHA256
5bc6f98378538ab21fa8796fd7d5be8334c246f0f9d7880b84c748978a0bea09
-
SHA512
d896ede9741f3d940519888f740e09b5ed6b9f3b7758965a16957e748481de052a0570a7d1bca2966a2c437bf7ef049a14d4406adbc53dbd1c098e87ac537325
-
SSDEEP
6144:fF0DjLkksnLpsEDJEKjy1OsLutlvqrhfckpt4MESU50Fax3Weh4cLzQMmpDsF:N0DjqpNAOntlvUrptVDs3bsMmpDsF
Malware Config
Signatures
Files
-
5bc6f98378538ab21fa8796fd7d5be8334c246f0f9d7880b84c748978a0bea09.exe windows x86
fe7b2261d0e69f4769d2d4b2b5c18d10
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetTokenInformation
CryptCreateHash
GetTraceEnableLevel
TraceMessage
RegCreateKeyExA
CryptHashData
DuplicateTokenEx
RegisterTraceGuidsW
RegEnumKeyW
OpenProcessToken
RegDeleteKeyW
IsTextUnicode
CryptReleaseContext
RegQueryValueExW
GetTraceEnableFlags
RegEnumKeyExW
UnregisterTraceGuids
RegOpenKeyExA
RegCreateKeyA
TraceEvent
SetThreadToken
RegCreateKeyExW
CreateProcessAsUserW
ConvertSidToStringSidW
GetLengthSid
RegEnumValueW
ImpersonateSelf
CryptAcquireContextW
RegQueryInfoKeyW
RegSetValueExA
OpenThreadToken
ConvertStringSidToSidW
RegEnumValueA
GetTraceLoggerHandle
RegQueryValueW
RegQueryValueExA
RegDeleteKeyA
RegOpenCurrentUser
RegDeleteValueW
SetTokenInformation
RegSetValueExW
RegOpenKeyExW
RegOpenKeyW
RegCloseKey
RegDeleteValueA
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptDestroyHash
CryptGetHashParam
GetUserNameW
kernel32
SetEvent
CreateToolhelp32Snapshot
MoveFileW
TerminateThread
FindNextFileW
GetEnvironmentVariableW
GetPrivateProfileSectionNamesW
EnterCriticalSection
lstrcmpiA
LocalSize
GetFullPathNameW
CreateProcessW
InterlockedIncrement
Process32FirstW
AddAtomW
DeleteFileW
GlobalAddAtomW
FindResourceExW
HeapAlloc
GetNumberFormatW
GlobalReAlloc
GetVersion
GetPrivateProfileStringW
GetPrivateProfileStringA
FindClose
TlsGetValue
WritePrivateProfileSectionW
SetThreadExecutionState
VirtualFree
DebugBreak
GetFileInformationByHandle
CreateDirectoryW
LockFileEx
RaiseException
CreateEventW
CreateMutexW
GetLocaleInfoW
ReplaceFileW
WaitForMultipleObjects
TryEnterCriticalSection
GetSystemInfo
ExpandEnvironmentStringsA
CloseHandle
HeapReAlloc
ReadFile
HeapCreate
LoadLibraryW
WaitForSingleObject
InterlockedCompareExchange
QueryDosDeviceW
DeleteCriticalSection
SetLastError
GlobalLock
OpenEventW
GetExitCodeThread
TlsAlloc
CreateActCtxW
WritePrivateProfileStringW
GetFileAttributesA
GetSystemDefaultUILanguage
SetProcessWorkingSetSize
GetCurrentProcessId
GetACP
SuspendThread
LoadResource
SetThreadContext
CompareFileTime
CreateEventA
EnumUILanguagesW
GetLastError
FileTimeToLocalFileTime
MulDiv
GetModuleFileNameW
GetModuleHandleW
FreeLibrary
GetCurrentProcess
MapViewOfFile
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetFileSizeEx
InterlockedExchange
HeapFree
ExitProcess
FindFirstFileW
FileTimeToSystemTime
ExpandEnvironmentStringsW
FreeLibraryAndExitThread
GetDateFormatW
SetCurrentDirectoryW
GlobalDeleteAtom
InitializeCriticalSectionAndSpinCount
GetSystemWow64DirectoryW
InterlockedDecrement
GetThreadLocale
LocalFileTimeToFileTime
ReleaseSemaphore
GetSystemDefaultLCID
GlobalAlloc
CreateFileW
lstrlenA
DisableThreadLibraryCalls
GlobalUnlock
SetFileAttributesW
LocalFree
GetAtomNameW
WriteFile
GetUserDefaultUILanguage
FindAtomW
GlobalFlags
CreateDirectoryA
lstrcmpW
VirtualQuery
GetProcessHeap
LocalAlloc
OpenMutexW
GetShortPathNameW
MoveFileExW
lstrlenW
HeapDestroy
GetFileAttributesW
UnlockFileEx
DeleteAtom
SetFileTime
CreateFileA
ActivateActCtx
WaitForSingleObjectEx
TlsSetValue
IsWow64Process
TlsFree
GetCurrentThreadId
TerminateProcess
SetFilePointerEx
GetWindowsDirectoryW
SizeofResource
SystemTimeToFileTime
GetFileAttributesExW
lstrcmpA
SetEndOfFile
GetCPInfo
ReleaseMutex
SetThreadPriority
MultiByteToWideChar
SetProcessShutdownParameters
CompareStringW
GetVersionExW
GetLocalTime
GetTempPathW
GetModuleHandleExW
OpenProcess
OutputDebugStringA
ResumeThread
GetThreadPriority
GetTempFileNameW
CreateThread
GetCurrentThread
GetModuleHandleA
ResetEvent
GetVersionExA
DuplicateHandle
GetModuleHandleExA
CreateMutexA
QueryPerformanceFrequency
DeleteTimerQueueTimer
Process32NextW
CreateTimerQueueTimer
GetLogicalDriveStringsW
GetProcAddress
CreateSemaphoreW
CreateFileMappingW
GetTickCount
GlobalAddAtomA
SetCurrentDirectoryA
DeactivateActCtx
UnhandledExceptionFilter
FormatMessageW
VirtualProtect
QueueUserWorkItem
FlushInstructionCache
GetThreadContext
GetModuleFileNameA
GetUserDefaultLCID
CopyFileW
GetSystemTime
lstrcmpiW
WideCharToMultiByte
GetTimeFormatW
GlobalFree
IsDBCSLeadByte
UnmapViewOfFile
SetErrorMode
LockResource
SetUnhandledExceptionFilter
OpenMutexA
Sleep
GetPrivateProfileSectionW
LCMapStringW
GlobalSize
SetEnvironmentVariableW
RemoveDirectoryW
GetSystemDirectoryW
CreateFileMappingA
LocalReAlloc
LeaveCriticalSection
GetLongPathNameW
GetFileSize
ReleaseActCtx
LoadLibraryA
LoadLibraryExW
SearchPathW
SetFilePointer
QueryPerformanceCounter
FindResourceW
CompareStringA
GetCurrentDirectoryW
VirtualAlloc
InitializeCriticalSection
shell32
Shell_NotifyIconW
ShellExecuteExW
SHGetDataFromIDListW
SHGetInstanceExplorer
SHGetPathFromIDListA
ExtractIconExW
ShellExecuteA
SHBrowseForFolderW
SHSetLocalizedName
SHGetDesktopFolder
SHPathPrepareForWriteW
DragQueryFileW
Shell_NotifyIconA
SHCreateShellItem
ExtractAssociatedIconExW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHFileOperationW
ShellExecuteW
SHGetFolderPathAndSubDirW
ShellAboutW
SHGetFolderLocation
ExtractIconW
SHGetSpecialFolderPathW
SHChangeNotify
SHGetFolderPathW
SHAppBarMessage
SHBindToParent
uxtheme
GetThemeColor
GetThemePartSize
GetThemeFont
GetThemeBackgroundExtent
GetThemeAppProperties
IsThemeActive
SetWindowTheme
OpenThemeData
DrawThemeBackground
GetThemeBackgroundContentRect
IsAppThemed
CloseThemeData
GetThemeMetric
DrawThemeParentBackground
GetThemeMargins
gdi32
GetLayout
SetViewportExtEx
PlayEnhMetaFile
SetMapMode
CloseMetaFile
SetRectRgn
CreateHalftonePalette
GetGlyphIndicesW
SetBkMode
RealizePalette
GetRegionData
CreateFontW
OffsetWindowOrgEx
DeleteDC
CreateRectRgnIndirect
CreatePatternBrush
CreateCompatibleDC
GetPaletteEntries
GetTextCharset
Rectangle
CreateSolidBrush
SetTextColor
SetWindowOrgEx
CreateMetaFileW
StretchDIBits
GetDeviceCaps
GetObjectA
GetObjectW
GetStockObject
TextOutA
OffsetRgn
CreateDCW
GetRgnBox
CreateBitmap
CreateFontIndirectW
GetSystemPaletteEntries
LineTo
SetPaletteEntries
CreateRectRgn
CreatePolygonRgn
SetStretchBltMode
SetLayout
RectVisible
CreateDCA
PatBlt
SetBkColor
CreateDIBPatternBrushPt
GetBkMode
SetTextAlign
SaveDC
IntersectClipRect
CombineRgn
GetTextExtentExPointI
RestoreDC
GetTextExtentPoint32W
EqualRgn
GetBkColor
SetDCPenColor
CreatePen
GetDIBits
GetTextExtentPointW
CreateCompatibleBitmap
SetViewportOrgEx
ExtTextOutW
SelectObject
BitBlt
ExtCreateRegion
CreateFontIndirectA
CloseEnhMetaFile
CreateEnhMetaFileA
SetBrushOrgEx
LPtoDP
GetDCOrgEx
GetTextMetricsW
MoveToEx
GetTextAlign
GetTextColor
DeleteEnhMetaFile
SelectPalette
GetTextExtentPoint32A
DeleteObject
GetPixel
CreateDIBSection
StretchBlt
TextOutW
GetClipBox
SetWindowExtEx
GetBrushOrgEx
CreatePalette
user32
SetWindowPlacement
GetWindowRect
RemovePropW
GetSysColorBrush
SetWindowRgn
DrawTextW
PostMessageW
WinHelpW
GetSystemMenu
LoadIconW
IsWindow
DdeFreeStringHandle
DefWindowProcA
RegisterClassExW
LoadStringA
FindWindowW
GetKeyState
GetDlgItemTextW
GetClipboardFormatNameW
MsgWaitForMultipleObjects
InvalidateRect
PostMessageA
GetMenuItemID
MessageBoxExA
IsChild
SetCursor
EndPaint
EnableWindow
SetPropW
IsWindowVisible
DialogBoxParamA
DestroyWindow
DeleteMenu
GetAncestor
LoadStringW
GetClipboardData
EndMenu
PtInRect
DdeDisconnect
GetMessageTime
SetForegroundWindow
GetWindow
IsRectEmpty
GetComboBoxInfo
GetMenuItemCount
DestroyAcceleratorTable
IsDlgButtonChecked
GetLastActivePopup
CreateIconIndirect
IsWindowUnicode
RedrawWindow
UnhookWindowsHookEx
DrawTextExW
DdeGetData
NotifyWinEvent
GetParent
ShowOwnedPopups
GetActiveWindow
GetCapture
DdeNameService
InflateRect
GetMessagePos
CreateWindowExW
GetMenuDefaultItem
SendMessageW
GetIconInfo
PeekMessageW
DestroyIcon
DrawFrameControl
AdjustWindowRectEx
ReleaseCapture
KillTimer
ChildWindowFromPoint
LockSetForegroundWindow
GetWindowPlacement
CheckRadioButton
DialogBoxParamW
ShowWindow
GetClassInfoW
SetDlgItemInt
RegisterWindowMessageA
EndDialog
SetWindowsHookExW
MessageBoxIndirectW
GetWindowInfo
EndDeferWindowPos
LoadMenuW
EqualRect
MessageBeep
SetScrollInfo
AdjustWindowRect
GetDlgCtrlID
SetMenu
ChangeClipboardChain
LoadAcceleratorsW
ReleaseDC
DialogBoxIndirectParamA
LoadCursorW
SetMenuItemBitmaps
SetActiveWindow
GetMessageW
OpenClipboard
SystemParametersInfoW
GetForegroundWindow
EnumChildWindows
EnableMenuItem
GetDesktopWindow
LoadImageW
SetWindowPos
CharNextA
DdeConnect
SetRect
AttachThreadInput
CheckMenuRadioItem
CheckMenuItem
GetProcessWindowStation
GetTopWindow
GetSubMenu
GetScrollInfo
CharLowerW
IsCharAlphaNumericW
GetKeyboardLayout
GetWindowRgnBox
IsHungAppWindow
MsgWaitForMultipleObjectsEx
InsertMenuW
SetWindowTextW
AppendMenuW
CharPrevA
SendMessageTimeoutA
BeginDeferWindowPos
GetClientRect
MonitorFromRect
FillRect
DdeFreeDataHandle
FindWindowExW
VkKeyScanExW
SendDlgItemMessageW
GetWindowThreadProcessId
GetPropW
FindWindowA
RemoveMenu
RegisterClassW
DdeQueryStringW
UnionRect
EnumDesktopWindows
DispatchMessageW
OffsetRect
EmptyClipboard
GetWindowLongW
GetWindowLongA
PeekMessageA
MapDialogRect
GetMenuItemInfoW
CopyIcon
CallNextHookEx
CreateDialogParamW
CopyImage
MoveWindow
UnregisterClassW
wsprintfW
GetWindowTextLengthW
ClientToScreen
DialogBoxIndirectParamW
TrackMouseEvent
SetPropA
DeferWindowPos
RegisterWindowMessageW
DrawIconEx
DrawFocusRect
IntersectRect
GetMessageA
GetShellWindow
SystemParametersInfoA
CallWindowProcW
LoadBitmapW
HideCaret
SetDlgItemTextW
SendMessageA
CheckDlgButton
UpdateLayeredWindow
MonitorFromPoint
SetCapture
DdeUninitialize
GetFocus
WaitForInputIdle
DdeCreateStringHandleW
LoadCursorA
ShowCaret
IsDialogMessageW
CallMsgFilterW
GetDoubleClickTime
GetDlgItem
SetMenuItemInfoW
EnumWindows
SetWindowLongA
GetClassInfoExW
ScreenToClient
TrackPopupMenuEx
GetDialogBaseUnits
GetMenuItemInfoA
GetWindowDC
CloseClipboard
GetSystemMetrics
MonitorFromWindow
DdeClientTransaction
GetClassNameW
IsMenu
SetParent
CharUpperW
DdeCreateDataHandle
SendNotifyMessageW
IsWindowEnabled
BeginPaint
DispatchMessageA
ShowScrollBar
GetPropA
GetSysColor
GetLastInputInfo
PostThreadMessageW
CreateMenu
UpdateWindow
SetTimer
DestroyMenu
EnumDisplaySettingsW
SetClipboardViewer
SetScrollPos
GetAsyncKeyState
MapVirtualKeyW
MessageBoxIndirectA
GetClassLongW
SetFocus
DdeInitializeW
CharLowerBuffW
GetKeyNameTextW
GetNextDlgTabItem
CreatePopupMenu
SetRectEmpty
DefWindowProcW
RegisterClipboardFormatW
GetDC
RemovePropA
GetMonitorInfoW
GetMenuState
GetWindowTextW
SetCursorPos
MessageBoxExW
EnumThreadWindows
SendMessageTimeoutW
WaitMessage
TrackPopupMenu
CharPrevW
InsertMenuItemW
PostThreadMessageA
GetCursorPos
PostQuitMessage
GetClassWord
IsIconic
TranslateAcceleratorW
AllowSetForegroundWindow
SetClipboardData
CharNextW
DrawEdge
RegisterClipboardFormatA
GetCursor
GetMenuStringW
AnimateWindow
SetWindowLongW
MessageBoxW
WindowFromPoint
TranslateMessage
CopyRect
SetMenuDefaultItem
MapWindowPoints
psapi
GetProcessImageFileNameW
ntdll
NtAllocateVirtualMemory
LdrGetDllHandle
RtlUshortByteSwap
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE