Static task
static1
Behavioral task
behavioral1
Sample
9f29d5e8d040a381481e5e8251356ce6cb13cbaa5ffe4580e136fd13d855b75d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9f29d5e8d040a381481e5e8251356ce6cb13cbaa5ffe4580e136fd13d855b75d.exe
Resource
win10v2004-20220812-en
General
-
Target
9f29d5e8d040a381481e5e8251356ce6cb13cbaa5ffe4580e136fd13d855b75d
-
Size
550KB
-
MD5
631357310350566f0f72dfbb607a1fed
-
SHA1
aee01cc0ddf14ff66e6f5b1ae56c8083b231bf0b
-
SHA256
9f29d5e8d040a381481e5e8251356ce6cb13cbaa5ffe4580e136fd13d855b75d
-
SHA512
cc3aef5365eaf5d1f208f8e28c18643f4463d7de7479c17a11159164f2819abce3545991eb36b5767649b45312058747045f261a3922478d59f909ff53186b6b
-
SSDEEP
12288:pMoDhCHjBMui0x9M0tCBlpUzueyH/lyZ7Vkvu4kvc:pMoDhAix0xxtWfUy3CCvRf
Malware Config
Signatures
Files
-
9f29d5e8d040a381481e5e8251356ce6cb13cbaa5ffe4580e136fd13d855b75d.exe windows x86
29c6f57bbb90f446ce65431f33b227be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_SetBkColor
CreatePropertySheetPageW
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetBkColor
ord17
ImageList_Create
ImageList_Destroy
ImageList_GetIconSize
InitializeFlatSB
ImageList_GetImageInfo
ImageList_DragEnter
FlatSB_EnableScrollBar
ImageList_Draw
ImageList_GetImageCount
ImageList_Add
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_EndDrag
ImageList_DrawEx
ImageList_Remove
ImageList_SetOverlayImage
ImageList_GetIcon
ImageList_LoadImageA
ImageList_DragShowNolock
user32
CharUpperA
LoadMenuW
GetKeyboardState
TranslateAcceleratorW
GetDC
GetWindowRect
ReleaseDC
SetWindowTextW
DrawEdge
RegisterWindowMessageW
GetCaretBlinkTime
EnableMenuItem
LockWindowUpdate
DeferWindowPos
SetScrollInfo
GetScrollInfo
UnregisterClassA
CheckDlgButton
GetFocus
DispatchMessageA
GetAsyncKeyState
InsertMenuA
GetPropA
DefWindowProcA
GetMenuCheckMarkDimensions
TrackPopupMenu
TranslateMDISysAccel
SystemParametersInfoW
LoadStringA
SetScrollPos
SetForegroundWindow
WindowFromPoint
RegisterClipboardFormatA
DrawFocusRect
ChildWindowFromPoint
GetNextDlgTabItem
SetDlgItemTextW
FlashWindow
SetTimer
EndDeferWindowPos
MapDialogRect
ClientToScreen
IsWindowVisible
CharNextA
GetWindowTextLengthA
GetForegroundWindow
SetWindowLongW
TranslateAcceleratorA
MessageBeep
GetMenuDefaultItem
CreateCaret
DrawTextA
GetMenuItemCount
UnregisterHotKey
ScreenToClient
LoadCursorA
RegisterHotKey
GetTopWindow
ChildWindowFromPointEx
CreateWindowExA
DestroyIcon
SetWindowsHookExA
DrawMenuBar
ValidateRect
GetWindowLongA
GetWindowTextA
IsWindowUnicode
mouse_event
BeginPaint
GetMenuStringA
GetKeyboardLayout
LoadBitmapA
RegisterWindowMessageA
DeleteMenu
DrawStateA
CreateWindowExW
FillRect
RemovePropA
SetPropW
IsZoomed
PostQuitMessage
UnhookWindowsHookEx
SetWindowPos
IsChild
RemoveMenu
DrawIcon
OemToCharBuffA
SetMenuItemInfoA
ToAsciiEx
DefDlgProcA
SetMenuItemBitmaps
ScrollWindowEx
ClipCursor
AttachThreadInput
CopyRect
IsIconic
GetKeyNameTextA
UpdateWindow
EqualRect
GetMenuItemID
LoadStringW
WinHelpW
InvalidateRgn
EmptyClipboard
CloseWindow
InvalidateRect
GetWindowPlacement
GetWindowTextW
OpenClipboard
GetMessageA
GetDlgCtrlID
MoveWindow
HideCaret
GetClassLongA
OffsetRect
UnregisterClassW
PostMessageA
CreateAcceleratorTableA
PtInRect
GetClassInfoW
GetClassLongW
IsWindowEnabled
WaitMessage
ShowOwnedPopups
TabbedTextOutA
GetUpdateRgn
MessageBoxA
GetMenuItemInfoA
CheckRadioButton
wsprintfW
ShowCaret
SetWindowPlacement
IsWindow
SetCapture
SetParent
LoadBitmapW
LoadIconA
CopyAcceleratorTableA
SendDlgItemMessageA
GetCapture
SetWindowContextHelpId
CallNextHookEx
SetDlgItemInt
TabbedTextOutW
DestroyMenu
CreateMenu
InflateRect
RedrawWindow
GetClientRect
MessageBoxW
ReleaseCapture
GetMessagePos
FindWindowA
GetWindowThreadProcessId
GetScrollPos
IntersectRect
CallWindowProcA
SetDlgItemTextA
GetClassInfoExW
GetParent
EnumChildWindows
DefFrameProcA
CloseClipboard
SetWindowRgn
GetNextDlgGroupItem
LoadMenuA
GetMessageTime
GetSystemMetrics
TrackPopupMenuEx
DefFrameProcW
GetClassInfoExA
SetMenuDefaultItem
EndPaint
TranslateMessage
CallWindowProcW
AdjustWindowRect
GetLastActivePopup
SetFocus
DestroyCursor
RegisterClassExA
RegisterClassA
DefWindowProcW
AdjustWindowRectEx
SetRectEmpty
CopyIcon
IsDialogMessageA
BringWindowToTop
SetCursorPos
SetWindowTextA
GetMenu
GetScrollRange
GetSysColor
CreateIconFromResourceEx
GetSubMenu
InsertMenuItemW
SetPropA
LoadCursorW
GetClassNameA
GetSystemMenu
DdeCreateStringHandleA
SetCursor
IsRectEmpty
AppendMenuA
GetClipboardData
PostThreadMessageA
GetDesktopWindow
CheckMenuItem
SystemParametersInfoA
ShowScrollBar
GetWindowDC
KillTimer
SetActiveWindow
IsMenu
SetRect
SetWindowLongA
GrayStringW
TrackMouseEvent
GetSysColorBrush
SendDlgItemMessageW
GrayStringA
BeginDeferWindowPos
WinHelpA
MapWindowPoints
DrawFrameControl
GetClassInfoA
GetKeyState
wsprintfA
SetWindowsHookExW
GetAncestor
GetDlgItem
DialogBoxParamA
SendMessageW
SendMessageTimeoutA
EnableWindow
SetClipboardData
GetCursorPos
GetActiveWindow
ShowWindow
CreatePopupMenu
wvsprintfA
DestroyWindow
PostMessageW
SetCaretPos
SendMessageA
kernel32
DeleteFileA
LeaveCriticalSection
GetVolumeInformationW
TlsFree
CreateFileW
GlobalFlags
GlobalUnlock
GetTickCount
HeapFree
WriteConsoleW
GetModuleFileNameW
GetDateFormatA
DuplicateHandle
GetFullPathNameW
WritePrivateProfileSectionA
FormatMessageA
UnhandledExceptionFilter
LocalReAlloc
lstrcpyA
FindResourceExA
FreeResource
HeapReAlloc
GetEnvironmentStringsW
lstrcmpiA
GetPrivateProfileStringA
GetCurrentThread
CreateEventW
GetSystemTimeAsFileTime
CreateFileA
GetVersion
lstrcmpW
GetLocalTime
TlsGetValue
TerminateThread
IsDebuggerPresent
GetCurrentThreadId
SizeofResource
GetConsoleCP
LoadResource
EnumSystemLocalesA
GetFileTime
FatalAppExitA
Sleep
ExitProcess
QueryPerformanceCounter
SystemTimeToFileTime
CreateEventA
LoadLibraryA
RtlUnwind
IsValidCodePage
FindFirstFileW
DebugBreak
FileTimeToLocalFileTime
InterlockedDecrement
FindResourceA
GetCommandLineA
UnmapViewOfFile
FormatMessageW
GlobalReAlloc
GetOverlappedResult
GetProcessVersion
SetPriorityClass
VirtualAlloc
lstrcmpA
TerminateProcess
GetSystemInfo
HeapSize
FileTimeToSystemTime
GlobalMemoryStatus
GetTimeFormatA
FlushFileBuffers
RemoveDirectoryW
VirtualQuery
SetEnvironmentVariableW
GetDriveTypeW
GetLocaleInfoW
FreeEnvironmentStringsA
SetEnvironmentVariableA
IsBadReadPtr
GlobalAlloc
HeapDestroy
GetFileAttributesA
WriteFile
GetConsoleOutputCP
OpenMutexA
GlobalFree
GetStringTypeW
WideCharToMultiByte
lstrlenW
GetTimeZoneInformation
lstrcpynW
AllocConsole
TlsSetValue
FindClose
GlobalGetAtomNameA
GetStdHandle
GetCurrentDirectoryA
ExpandEnvironmentStringsW
LCMapStringA
FindFirstFileA
InterlockedExchange
GetLogicalDriveStringsA
LockFile
IsBadWritePtr
SetLastError
SetCurrentDirectoryW
GetUserDefaultLCID
ResetEvent
InterlockedIncrement
GetCPInfo
CloseHandle
CreateSemaphoreA
LoadLibraryExW
OpenProcess
ResumeThread
InitializeCriticalSection
CreateDirectoryA
VirtualProtect
MulDiv
GetFileSize
GetFileType
HeapAlloc
CreateMutexW
GetModuleHandleW
MultiByteToWideChar
GetLastError
DeleteCriticalSection
SetUnhandledExceptionFilter
GetProcessHeap
GetCurrentProcessId
CopyFileW
CompareStringW
CopyFileA
CreateThread
GetEnvironmentVariableA
SetHandleCount
EnterCriticalSection
GetStartupInfoA
lstrcpynA
LCMapStringW
GetThreadPriority
GlobalGetAtomNameW
GetStartupInfoW
DeleteFileW
GetConsoleMode
TlsAlloc
SetThreadPriority
GetThreadLocale
ReadFile
GetOEMCP
LockResource
GetModuleHandleA
UnlockFile
LocalFileTimeToFileTime
GetFullPathNameA
GetEnvironmentStrings
IsValidLocale
GlobalLock
FreeEnvironmentStringsW
LoadLibraryExA
GetWindowsDirectoryA
HeapCreate
SetStdHandle
lstrcatW
VirtualFree
MoveFileA
GetVersionExA
WritePrivateProfileStringA
FindNextFileW
WaitForMultipleObjects
WriteConsoleA
SetEndOfFile
ExpandEnvironmentStringsA
CompareStringA
InterlockedCompareExchange
GlobalFindAtomA
CreateMutexA
GetProcAddress
LocalAlloc
GetStringTypeA
GetLocaleInfoA
FileTimeToDosDateTime
FreeLibrary
RaiseException
WinExec
SetErrorMode
lstrlenA
GetLongPathNameA
GetProfileIntW
GetCurrentProcess
GetComputerNameA
SetFilePointer
GetVersionExW
SetEvent
GetVolumeInformationA
GetPrivateProfileIntA
GetACP
GetSystemDirectoryA
LocalFree
GetTempFileNameW
GlobalAddAtomA
DosDateTimeToFileTime
GetModuleFileNameA
shlwapi
PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
PathAppendA
PathRemoveFileSpecA
PathIsUNCServerA
PathIsDirectoryA
PathCombineA
PathFileExistsA
PathIsRootA
PathStripPathA
PathIsUNCA
PathAddBackslashA
PathRemoveBackslashA
SHDeleteKeyA
PathGetDriveNumberA
PathQuoteSpacesA
PathUnquoteSpacesA
PathIsURLA
PathSkipRootA
PathRenameExtensionA
PathIsUNCServerShareA
PathStripToRootA
PathBuildRootA
wininet
InternetQueryDataAvailable
InternetOpenA
HttpOpenRequestA
InternetOpenUrlA
InternetWriteFile
HttpQueryInfoA
HttpAddRequestHeadersA
InternetCanonicalizeUrlA
DetectAutoProxyUrl
InternetGetLastResponseInfoW
InternetCloseHandle
InternetOpenW
HttpSendRequestW
InternetReadFile
FtpGetCurrentDirectoryA
InternetFindNextFileA
InternetGetConnectedState
InternetConnectA
FtpFindFirstFileA
HttpEndRequestA
InternetSetStatusCallback
InternetGetLastResponseInfoA
HttpOpenRequestW
InternetQueryOptionA
FtpCreateDirectoryA
HttpQueryInfoW
winspool.drv
GetPrinterA
AddPrinterA
OpenPrinterW
ClosePrinter
EnumPrintersA
AddPrinterDriverA
SetPrinterA
GetPrinterDriverA
DocumentPropertiesA
GetJobA
OpenPrinterA
EnumPrinterDriversA
GetPrinterDriverDirectoryA
DeviceCapabilitiesA
ord204
gdi32
TextOutA
GetStockObject
SetROP2
GetRegionData
GetViewportExtEx
StartPage
CreateHalftonePalette
SetPaletteEntries
PolyPolyline
CopyMetaFileA
EndPage
GetBkColor
Arc
GetMapMode
GetTextExtentPointA
RoundRect
CreateDIBSection
CreateFontA
ExtTextOutA
OffsetRgn
StrokePath
GetObjectType
DeleteObject
CreateDCA
GetTextMetricsA
SetTextCharacterExtra
SelectPalette
MoveToEx
SetTextColor
GetGlyphOutlineA
GetPixel
DrawEscape
GetMiterLimit
GetEnhMetaFilePaletteEntries
LPtoDP
Chord
Polyline
GetObjectA
SetStretchBltMode
CreateBitmap
SetTextJustification
WidenPath
GetWindowExtEx
GetPolyFillMode
SelectObject
CombineRgn
OffsetClipRgn
SetViewportExtEx
EndDoc
CreateEnhMetaFileA
StretchDIBits
GetROP2
CreateDCW
GetNearestColor
RestoreDC
GetKerningPairsA
GetDCOrgEx
OffsetViewportOrgEx
Pie
RectVisible
TranslateCharsetInfo
GetCurrentObject
FloodFill
DPtoLP
LineTo
SetPixel
SetAbortProc
ScaleWindowExtEx
CreateBrushIndirect
CreatePalette
GetBrushOrgEx
BitBlt
StrokeAndFillPath
GetDIBits
Escape
GetWindowOrgEx
StretchBlt
GetTextExtentPoint32A
AngleArc
GetCharWidthFloatA
GetTextAlign
SetBkColor
GetTextMetricsW
GetTextColor
SetWorldTransform
GetTextCharacterExtra
GetCharWidthA
FillPath
GetCharABCWidthsW
FillRgn
TextOutW
ExcludeClipRect
GetCharABCWidthsFloatA
CreateBitmapIndirect
CreateRectRgnIndirect
GetViewportOrgEx
GetBkMode
PlayMetaFile
GetBoundsRect
SetGraphicsMode
EnumFontFamiliesExA
ExtCreateRegion
GetClipRgn
GetClipBox
CloseEnhMetaFile
PtVisible
GetTextFaceW
DeleteDC
GetObjectW
RealizePalette
EnumObjects
SetMiterLimit
EnumFontFamiliesA
CreateFontW
GetSystemPaletteEntries
SelectClipRgn
StartDocW
SetBkMode
CreateEllipticRgn
GetTextFaceA
GetEnhMetaFileW
CreatePolygonRgn
PatBlt
SetWindowExtEx
ExtFloodFill
Polygon
SetDIBColorTable
SetPolyFillMode
SetWindowOrgEx
EnumFontFamiliesExW
CreateRoundRectRgn
GetArcDirection
CreateFontIndirectW
GetAspectRatioFilterEx
SetBitmapBits
SetRectRgn
BeginPath
CreatePolyPolygonRgn
GetTextCharsetInfo
PolylineTo
ExtSelectClipRgn
SetDIBitsToDevice
EqualRgn
FrameRgn
SaveDC
CreateFontIndirectA
CreateMetaFileA
ExtCreatePen
CreateEllipticRgnIndirect
SetBoundsRect
PlgBlt
GetPaletteEntries
ResizePalette
CreateICA
GetFontData
Ellipse
ScaleViewportExtEx
CreatePen
AnimatePalette
SetViewportOrgEx
GetTextExtentPoint32W
CloseMetaFile
GdiComment
GetCurrentPositionEx
PtInRegion
SetTextAlign
GetColorAdjustment
UnrealizeObject
SetBrushOrgEx
CreateCompatibleBitmap
GetNearestPaletteIndex
CreateDIBitmap
PaintRgn
CreatePenIndirect
StartDocA
CreateHatchBrush
GetDeviceCaps
IntersectClipRect
Rectangle
SetArcDirection
PolyBezierTo
GetCharWidthW
ExtTextOutW
CreateDiscardableBitmap
CreateCompatibleDC
SetMapMode
GetRgnBox
GetStretchBltMode
PlayEnhMetaFile
GdiFlush
CreateRectRgn
AbortPath
CreateSolidBrush
ExtEscape
EndPath
DeleteEnhMetaFile
CreatePatternBrush
shell32
ord155
SHGetFileInfoW
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryPoint
ShellExecuteA
ExtractIconExA
DragQueryFileA
ShellExecuteExW
DragQueryFileW
ShellExecuteExA
DragAcceptFiles
ShellExecuteW
DragFinish
ExtractIconA
SHGetMalloc
SHGetFolderPathA
SHGetFileInfoA
advapi32
AdjustTokenPrivileges
RegOpenKeyW
RegDeleteValueA
SetFileSecurityA
QueryServiceStatus
DeleteService
InitializeSecurityDescriptor
RegEnumValueA
EqualSid
RegDeleteValueW
SetSecurityDescriptorGroup
RegDeleteKeyW
GetLengthSid
RegOpenKeyExA
IsValidSecurityDescriptor
RegEnumKeyExW
GetAclInformation
OpenProcessToken
GetSidSubAuthorityCount
GetUserNameA
GetUserNameW
RegCreateKeyA
OpenThreadToken
CreateProcessAsUserA
FreeSid
RegQueryValueExA
ReportEventA
QueryServiceConfigA
GetFileSecurityA
OpenSCManagerA
RegSetValueA
AllocateAndInitializeSid
RegSetValueExW
CopySid
RegCloseKey
StartServiceA
RegDeleteKeyA
SetSecurityDescriptorDacl
CloseServiceHandle
RegOpenKeyExW
SetSecurityDescriptorOwner
RegEnumKeyA
RegQueryValueW
RegCreateKeyExA
RegQueryValueExW
AddAccessAllowedAce
GetSidIdentifierAuthority
LookupPrivilegeValueW
InitializeAcl
GetAce
OpenServiceA
SetEntriesInAclW
RegOpenKeyA
SetServiceStatus
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExW
ChangeServiceConfigA
GetTokenInformation
CreateServiceA
RegQueryValueA
RegisterServiceCtrlHandlerA
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ