Static task
static1
Behavioral task
behavioral1
Sample
503bd9f1367f8aa7e8279394e9f5940915b087cf7f2c63454be42c1c55d86126.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
503bd9f1367f8aa7e8279394e9f5940915b087cf7f2c63454be42c1c55d86126.exe
Resource
win10v2004-20220812-en
General
-
Target
503bd9f1367f8aa7e8279394e9f5940915b087cf7f2c63454be42c1c55d86126
-
Size
261KB
-
MD5
7c87beaba8cd22dd1ef595f5d2297060
-
SHA1
411404b58fb2a6020f702246cc13e4c32fb20871
-
SHA256
503bd9f1367f8aa7e8279394e9f5940915b087cf7f2c63454be42c1c55d86126
-
SHA512
aafa87c1f9947e464a2e6cb820c5c9f5ca3f0bfdd250e7c54c1a872ec22b70bd15c688eeb399670f3a9115ccc20a17108f87b6b12b0f6dcdd84f3661560397fd
-
SSDEEP
3072:D3ojtWRn67X/eameP1h0MI2mV+v7XuioGNzcYNJxWv+afSAgzBRKKV:WV7X/fd1h0H4jbcYkczWe
Malware Config
Signatures
Files
-
503bd9f1367f8aa7e8279394e9f5940915b087cf7f2c63454be42c1c55d86126.exe windows x86
bebe4eb0a65adfee8338c6dad5cdb2c0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetKeyNameTextA
MapVirtualKeyA
GetKeyboardType
ScrollDC
DrawFrameControl
GetCursor
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
AttachThreadInput
SwapMouseButton
SetWindowWord
ChangeDisplaySettingsW
CharPrevW
GetClassInfoA
EnumThreadWindows
GetClassWord
SetClassLongA
LoadMenuA
ExitWindowsEx
MoveWindow
GetWindow
GetSysColor
GetWindowModuleFileNameA
CopyIcon
DefWindowProcA
DialogBoxIndirectParamA
WaitForInputIdle
RegisterClassExA
GetDialogBaseUnits
CharLowerBuffA
GetDlgItemTextA
CreateDialogParamA
MsgWaitForMultipleObjects
SetWindowRgn
DrawIcon
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
RegisterClassA
SetWindowLongA
GetLastActivePopup
IsWindowEnabled
LoadImageA
DrawStateA
FrameRect
DrawFocusRect
TrackPopupMenuEx
WindowFromPoint
GetActiveWindow
GetWindowLongA
DestroyIcon
DestroyCursor
DestroyMenu
InvalidateRgn
TrackMouseEvent
DestroyCaret
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
GetAsyncKeyState
UnregisterClassA
LoadBitmapA
LoadCursorA
SetCursor
GetParent
DrawEdge
DrawTextA
LoadIconA
SendMessageTimeoutA
ShowScrollBar
GetMessageA
TranslateMessage
DispatchMessageA
GetClipboardData
HideCaret
GetWindowTextLengthA
GetDlgItem
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetForegroundWindow
SetForegroundWindow
SetFocus
SetScrollRange
KillTimer
SetTimer
UpdateWindow
PostMessageA
InsertMenuA
DeleteMenu
GetMenuItemID
GetMessageTime
RemovePropA
FindWindowA
SetWindowPos
GetSystemMetrics
InsertMenuItemA
DrawMenuBar
CreateWindowExA
GetWindowRect
OffsetRect
InflateRect
CreateCaret
SetCaretPos
ShowCaret
CreatePopupMenu
EnableWindow
ScreenToClient
SetCapture
ReleaseCapture
GetKeyState
ClientToScreen
CopyRect
WinHelpA
GetCapture
IsChild
SetWindowPlacement
SetScrollPos
GetScrollPos
GetScrollRange
SetScrollInfo
GetTabbedTextExtentA
GetWindowInfo
GetFocus
RegisterWindowMessageA
CallWindowProcA
MessageBeep
GetNextDlgGroupItem
RemoveMenu
LockWindowUpdate
GetDCEx
GetSysColorBrush
GetClassNameA
UnionRect
ClipCursor
CopyAcceleratorTableA
PostThreadMessageA
CreateMenu
SetCursorPos
WindowFromDC
InSendMessage
wvsprintfA
RegisterClipboardFormatA
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
IsClipboardFormatAvailable
IsZoomed
EndDialog
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetMenuStringA
SetMenu
TrackPopupMenu
CreateDialogIndirectParamA
InvertRect
RedrawWindow
ScrollWindow
DefMDIChildProcA
TranslateMDISysAccel
DefFrameProcA
ValidateRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
TranslateAcceleratorA
LoadAcceleratorsA
GetWindowTextA
IsWindowVisible
GetMenu
GetTopWindow
GetSystemMenu
SetParent
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
ShowWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
CheckRadioButton
CheckDlgButton
GetDesktopWindow
CharUpperA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
IsWindow
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetMessagePos
GetCursorPos
GetScrollInfo
SendMessageA
ReleaseDC
FillRect
GetDC
SetActiveWindow
CheckMenuRadioItem
AppendMenuA
wsprintfA
EnumChildWindows
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuItemCount
GetSubMenu
SetWindowTextA
GetDlgCtrlID
SetRectEmpty
IsRectEmpty
PtInRect
SetRect
InvalidateRect
GetClientRect
comdlg32
CommDlgExtendedError
GetSaveFileNameA
PrintDlgA
ChooseColorA
ChooseFontA
FindTextA
ReplaceTextA
GetOpenFileNameA
GetFileTitleA
shell32
DragQueryPoint
FindExecutableA
ShellExecuteExW
ShellAboutW
ExtractIconA
ShellExecuteExA
ExtractIconExA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderPathW
ShellExecuteW
DragQueryFileA
SHChangeNotify
DragAcceptFiles
SHGetFileInfoA
DragFinish
SHGetSpecialFolderLocation
ShellExecuteA
ole32
CoGetPSClsid
OleSetClipboard
OleQueryCreateFromData
CoInitializeEx
CoUninitialize
CoCreateInstance
ProgIDFromCLSID
CoTaskMemAlloc
StringFromGUID2
CoCreateGuid
CoRevokeClassObject
CoRegisterClassObject
GetRunningObjectTable
CoGetInterfaceAndReleaseStream
CoReleaseMarshalData
CoMarshalInterThreadInterfaceInStream
OleDoAutoConvert
OleSetContainedObject
StringFromCLSID
CoTaskMemFree
CoInitialize
advapi32
RegSetValueA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
GetUserNameA
RegOpenKeyA
RegQueryInfoKeyA
GetFileSecurityA
RegCreateKeyA
RegEnumKeyA
SetFileSecurityA
DecryptFileW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegFlushKey
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueA
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
ImpersonateNamedPipeClient
GetPrivateObjectSecurity
OpenServiceA
OpenEventLogA
BackupEventLogA
GetSecurityDescriptorGroup
GetServiceDisplayNameW
GetSecurityDescriptorLength
AllocateLocallyUniqueId
AdjustTokenPrivileges
wininet
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
gdi32
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CopyEnhMetaFileA
BitBlt
BeginPath
AnimatePalette
CombineRgn
AngleArc
CreateBitmap
CreateBrushIndirect
AddFontResourceExW
CreateBitmapIndirect
CloseMetaFile
SetAbortProc
AbortDoc
DPtoLP
GetCharWidthA
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetNearestPaletteIndex
GetObjectA
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextMetricsA
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
PlayEnhMetaFile
Polyline
RealizePalette
RectVisible
CreateHalftonePalette
RestoreDC
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetEnhMetaFileBits
SetRectRgn
CreateRectRgnIndirect
Escape
GetMapMode
PtVisible
GetWindowExtEx
ExtCreatePen
GetViewportExtEx
GetObjectType
PolyBezierTo
SelectClipPath
GetClipRgn
SetTextAlign
SetWindowExtEx
SelectClipRgn
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetMapMode
SetPolyFillMode
GetTextColor
GetBkColor
CreateRectRgn
CreateDCA
StartDocA
EndDoc
StartPage
EndPage
PolyBezier
TextOutA
EndPath
StrokeAndFillPath
CreateFontA
GetBitmapDimensionEx
CreatePen
SetDIBitsToDevice
CreatePatternBrush
GetTextFaceA
PlayMetaFile
SetMetaFileBitsEx
SetPixel
CreatePalette
CreatePenIndirect
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
ExcludeClipRect
ExtTextOutA
ExtTextOutW
Rectangle
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWinMetaFileBits
SetWindowOrgEx
StretchBlt
StretchDIBits
UnrealizeObject
WidenPath
TextOutW
ExtEscape
GetOutlineTextMetricsA
EnumFontFamiliesExA
GetFontData
FillPath
GetROP2
Polygon
CreatePolygonRgn
CreateEllipticRgnIndirect
GetDIBColorTable
SetMiterLimit
StrokePath
EnumFontFamiliesA
Ellipse
GetTextAlign
LPtoDP
CopyMetaFileA
DeleteMetaFile
GetBitmapBits
CreateMetaFileA
comctl32
ImageList_Create
ImageList_Destroy
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Add
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_Draw
ImageList_Replace
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_GetIcon
DestroyPropertySheetPage
CreatePropertySheetPageA
PropertySheetA
ImageList_AddMasked
_TrackMouseEvent
ImageList_Write
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ord17
ImageList_Remove
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
winspool.drv
EnumMonitorsA
OpenPrinterA
DocumentPropertiesA
EnumPrintersA
SetPrinterA
GetPrinterA
EnumPrinterDriversA
ClosePrinter
kernel32
GetSystemTimeAsFileTime
SetFileTime
OpenMutexA
GetFileAttributesA
VirtualQuery
GlobalFindAtomW
ContinueDebugEvent
FoldStringA
CloseHandle
CreateFileA
GetFileType
GetFileSize
GetStdHandle
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
SetFilePointer
UnhandledExceptionFilter
WriteFile
CompareStringA
CreateThread
ExitThread
ExitProcess
FindClose
FindFirstFileA
FreeLibrary
GetCommandLineA
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetThreadLocale
LoadLibraryExA
lstrcpynA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
VirtualAlloc
VirtualFree
Sleep
GetACP
GetTempPathA
DeleteFileA
MulDiv
LoadLibraryA
SizeofResource
LockResource
LoadResource
lstrcpyA
GetVersion
WaitForSingleObject
CreateProcessA
lstrcmpiA
lstrcmpA
GetSystemDirectoryA
LocalFree
FormatMessageA
lstrcatA
GetTickCount
FindResourceA
VirtualProtect
FindResourceExA
GlobalAlloc
GlobalUnlock
GlobalLock
GetExitCodeThread
GlobalFree
CopyFileA
CreateEventA
GetFullPathNameA
GetWindowsDirectoryA
SetEvent
GetTempFileNameA
GetProfileStringA
ResumeThread
GetVersionExA
WriteProfileStringA
TerminateThread
GlobalDeleteAtom
GlobalAddAtomA
GlobalGetAtomNameA
GlobalFindAtomA
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
MoveFileA
UnlockFile
GetVolumeInformationA
GetShortPathNameA
GetStringTypeExA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetLastError
DeleteCriticalSection
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
SuspendThread
GetProfileIntA
SetThreadPriority
GetCurrentDirectoryA
lstrlenW
GetCurrentThread
GetFileTime
GetDiskFreeSpaceA
FileTimeToLocalFileTime
TlsAlloc
FileTimeToSystemTime
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
TlsGetValue
TlsSetValue
GetProcessVersion
GetCPInfo
GlobalFlags
LocalFileTimeToFileTime
SystemTimeToFileTime
GetOEMCP
SetErrorMode
lstrcpyW
GlobalSize
HeapAlloc
GetTimeZoneInformation
HeapFree
GetLocalTime
GetSystemTime
HeapReAlloc
SetStdHandle
TerminateProcess
GetEnvironmentVariableA
HeapDestroy
HeapSize
HeapCreate
FatalAppExitA
LCMapStringA
IsBadWritePtr
SetHandleCount
LCMapStringW
CompareStringW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeA
GetStringTypeW
GetEnvironmentStringsW
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadCodePtr
SetEnvironmentVariableA
GetAtomNameA
AddAtomA
RemoveDirectoryA
SetThreadContext
FlushInstructionCache
WriteProcessMemory
VirtualProtectEx
GetThreadContext
QueryPerformanceFrequency
CreateMutexA
ReleaseMutex
GetPrivateProfileSectionNamesA
GetSystemDefaultLangID
GetSystemInfo
MoveFileExA
QueryPerformanceCounter
ResetEvent
FindNextFileA
SearchPathA
GetCurrentProcessId
FreeResource
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetFileAttributesA
CreateDirectoryA
GetExitCodeProcess
GetDriveTypeA
GetTimeFormatA
GetDateFormatA
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
IsDebuggerPresent
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LocalAlloc
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ