Static task
static1
Behavioral task
behavioral1
Sample
a4b820f83cf8ca502ee60981fadc1535b696f268d065b9ebaf17358d6ac5bc99.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4b820f83cf8ca502ee60981fadc1535b696f268d065b9ebaf17358d6ac5bc99.exe
Resource
win10v2004-20220812-en
General
-
Target
a4b820f83cf8ca502ee60981fadc1535b696f268d065b9ebaf17358d6ac5bc99
-
Size
86KB
-
MD5
235beceb1cf6f409da8cc80b72c94f6a
-
SHA1
be317e07d85086257c78bc47dff97f444d5e8cfb
-
SHA256
a4b820f83cf8ca502ee60981fadc1535b696f268d065b9ebaf17358d6ac5bc99
-
SHA512
8bd40660002e794ee063fa5c37e50b46b51d368eb37ac9b91c3f1adf1546357c5e0c919d54fecc982322c26998a17a2d239214a20897000130810c7134da76ec
-
SSDEEP
1536:qYY1EXjKV1NOfuQf4B4kOt6lVBZh9ckCYfxZgsXq774MGxlA:q3EXj67etApnHCMxGCq774MGxl
Malware Config
Signatures
Files
-
a4b820f83cf8ca502ee60981fadc1535b696f268d065b9ebaf17358d6ac5bc99.exe windows x86
f5c9974ffa25f556b47a9468cac5334c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptGenRandom
RegOpenKeyExW
AdjustTokenPrivileges
TrusteeAccessToObjectA
SetNamedSecurityInfoA
DeregisterEventSource
DestroyPrivateObjectSecurity
GetEffectiveRightsFromAclA
GetKernelObjectSecurity
StartServiceCtrlDispatcherW
SetEntriesInAccessListW
RegReplaceKeyA
BuildImpersonateTrusteeA
BuildImpersonateTrusteeW
IsValidSid
PrivilegedServiceAuditAlarmW
ObjectOpenAuditAlarmA
AdjustTokenGroups
GetSecurityDescriptorOwner
RegSetValueExW
GetTrusteeNameA
SetNamedSecurityInfoExW
GetSecurityInfo
CryptGetKeyParam
RegQueryInfoKeyW
SetSecurityDescriptorDacl
InitiateSystemShutdownW
CryptGenKey
GetCurrentHwProfileA
OpenServiceW
AddAce
CryptGetDefaultProviderW
OpenSCManagerW
SetEntriesInAuditListA
OpenProcessToken
RegQueryMultipleValuesA
ObjectDeleteAuditAlarmA
BackupEventLogW
GetAce
AccessCheck
CryptGetHashParam
RegQueryValueExW
GetNumberOfEventLogRecords
LockServiceDatabase
CopySid
EnumDependentServicesW
GetSecurityDescriptorLength
MakeAbsoluteSD
OpenSCManagerA
PrivilegedServiceAuditAlarmA
CryptSetProviderExW
CryptSetProvParam
CryptVerifySignatureW
RegGetKeySecurity
GetAccessPermissionsForObjectW
GetMultipleTrusteeOperationW
GetAuditedPermissionsFromAclW
GetTrusteeTypeA
QueryServiceObjectSecurity
CryptDeriveKey
RegSetValueW
SetSecurityDescriptorOwner
OpenBackupEventLogA
LookupAccountNameA
RegEnumKeyExW
RegFlushKey
SetEntriesInAclW
CryptReleaseContext
GetSecurityInfoExW
RegNotifyChangeKeyValue
RegEnumValueW
DuplicateToken
RegisterServiceCtrlHandlerA
IsTextUnicode
GetSidSubAuthorityCount
CreatePrivateObjectSecurity
CreateProcessAsUserA
RegLoadKeyW
CreateServiceA
SetServiceBits
OpenBackupEventLogW
EnumServicesStatusA
StartServiceA
ReadEventLogW
ObjectCloseAuditAlarmA
ChangeServiceConfigW
DeleteAce
CryptSetProviderExA
EqualPrefixSid
RegDeleteKeyW
SetEntriesInAccessListA
CryptEnumProviderTypesW
GetMultipleTrusteeA
InitiateSystemShutdownA
SetSecurityInfo
GetFileSecurityA
ControlService
GetMultipleTrusteeW
CryptGetProvParam
RegEnumKeyA
SetServiceObjectSecurity
RegDeleteValueA
CancelOverlappedAccess
GetSidLengthRequired
CryptHashData
CryptGetDefaultProviderA
CryptCreateHash
CryptSetProviderA
GetUserNameW
GetFileSecurityW
SetEntriesInAclA
AreAnyAccessesGranted
SetNamedSecurityInfoW
kernel32
FindNextFileA
GetTapeStatus
SwitchToThread
IsDBCSLeadByte
GetExitCodeThread
GetDriveTypeW
EnumDateFormatsExA
SetErrorMode
SetTimeZoneInformation
GetProcessVersion
CreateEventA
OpenWaitableTimerW
RemoveDirectoryA
ReadConsoleOutputW
SetDefaultCommConfigW
GetProcessHeap
CreateNamedPipeA
FindResourceA
SearchPathA
WriteFile
GetCommConfig
GetFileTime
GetWriteWatch
WritePrivateProfileSectionW
GetProcessPriorityBoost
lstrcat
GetEnvironmentStringsA
VirtualFreeEx
LocalLock
FlushFileBuffers
VirtualProtect
GetVolumeInformationW
MultiByteToWideChar
GlobalLock
SetThreadIdealProcessor
DosDateTimeToFileTime
GetStdHandle
GetThreadTimes
GetConsoleScreenBufferInfo
OpenSemaphoreW
RequestWakeupLatency
GetPrivateProfileStructW
SetConsoleCP
GetFileAttributesA
GlobalHandle
GetOEMCP
GlobalFix
Heap32First
MoveFileW
GetCompressedFileSizeW
SetMessageWaitingIndicator
GetStringTypeW
FatalExit
GetStringTypeA
GetPrivateProfileSectionA
GetLogicalDrives
ExitProcess
FatalAppExitW
MulDiv
GetLogicalDriveStringsW
HeapCreate
GetLocalTime
SetMailslotInfo
SetCommTimeouts
lstrcpynA
DuplicateHandle
WriteProfileSectionW
lstrcmpiA
SwitchToFiber
ClearCommError
ExpandEnvironmentStringsA
EndUpdateResourceA
EnumResourceTypesA
CreateWaitableTimerA
GetTempPathW
VirtualAlloc
CreateMutexA
LockFileEx
WriteProcessMemory
GetCurrentProcessId
LocalAlloc
GetCommState
SetComputerNameW
LoadLibraryA
OpenFile
GetProcAddress
DisconnectNamedPipe
QueryDosDeviceW
WaitForSingleObjectEx
SleepEx
GlobalFlags
CreateFileMappingA
GetCurrentThread
VirtualFree
WritePrivateProfileStructW
OutputDebugStringW
CreateRemoteThread
WriteConsoleInputW
GetQueuedCompletionStatus
SetLocaleInfoW
FileTimeToDosDateTime
RtlFillMemory
DeleteFileW
Thread32First
GetProfileIntW
HeapUnlock
GetTimeFormatW
IsValidCodePage
IsDBCSLeadByteEx
GetFileType
GlobalMemoryStatus
SetLocaleInfoA
lstrcmp
SetThreadLocale
GetStartupInfoA
SetSystemTime
LocalHandle
GetPrivateProfileIntW
CompareFileTime
SetFileApisToANSI
GetProcessWorkingSetSize
CancelWaitableTimer
GetConsoleCursorInfo
EnumTimeFormatsW
SetConsoleOutputCP
GlobalUnlock
CreateFileA
SizeofResource
WritePrivateProfileStringA
FindFirstFileExW
CopyFileA
GetCurrentDirectoryA
CreateNamedPipeW
GetTapeParameters
FindFirstChangeNotificationA
GetModuleFileNameW
GetLongPathNameW
WriteConsoleOutputCharacterW
lstrcmpiW
GetSystemInfo
WriteConsoleOutputA
IsDebuggerPresent
ConnectNamedPipe
GetCPInfoExW
user32
GetMenuItemID
CharNextExA
GrayStringA
GetIconInfo
SendNotifyMessageW
VkKeyScanExA
MonitorFromWindow
DdeFreeStringHandle
ExitWindowsEx
CreateAcceleratorTableA
SetWindowsHookExA
SwitchDesktop
ChangeDisplaySettingsA
ChangeMenuA
IsDialogMessageA
GetWindowModuleFileNameW
CharNextA
ToUnicode
ReuseDDElParam
GetFocus
IsCharAlphaNumericA
IsIconic
GetKeyNameTextW
GetMessageA
AttachThreadInput
OpenInputDesktop
GetUserObjectInformationW
MessageBoxW
CreateIconIndirect
DlgDirListW
GetClientRect
RegisterDeviceNotificationA
DispatchMessageA
SetForegroundWindow
SendMessageCallbackA
DdeQueryStringW
DrawTextExW
DefWindowProcW
ChangeDisplaySettingsW
GetClipboardFormatNameW
OpenWindowStationA
FillRect
LoadMenuIndirectW
EditWndProc
CreateMDIWindowA
TranslateMDISysAccel
TabbedTextOutW
CallMsgFilterW
GetMenuItemInfoW
CascadeWindows
GetMenuItemInfoA
GetDlgItem
DlgDirListComboBoxW
MapVirtualKeyW
SetDlgItemInt
DispatchMessageW
GetMessageTime
UnregisterClassA
SetMenuItemInfoW
EndMenu
DrawEdge
GetDesktopWindow
OpenIcon
InsertMenuA
InflateRect
BeginDeferWindowPos
SetWindowLongW
UpdateWindow
CreateCursor
CheckMenuRadioItem
BroadcastSystemMessageA
LoadCursorA
CopyRect
DrawFrame
DdeUninitialize
SetCapture
OffsetRect
LoadStringA
DrawCaption
SetUserObjectSecurity
UnpackDDElParam
SendMessageTimeoutW
SetDlgItemTextW
InsertMenuItemA
DlgDirSelectComboBoxExA
FrameRect
RegisterClassExA
LookupIconIdFromDirectory
InSendMessageEx
SetTimer
LoadKeyboardLayoutA
FreeDDElParam
EnumWindowStationsA
GetGUIThreadInfo
CopyIcon
GetClassInfoExA
DragObject
IsCharAlphaNumericW
GetQueueStatus
DdeGetLastError
GetWindowContextHelpId
DdeConnectList
DeferWindowPos
UnionRect
CreateWindowExA
SystemParametersInfoA
CharPrevW
GetClassInfoA
EnumDisplaySettingsExA
KillTimer
SetScrollRange
EnumDisplaySettingsA
PeekMessageA
DrawFocusRect
OpenDesktopA
TranslateAcceleratorW
GetActiveWindow
SendMessageCallbackW
MapVirtualKeyA
EnumDesktopsA
CreateIcon
EndPaint
GetCursorInfo
GetClipboardOwner
WindowFromPoint
ShowCaret
ToAscii
BlockInput
CloseDesktop
GetShellWindow
shlwapi
SHRegDeleteUSValueA
PathRemoveExtensionW
SHRegEnumUSKeyA
PathRelativePathToA
HashData
SHDeleteEmptyKeyW
PathGetArgsA
SHRegCreateUSKeyA
PathSetDlgItemPathA
ChrCmpIW
SHRegQueryInfoUSKeyA
PathCanonicalizeW
PathSearchAndQualifyW
StrRChrW
SHGetValueW
StrTrimW
UrlCompareW
PathIsDirectoryEmptyW
PathAppendA
UrlEscapeA
StrChrA
PathSearchAndQualifyA
StrCatBuffA
SHRegEnumUSKeyW
SHEnumKeyExW
PathCompactPathW
PathIsPrefixA
StrStrW
PathAddBackslashA
SHSetThreadRef
PathRemoveArgsW
PathCommonPrefixW
PathIsNetworkPathA
PathIsUNCW
PathRemoveBlanksW
PathUnquoteSpacesA
PathBuildRootW
PathMakeSystemFolderA
PathIsUNCServerShareA
SHRegQueryInfoUSKeyW
SHStrDupA
PathGetCharTypeA
StrFormatByteSizeW
SHRegWriteUSValueW
StrNCatA
UrlApplySchemeW
PathIsRootW
PathIsRelativeW
PathCompactPathA
UrlIsOpaqueW
StrStrIW
SHAutoComplete
ColorHLSToRGB
PathIsURLW
wvnsprintfW
UrlCanonicalizeW
StrCmpW
StrFormatKBSizeA
SHDeleteKeyW
PathIsPrefixW
SHRegCreateUSKeyW
wnsprintfW
UrlCreateFromPathA
SHRegCloseUSKey
PathIsNetworkPathW
SHSetValueA
PathIsSystemFolderW
SHCopyKeyA
SHCreateStreamOnFileW
PathGetDriveNumberA
PathUnmakeSystemFolderW
UrlUnescapeA
PathCreateFromUrlW
PathIsSameRootW
StrDupA
SHRegSetUSValueW
PathIsLFNFileSpecW
StrToIntExA
SHEnumKeyExA
PathCompactPathExA
SHDeleteEmptyKeyA
StrRetToBufA
UrlIsNoHistoryW
StrFormatByteSize64A
PathStripToRootW
StrStrIA
PathFindExtensionW
SHRegDeleteEmptyUSKeyW
PathFindSuffixArrayA
UrlGetLocationW
PathFindOnPathA
StrCmpNIA
SHDeleteKeyA
ChrCmpIA
StrStrA
PathAddExtensionA
SHRegOpenUSKeyA
PathMatchSpecA
StrRChrA
PathFindFileNameA
StrCmpNIW
SHRegOpenUSKeyW
PathRemoveExtensionA
AssocQueryStringW
PathUnquoteSpacesW
UrlIsOpaqueA
PathIsUNCServerA
UrlCombineA
ole32
SetConvertStg
CoDisconnectObject
OleCreateFromData
CoGetClassObject
OleBuildVersion
CoFileTimeToDosDateTime
CoGetStandardMarshal
CoGetInterfaceAndReleaseStream
RegisterDragDrop
CoGetCallerTID
CoDosDateTimeToFileTime
CoCreateFreeThreadedMarshaler
ReleaseStgMedium
OleCreateFromFile
PropVariantClear
CoImpersonateClient
OleCreateLinkFromData
UtConvertDvtd32toDvtd16
CoIsOle1Class
CoGetInstanceFromIStorage
MkParseDisplayName
CoCreateInstance
OleCreateFromFileEx
OleGetIconOfClass
StgOpenStorageEx
OleSave
CreateDataCache
StringFromGUID2
CoTreatAsClass
CoTaskMemAlloc
IsAccelerator
StgIsStorageILockBytes
GetDocumentBitStg
OleRegGetUserType
CreateItemMoniker
CoGetPSClsid
CreateDataAdviseHolder
CoFreeUnusedLibraries
UpdateDCOMSettings
CoGetObject
CoInitializeEx
CoRevertToSelf
OleTranslateAccelerator
OleCreate
CreateOleAdviseHolder
StgGetIFillLockBytesOnILockBytes
CoGetMarshalSizeMax
ReadOleStg
FreePropVariantArray
MonikerRelativePathTo
CoMarshalInterface
OleQueryLinkFromData
OleCreateStaticFromData
CreatePointerMoniker
StringFromCLSID
DoDragDrop
OleCreateFromDataEx
CoFreeLibrary
GetClassFile
OleLoadFromStream
GetHookInterface
OleQueryCreateFromData
StgCreateDocfile
CoQueryProxyBlanket
OleCreateDefaultHandler
StgGetIFillLockBytesOnFile
CoGetCurrentProcess
CoGetInstanceFromFile
CreateAntiMoniker
CreateGenericComposite
CoFreeAllLibraries
CreateClassMoniker
OleSetContainedObject
MonikerCommonPrefixWith
OleCreateEx
OleConvertIStorageToOLESTREAM
CoRevokeClassObject
CoUnmarshalHresult
CoAddRefServerProcess
CoLoadLibrary
CoRegisterMallocSpy
OleInitialize
WriteClassStg
OleRegGetMiscStatus
UtGetDvtd32Info
CoIsHandlerConnected
OleIsRunning
ReadClassStm
StgOpenAsyncDocfileOnIFillLockBytes
SetDocumentBitStg
ProgIDFromCLSID
CoReleaseServerProcess
CoTaskMemRealloc
CoGetCurrentLogicalThreadId
OleRun
CoRegisterSurrogate
OleDoAutoConvert
GetHGlobalFromStream
CoSuspendClassObjects
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 255B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE