Static task
static1
Behavioral task
behavioral1
Sample
f4a60b3a2f0a7b1462ab74b69cefd6343388d5b41ed0a6c3d4b91c67fca4b0d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4a60b3a2f0a7b1462ab74b69cefd6343388d5b41ed0a6c3d4b91c67fca4b0d8.exe
Resource
win10v2004-20220901-en
General
-
Target
f4a60b3a2f0a7b1462ab74b69cefd6343388d5b41ed0a6c3d4b91c67fca4b0d8
-
Size
114KB
-
MD5
06db02f3b671cbcedfb6ad22eb554530
-
SHA1
1d0f389de819658db03f3d6d6a82c6967ec9fb48
-
SHA256
f4a60b3a2f0a7b1462ab74b69cefd6343388d5b41ed0a6c3d4b91c67fca4b0d8
-
SHA512
46fe4eb217401c124ddcf3b667a8c58d314deadbae25d62a5d3c53ffd32e5e2cbcbe4f802b8b67316a1328183428d2d367be8e315a05d49de6df55694279cd95
-
SSDEEP
3072:PT2Q0NalQW4XkAhl1xWbMzEEkYRPeC++QM+8GX:e8yW40Ahl1sxGRNQMU
Malware Config
Signatures
Files
-
f4a60b3a2f0a7b1462ab74b69cefd6343388d5b41ed0a6c3d4b91c67fca4b0d8.exe windows x86
561785adc3d3e1ae78cd5e92271e7059
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
comctl32
ImageList_DragShowNolock
ImageList_LoadImageA
FlatSB_SetScrollProp
ImageList_SetDragCursorImage
CreateStatusWindowA
InitializeFlatSB
DrawInsert
DestroyPropertySheetPage
ImageList_GetImageInfo
ImageList_SetOverlayImage
_TrackMouseEvent
ImageList_Copy
ImageList_DragLeave
ImageList_Create
DrawStatusTextW
ImageList_Duplicate
ImageList_Destroy
ImageList_SetIconSize
ImageList_EndDrag
FlatSB_SetScrollInfo
ImageList_DragMove
InitMUILanguage
PropertySheetW
CreateToolbarEx
ImageList_DrawIndirect
MakeDragList
ImageList_LoadImage
CreatePropertySheetPage
CreateStatusWindowW
ImageList_SetBkColor
CreatePropertySheetPageW
UninitializeFlatSB
FlatSB_GetScrollRange
ImageList_GetIcon
ImageList_Replace
GetEffectiveClientRect
FlatSB_GetScrollProp
ImageList_AddMasked
ImageList_GetDragImage
FlatSB_GetScrollPos
ImageList_AddIcon
FlatSB_ShowScrollBar
LBItemFromPt
GetMUILanguage
ImageList_BeginDrag
ImageList_LoadImageW
ImageList_GetImageRect
DllGetVersion
ImageList_Merge
ImageList_ReplaceIcon
ImageList_GetBkColor
ImageList_GetIconSize
InitCommonControls
CreateUpDownControl
FlatSB_SetScrollRange
MenuHelp
FlatSB_EnableScrollBar
CreateToolbar
PropertySheetA
FlatSB_GetScrollInfo
ImageList_Draw
ImageList_Read
ImageList_SetFilter
InitCommonControlsEx
DrawStatusText
ShowHideMenuCtl
CreateMappedBitmap
ImageList_Write
ImageList_Remove
CreatePropertySheetPageA
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Add
ImageList_DrawEx
PropertySheet
ImageList_GetFlags
FlatSB_SetScrollPos
ImageList_DragEnter
ImageList_SetFlags
DrawStatusTextA
CreateStatusWindow
winsta
_WinStationNotifyNewSession
_NWLogonSetAdmin
WinStationTerminateProcess
WinStationReset
ServerQueryInetConnectorInformationW
WinStationActivateLicense
WinStationFreeMemory
WinStationSendMessageW
WinStationRenameA
WinStationGetTermSrvCountersValue
WinStationSendWindowMessage
_WinStationBeepOpen
LogonIdFromWinStationNameW
WinStationEnumerate_IndexedA
WinStationDisconnect
WinStationGetProcessSid
WinStationEnumerateLicenses
WinStationShadow
LogonIdFromWinStationNameA
_WinStationCheckForApplicationName
_WinStationShadowTargetSetup
ServerSetInternetConnectorStatus
_NWLogonQueryAdmin
WinStationSetInformationA
WinStationGetLanAdapterNameA
WinStationSendMessageA
WinStationOpenServerW
_WinStationNotifyLogon
WinStationGetLanAdapterNameW
_WinStationBreakPoint
WinStationShutdownSystem
_WinStationReInitializeSecurity
WinStationEnumerate_IndexedW
WinStationQueryInformationW
WinStationFreeGAPMemory
WinStationGetAllProcesses
WinStationWaitSystemEvent
WinStationQueryUpdateRequired
WinStationEnumerateProcesses
WinStationGenerateLicense
WinStationSetPoolCount
_WinStationGetApplicationInfo
_WinStationReadRegistry
WinStationNameFromLogonIdA
WinStationRemoveLicense
WinStationEnumerateW
_WinStationShadowTarget
WinStationQueryInformationA
WinStationQueryLicense
WinStationConnectA
WinStationOpenServerA
WinStationNameFromLogonIdW
_WinStationNotifyLogoff
WinStationConnectW
WinStationInstallLicense
_WinStationAnnoyancePopup
WinStationBroadcastSystemMessage
WinStationEnumerateA
WinStationCloseServer
ServerQueryInetConnectorInformationA
WinStationVirtualOpen
ServerGetInternetConnectorStatus
WinStationSetInformationW
WinStationRenameW
WinStationServerPing
_WinStationCallback
_WinStationWaitForConnect
WinStationNtsdDebug
newdev
InstallWindowsUpdateDriver
UpdateDriverForPlugAndPlayDevicesW
InstallNewDevice
InstallSelectedDriver
UpdateDriverForPlugAndPlayDevicesA
rtutils
TraceDeregisterExA
LogEventA
TraceVprintfExW
RouterLogEventStringW
LogEventW
RouterGetErrorStringW
TraceDumpExA
TracePrintfA
TraceDeregisterW
TracePrintfW
RouterLogEventW
TraceDeregisterA
TraceVprintfExA
RouterLogEventA
TraceGetConsoleW
TracePutsExA
RouterLogEventExW
RouterLogEventExA
MprSetupProtocolFree
TraceDumpExW
LogErrorW
RouterGetErrorStringA
LogErrorA
RouterLogEventValistExA
TracePrintfExW
TracePrintfExA
MprSetupProtocolEnum
RouterLogDeregisterW
RouterLogEventStringA
user32
SetWindowsHookA
SetSysColors
GetMonitorInfoA
EnumThreadWindows
RealGetWindowClassW
CopyIcon
SendMessageW
ChangeClipboardChain
RedrawWindow
ShowOwnedPopups
IMPSetIMEA
GetNextDlgGroupItem
DdeUnaccessData
ScrollDC
AppendMenuA
GetMenuItemRect
SendDlgItemMessageA
DrawCaptionTempW
UnregisterClassA
CharPrevA
BlockInput
GetMenuStringW
LoadIconA
EnumDisplayDevicesA
QuerySendMessage
OemToCharBuffA
SetMenuItemBitmaps
GetClassInfoW
GetWindowTextLengthA
SetCaretBlinkTime
SoftModalMessageBox
SetWindowsHookExW
CreateWindowStationA
LoadKeyboardLayoutEx
LoadBitmapW
GetKeyboardLayoutNameA
GetKeyState
SendDlgItemMessageW
GetInternalWindowPos
GetSystemMetrics
SetShellWindow
GetWindowInfo
ScrollChildren
GetClipboardFormatNameW
EnumWindows
AdjustWindowRect
LoadRemoteFonts
SetSystemMenu
EmptyClipboard
GetClipCursor
EnumDisplaySettingsW
IsIconic
ShowWindow
DlgDirSelectExW
DdeClientTransaction
SetWindowWord
DefWindowProcW
PostMessageW
DdeQueryNextServer
IMPGetIMEA
CharPrevW
ChangeMenuW
SetWindowRgn
CharToOemBuffA
ExitWindowsEx
SetWindowLongW
IsCharAlphaNumericW
SendMessageTimeoutW
MonitorFromPoint
UnhookWinEvent
EnumDisplaySettingsExA
LockSetForegroundWindow
IsCharUpperW
TileChildWindows
AnyPopup
EnumPropsExA
ReplyMessage
LoadCursorFromFileA
IsChild
SetShellWindowEx
FindWindowA
RealGetWindowClass
DeregisterShellHookWindow
UserClientDllInitialize
WaitForInputIdle
SetMenuContextHelpId
FindWindowW
LoadIconW
DispatchMessageA
RegisterSystemThread
DrawTextExW
mouse_event
UserHandleGrantAccess
WindowFromDC
GrayStringW
SetMenuItemInfoA
PostThreadMessageA
GetClassInfoA
IsCharAlphaW
CloseWindowStation
MenuWindowProcW
RegisterDeviceNotificationA
SystemParametersInfoW
DdeEnableCallback
SendNotifyMessageA
LoadAcceleratorsW
InsertMenuA
CreateIconFromResource
keybd_event
GetTabbedTextExtentW
GetScrollInfo
DdeConnect
IsCharAlphaNumericA
GetThreadDesktop
IsDialogMessage
GetWindowLongW
SetSysColorsTemp
GetScrollBarInfo
GetWindowTextW
DdeCreateDataHandle
CharToOemW
SetForegroundWindow
BroadcastSystemMessage
LoadStringA
GetWindowModuleFileNameA
FlashWindowEx
DdeFreeDataHandle
OpenClipboard
SendMessageTimeoutA
GetUpdateRgn
CreateDialogParamW
EnumDesktopsW
SetProcessWindowStation
PackDDElParam
GetDlgCtrlID
MBToWCSEx
DdeNameService
GetNextDlgTabItem
AlignRects
IsWindowUnicode
GetWindowRgn
GetOpenClipboardWindow
GetProcessDefaultLayout
SetFocus
EndTask
GetClipboardData
TranslateMessage
ClientThreadSetup
DeferWindowPos
RegisterClassW
GetSysColorBrush
ActivateKeyboardLayout
wsprintfA
GetClientRect
EnableWindow
GetClassInfoExA
InsertMenuItemA
InSendMessage
SetDlgItemInt
DefFrameProcW
DdeInitializeW
MapVirtualKeyExA
TrackMouseEvent
TrackPopupMenuEx
HideCaret
InflateRect
RemovePropA
RegisterHotKey
GetPropW
GetClassInfoExW
PrivateExtractIconExA
UnhookWindowsHookEx
UserLpkTabbedTextOut
DialogBoxIndirectParamW
SendMessageCallbackA
DragObject
DefWindowProcA
IMPGetIMEW
LoadCursorFromFileW
DrawEdge
RealGetWindowClassA
GetWindowThreadProcessId
CliImmSetHotKey
DdeImpersonateClient
GetUserObjectSecurity
GetComboBoxInfo
GetProgmanWindow
LoadMenuW
GetWindowModuleFileNameW
DrawFrame
CheckMenuItem
MB_GetString
GetAsyncKeyState
GetClipboardSequenceNumber
GetClipboardOwner
CharUpperW
CreateDesktopW
ExcludeUpdateRgn
CharLowerW
GetMenuCheckMarkDimensions
DdeGetLastError
SetMenuDefaultItem
MenuWindowProcA
SetDoubleClickTime
MessageBoxIndirectA
IMPQueryIMEA
DefDlgProcA
GetSysColor
DdeCreateStringHandleA
GetTopWindow
SetWindowStationUser
DrawTextA
CallWindowProcA
DlgDirSelectComboBoxExW
GetWindowTextA
EditWndProc
OpenInputDesktop
GetUserObjectInformationA
ntprint
PSetupDestroyPrinterDeviceInfoList
PSetupSelectDeviceButtons
ClassInstall32
PSetupPreSelectDriver
PSetupGetSelectedDriverInfo
PSetupEnumMonitor
PSetupGetLocalDataField
PSetupBuildDriversFromPath
PSetupGetPathToSearch
PSetupInstallICMProfiles
PSetupProcessPrinterAdded
PSetupDriverInfoFromName
PSetupIsCompatibleDriver
PSetupThisPlatform
PSetupCreatePrinterDeviceInfoList
PSetupDestroyDriverInfo3
PSetupCreateDrvSetupPage
PSetupInstallPrinterDriver
PSetupSetSelectDevTitleAndInstructions
PSetupDestroySelectedDriverInfo
PSetupIsTheDriverFoundInInfInstalled
PSetupFreeDrvField
PSetupAssociateICMProfiles
PSetupInstallMonitor
PSetupSelectDriver
PSetupIsDriverInstalled
PSetupCreateMonitorInfo
PSetupGetDriverInfo3
PSetupDestroyMonitorInfo
gdi32
CreateFontIndirectExA
GdiQueryFonts
GetTextExtentExPointI
EngCreateSemaphore
CreateICW
GdiInitializeLanguagePack
GdiAlphaBlend
SetDeviceGammaRamp
TextOutW
PATHOBJ_vEnumStartClipLines
AddFontResourceW
CreateSolidBrush
GdiEntry2
GetKerningPairsA
GdiGetSpoolMessage
EngAssociateSurface
FONTOBJ_pvTrueTypeFontFile
BRUSHOBJ_pvAllocRbrush
GetBrushOrgEx
GdiEndPageEMF
GetGlyphIndicesA
GetCharWidthFloatA
GetColorAdjustment
GdiEntry4
GdiFixUpHandle
GetEnhMetaFileBits
SetTextAlign
GdiIsPlayMetafileDC
SetMapMode
GetFontData
EngGetDriverName
EnumFontFamiliesExA
SelectClipRgn
Polyline
GdiConvertBitmap
SetTextCharacterExtra
SetDIBColorTable
StretchDIBits
InvertRgn
GetDCBrushColor
GdiTransparentBlt
SetArcDirection
StartPage
StartDocA
CreateMetaFileA
CLIPOBJ_bEnum
GdiConvertPalette
GetViewportExtEx
GetKerningPairs
SetWindowOrgEx
ChoosePixelFormat
GetCharABCWidthsFloatA
CreateRectRgnIndirect
ResizePalette
GdiCleanCacheDC
GetPixel
CreateICA
ExtCreateRegion
RectVisible
GdiSetBatchLimit
GetEnhMetaFilePixelFormat
GetCharABCWidthsW
ModifyWorldTransform
GdiEntry7
SetMagicColors
ScaleViewportExtEx
PolyTextOutA
GdiGetCharDimensions
TextOutA
SetWorldTransform
SetVirtualResolution
EngLineTo
CreateDCW
RectInRegion
EngMultiByteToUnicodeN
CreatePatternBrush
GdiSetServerAttr
CreateColorSpaceA
GetClipBox
DeleteObject
EngComputeGlyphSet
GetPixelFormat
CreateFontA
GdiGetPageHandle
PATHOBJ_bEnumClipLines
CopyMetaFileA
GetTextExtentExPointA
GetBitmapBits
GetTextFaceAliasW
SetViewportExtEx
SetBitmapBits
GetCharacterPlacementW
GdiStartPageEMF
GdiEndDocEMF
EngDeleteSemaphore
EngUnicodeToMultiByteN
ResetDCW
GetRelAbs
SetBoundsRect
IntersectClipRect
DeviceCapabilitiesExW
SetICMProfileA
EnumEnhMetaFile
RemoveFontMemResourceEx
GdiConvertRegion
CreateBitmapIndirect
IsValidEnhMetaRecord
DescribePixelFormat
CreateRoundRectRgn
GetColorSpace
GetTextExtentPoint32W
AddFontResourceExW
GdiDllInitialize
GetSystemPaletteUse
GdiResetDCEMF
CloseMetaFile
GdiDeleteLocalDC
ArcTo
CreatePolygonRgn
GetTextExtentPoint32A
BRUSHOBJ_pvGetRbrush
PolyBezierTo
GetCurrentObject
GetStockObject
GetFontResourceInfoW
GdiGetLocalFont
bMakePathNameW
SelectObject
MaskBlt
GdiGetLocalBrush
SaveDC
GdiGetSpoolFileHandle
STROBJ_vEnumStart
SetMetaFileBitsEx
CreateEllipticRgn
UpdateICMRegKeyW
FONTOBJ_pxoGetXform
EngFreeModule
EnumICMProfilesA
GetCharWidthW
AddFontResourceA
EngMultiByteToWideChar
GdiIsMetaFileDC
CreateDiscardableBitmap
EngLoadModule
GdiGetPageCount
CreateDIBPatternBrush
SetLayoutWidth
GdiConvertDC
SetDIBits
PlayEnhMetaFile
EnumFontsA
XLATEOBJ_piVector
GetFontAssocStatus
CreateFontIndirectA
GetCharWidthA
SetPolyFillMode
DeleteMetaFile
FloodFill
PathToRegion
CancelDC
GetDCPenColor
GetGlyphOutlineWow
EnumFontFamiliesA
GetStringBitmapW
cGetTTFFromFOT
EngDeletePath
AngleArc
EngGradientFill
GetCharWidthI
UnrealizeObject
CreateEllipticRgnIndirect
EngQueryLocalTime
GdiGetLocalDC
GdiConvertFont
SetTextColor
GdiConvertAndCheckDC
EngCreateDeviceSurface
FontIsLinked
AnimatePalette
GetCharacterPlacementA
PATHOBJ_bEnum
GetWorldTransform
CreatePen
GetWindowExtEx
GdiArtificialDecrementDriver
GdiCreateLocalMetaFilePict
EngQueryEMFInfo
EngTextOut
SelectClipPath
EngAcquireSemaphore
GdiPrinterThunk
GdiIsMetaPrintDC
CreateDCA
GdiRealizationInfo
GetEnhMetaFileA
CreateEnhMetaFileW
GetCharWidth32A
GetTransform
GdiConvertBitmapV5
Pie
EnumObjects
GdiEntry1
SetColorAdjustment
SetViewportOrgEx
RemoveFontResourceExW
GetStretchBltMode
GdiEntry12
SetMiterLimit
OffsetViewportOrgEx
SetSystemPaletteUse
EngReleaseSemaphore
CreateBitmap
GetTextMetricsA
GetEnhMetaFileW
CreateBrushIndirect
RestoreDC
GdiEntry5
msvcrt40
signal
_write
_wfreopen
_cwait
_CIatan2
?osfx@ostream@@QAEXXZ
_filbuf
_stricmp
?unsetf@ios@@QAEJJ@Z
??_7ostrstream@@6B@
_execlpe
?setf@ios@@QAEJJ@Z
_CIcosh
_ismbcupper
??5istream@@QAEAAV0@AAD@Z
?rdbuf@fstream@@QBEPAVfilebuf@@XZ
?width@ios@@QBEHXZ
fwscanf
??0fstream@@QAE@H@Z
_ismbchira
__p__amblksiz
?text@filebuf@@2HB
?putback@istream@@QAEAAV1@D@Z
iswlower
?setf@ios@@QAEJJJ@Z
_ultow
_mbspbrk
_except_handler2
fread
?ipfx@istream@@QAEHH@Z
_adj_fprem
_CIasin
strspn
midimap
modmCallback
modMessage
DriverProc
kernel32
OutputDebugStringA
GetSystemInfo
GetNumberOfConsoleInputEvents
GetNamedPipeHandleStateA
WaitCommEvent
GetThreadContext
_lwrite
CloseHandle
TlsSetValue
GetVersionExA
GetNumberFormatW
CreateTimerQueueTimer
LoadLibraryExW
GetCPInfoExA
TlsAlloc
lstrcmpA
UnlockFileEx
WaitNamedPipeW
FindFirstFileExW
GetDiskFreeSpaceW
WriteConsoleA
SystemTimeToTzSpecificLocalTime
HeapLock
SetConsoleMenuClose
SetConsoleHardwareState
LoadLibraryW
CreateJobObjectA
GetDevicePowerState
GetHandleInformation
InterlockedIncrement
SetFileAttributesW
SetMailslotInfo
RemoveDirectoryW
AssignProcessToJobObject
EnumDateFormatsExW
GetProcessHeap
FlushFileBuffers
GetStartupInfoW
GetConsoleAliasesLengthA
GetQueuedCompletionStatus
SetHandleCount
IsBadHugeReadPtr
GlobalFindAtomW
FindResourceExW
SetVolumeMountPointA
SetConsoleNumberOfCommandsW
GetWriteWatch
GetNumberOfConsoleMouseButtons
GetCalendarInfoW
ChangeTimerQueueTimer
SetStdHandle
CreateFiber
lstrcpyW
SetProcessShutdownParameters
VirtualProtectEx
FileTimeToSystemTime
GetConsoleCommandHistoryA
VirtualAlloc
GetNumberOfConsoleFonts
lstrcatA
GetVDMCurrentDirectories
GetNamedPipeInfo
FatalAppExitW
GetVersionExW
EnumResourceTypesA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ