Static task
static1
Behavioral task
behavioral1
Sample
2326ea14587ea5ef5f15844c48f2ca6bd2a9133a4b414c92dd8549e9065dff09.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2326ea14587ea5ef5f15844c48f2ca6bd2a9133a4b414c92dd8549e9065dff09.exe
Resource
win10v2004-20220812-en
General
-
Target
2326ea14587ea5ef5f15844c48f2ca6bd2a9133a4b414c92dd8549e9065dff09
-
Size
324KB
-
MD5
587b1b3ddf1bba08655d3d97f0523ba0
-
SHA1
aaa50c9a2b4269bf257f999de8dad92f16a1ee1d
-
SHA256
2326ea14587ea5ef5f15844c48f2ca6bd2a9133a4b414c92dd8549e9065dff09
-
SHA512
83993ba583f937bf5c6aadcbef7b37241ea6933046ff804ff3a41136318d6f41928c863350323d8f129ac5dd4a8a68a0f7040aaaf3343679953a54cac4538a72
-
SSDEEP
6144:/3IxksjJAFWIryeoI3RC8CSDflQILDm58vf1E3XgNzrgQIMq5sp9pTG7oeZ+NarH:/3zswyexRbDdpE8
Malware Config
Signatures
Files
-
2326ea14587ea5ef5f15844c48f2ca6bd2a9133a4b414c92dd8549e9065dff09.exe windows x86
22b6e0d98e96f5a06c962952cb26d036
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsUNCA
PathFindExtensionA
PathRemoveExtensionA
StrToIntExW
PathStripToRootA
StrStrA
PathFileExistsA
PathRemoveFileSpecA
StrToInt64ExW
PathCompactPathA
SHDeleteKeyW
StrToIntA
PathUnquoteSpacesA
PathAppendA
PathIsDirectoryA
SHDeleteKeyA
StrToIntW
PathFindFileNameA
winspool.drv
EndPagePrinter
GetPrinterA
ClosePrinter
DocumentPropertiesA
ord204
StartPagePrinter
EnumPrintersA
GetJobA
DeviceCapabilitiesA
OpenPrinterA
advapi32
GetAce
CloseServiceHandle
CopySid
RegSetValueExA
AdjustTokenPrivileges
OpenProcessToken
GetSidSubAuthority
ControlService
RegEnumKeyA
OpenSCManagerW
RegCreateKeyExW
RegEnumKeyW
AllocateAndInitializeSid
GetSidIdentifierAuthority
RegOpenKeyA
GetLengthSid
RegQueryInfoKeyW
RegCreateKeyExA
GetFileSecurityA
RegSetValueA
RegDeleteKeyA
RegOpenCurrentUser
RegOpenKeyExA
RegCloseKey
RegSetValueExW
RegDeleteValueA
RegOpenKeyExW
OpenServiceA
RegEnumKeyExW
SetServiceStatus
DeleteService
RegEnumKeyExA
RegQueryValueExA
RegDeleteValueW
RegSetKeySecurity
EqualSid
RegConnectRegistryA
SetFileSecurityW
MapGenericMask
GetTokenInformation
SetSecurityDescriptorOwner
GetUserNameA
AddAccessAllowedAce
QueryServiceStatus
InitiateSystemShutdownA
LookupPrivilegeValueA
RegEnumValueA
DuplicateTokenEx
RegQueryInfoKeyA
CreateProcessAsUserA
InitializeSecurityDescriptor
RegDeleteKeyW
SetFileSecurityA
SetSecurityDescriptorDacl
RegCreateKeyA
StartServiceA
OpenServiceW
RegQueryValueA
SetSecurityDescriptorGroup
OpenSCManagerA
FreeSid
RegGetKeySecurity
comctl32
PropertySheetA
ImageList_LoadImageA
ImageList_SetBkColor
ImageList_Replace
ImageList_EndDrag
ImageList_Remove
ImageList_Read
ImageList_DragShowNolock
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_DragMove
InitCommonControlsEx
ImageList_Add
ImageList_Duplicate
ord17
ImageList_Write
ImageList_GetIconSize
ImageList_Create
ImageList_GetImageCount
ImageList_DragEnter
DestroyPropertySheetPage
ImageList_SetDragCursorImage
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_SetOverlayImage
ImageList_DragLeave
ImageList_GetBkColor
ImageList_GetIcon
ImageList_Draw
ImageList_DrawEx
ImageList_BeginDrag
CreatePropertySheetPageA
kernel32
ResumeThread
SetUnhandledExceptionFilter
InitializeCriticalSection
GetPriorityClass
TerminateProcess
FindFirstFileW
GlobalHandle
IsValidCodePage
GetLongPathNameA
TlsGetValue
GetLocaleInfoA
LockFile
GetVersion
GetShortPathNameW
GetStdHandle
UnhandledExceptionFilter
CreateFileA
FormatMessageA
GetPrivateProfileIntA
GetVolumeInformationA
CreateProcessW
ExitProcess
HeapDestroy
SetStdHandle
GetModuleFileNameA
GetCommandLineW
CreatePipe
GlobalAlloc
GetProcAddress
GetSystemTime
SetThreadContext
MultiByteToWideChar
WriteConsoleW
LeaveCriticalSection
GetCurrentProcessId
EnterCriticalSection
GetStringTypeA
WriteConsoleA
ConvertDefaultLocale
WriteFile
FlushFileBuffers
GetFileAttributesA
GetUserDefaultUILanguage
GlobalDeleteAtom
GetACP
LocalReAlloc
DeleteCriticalSection
SetEndOfFile
CreateEventA
GetProfileStringA
lstrlenW
TlsAlloc
WriteProfileStringA
GetCurrentThreadId
SetLastError
UnmapViewOfFile
FreeEnvironmentStringsA
GetUserDefaultLCID
LoadResource
SetThreadPriority
FileTimeToLocalFileTime
LCMapStringA
GlobalLock
GetProcessVersion
GlobalUnlock
GetCurrentThread
lstrcatA
GetFileType
_llseek
FatalAppExitA
SetErrorMode
GlobalFindAtomA
LoadLibraryA
WritePrivateProfileStringA
GetTickCount
GlobalReAlloc
GetConsoleOutputCP
RtlUnwind
GetStartupInfoW
DuplicateHandle
GetTimeZoneInformation
IsBadReadPtr
GetCommandLineA
lstrlenA
LockResource
InterlockedDecrement
GetTempFileNameW
ReadFile
FreeEnvironmentStringsW
LocalAlloc
GetVersionExA
WaitForSingleObject
GlobalFindAtomW
LCMapStringW
GetCurrentProcess
CompareStringA
RaiseException
FileTimeToSystemTime
VirtualFree
CreateEventW
GetLastError
CloseHandle
HeapCreate
CreateProcessA
VirtualAlloc
GetModuleHandleA
MulDiv
TlsFree
HeapFree
SetFilePointer
CreateSemaphoreA
lstrcpynW
GetSystemInfo
SetCurrentDirectoryA
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetFileSize
GetWindowsDirectoryA
SizeofResource
DeleteFileA
GetFileTime
IsBadWritePtr
QueryPerformanceCounter
CreateDirectoryW
FreeLibrary
WideCharToMultiByte
GetModuleFileNameW
SetEnvironmentVariableA
InterlockedExchange
SetFileAttributesA
GetProcessHeap
CompareStringW
VirtualQuery
InterlockedIncrement
GlobalFlags
UnlockFile
GetLocalTime
GlobalFree
CreateMutexA
GetEnvironmentStrings
lstrcpyA
Process32Next
GetStartupInfoA
HeapAlloc
GetDriveTypeA
GetEnvironmentStringsW
Sleep
LocalFree
GetStringTypeW
TlsSetValue
GetThreadLocale
GetCPInfo
WinExec
SetEvent
OpenMutexA
GetConsoleCP
HeapReAlloc
SetHandleCount
GetLocaleInfoW
MoveFileA
GetPrivateProfileStringA
winmm
waveInStop
waveInPrepareHeader
waveInGetDevCapsA
waveInOpen
waveInUnprepareHeader
timeKillEvent
mmioOpenA
timeSetEvent
sndPlaySoundA
PlaySoundA
mixerSetControlDetails
waveInAddBuffer
waveInStart
waveOutPause
timeBeginPeriod
waveInClose
waveOutReset
mmioClose
waveInReset
waveInGetNumDevs
timeGetTime
mixerGetControlDetailsA
waveOutGetDevCapsA
mixerGetLineInfoA
mixerGetLineControlsA
mixerClose
mciGetDeviceIDA
waveOutWrite
timeEndPeriod
mixerOpen
waveOutPrepareHeader
waveOutUnprepareHeader
mciSendStringA
ole32
StgCreateDocfile
CoSetProxyBlanket
OleLockRunning
SetConvertStg
OleRun
WriteClassStg
CreateOleAdviseHolder
OleCreateLinkFromData
CoCreateGuid
OleTranslateAccelerator
CoGetClassObject
WriteFmtUserTypeStg
GetClassFile
OleIsRunning
CLSIDFromString
CreateILockBytesOnHGlobal
CoRegisterClassObject
CLSIDFromProgID
CoFreeUnusedLibraries
OleSetContainedObject
CoDisconnectObject
RevokeDragDrop
CreateFileMoniker
CoUninitialize
OleSave
OleCreateFromData
CoQueryProxyBlanket
OleFlushClipboard
OleRegEnumVerbs
CoTaskMemAlloc
ReadFmtUserTypeStg
OleCreate
OleUninitialize
OleSaveToStream
CoRevokeClassObject
RegisterDragDrop
CreateStreamOnHGlobal
StgIsStorageILockBytes
IsAccelerator
CoRegisterMessageFilter
OleDestroyMenuDescriptor
CoInitialize
OleCreateStaticFromData
OleInitialize
GetHGlobalFromILockBytes
StringFromCLSID
OleCreateLinkToFile
StgOpenStorageOnILockBytes
StgOpenStorage
CoCreateInstance
OleRegGetMiscStatus
ReadClassStg
CoLockObjectExternal
CreateDataAdviseHolder
DoDragDrop
OleGetClipboard
CoTaskMemFree
OleSetClipboard
StgIsStorageFile
StgCreateDocfileOnILockBytes
OleCreateFromFile
OleDuplicateData
CoInitializeSecurity
OleGetIconOfClass
CoInitializeEx
OleSetMenuDescriptor
OleCreateMenuDescriptor
OleIsCurrentClipboard
ReleaseStgMedium
user32
GetMenuItemInfoW
PostMessageA
CreateIconIndirect
IsWindowVisible
SetTimer
DestroyAcceleratorTable
GetSysColorBrush
GetMessageA
IsWindow
InSendMessage
CopyRect
DrawFocusRect
IsMenu
FrameRect
ExcludeUpdateRgn
SystemParametersInfoA
IntersectRect
GetDlgItemInt
DeferWindowPos
GetWindowLongA
ScreenToClient
DrawStateW
GetMenuStringA
ShowWindow
BringWindowToTop
HideCaret
GetWindowThreadProcessId
SetLayeredWindowAttributes
SetScrollRange
RemovePropA
DrawMenuBar
CharNextA
GetDlgItem
SetMenuDefaultItem
CharUpperA
SetWindowTextA
TranslateAcceleratorA
GetClassLongA
IsChild
IsZoomed
SendMessageTimeoutA
CallWindowProcA
CreateWindowExA
SetClipboardData
GetSubMenu
GetMessageW
GetCapture
GetClipboardData
OpenIcon
InvalidateRect
WaitMessage
DrawStateA
SetMenu
TranslateAcceleratorW
DestroyCursor
SetWindowLongA
IsClipboardFormatAvailable
DrawTextExW
GetWindow
SendMessageA
SetForegroundWindow
GetWindowLongW
ReleaseCapture
GetMenuState
GetDC
DrawTextW
DialogBoxParamA
GetKeyState
GetActiveWindow
DefWindowProcW
CallNextHookEx
TabbedTextOutW
RegisterClassExA
GetScrollRange
GetMenuStringW
PtInRect
TrackPopupMenu
GetUpdateRect
UnhookWindowsHookEx
CopyAcceleratorTableW
GetSysColor
InvalidateRgn
GetMenuItemInfoA
AdjustWindowRectEx
GetScrollPos
CharUpperW
IsWindowEnabled
SetRect
MapDialogRect
SetParent
LoadBitmapA
SendMessageW
GetClassInfoA
RegisterClipboardFormatA
LoadImageW
CreateMenu
SetMenuItemBitmaps
SetDlgItemTextW
BeginDeferWindowPos
GetClassLongW
GetSystemMenu
GetMessagePos
RegisterWindowMessageA
GetKeyboardLayout
GetClientRect
GrayStringA
SetScrollInfo
PostMessageW
CharUpperBuffA
CharLowerW
DialogBoxIndirectParamW
DrawFrameControl
GetMenu
TranslateMessage
SetActiveWindow
GetWindowRect
DrawTextExA
UnregisterClassA
GetMenuCheckMarkDimensions
TabbedTextOutA
LoadStringW
GetNextDlgGroupItem
GrayStringW
GetWindowPlacement
CheckMenuItem
GetScrollInfo
FindWindowA
ShowCaret
OffsetRect
GetMenuItemCount
SetCapture
WinHelpA
GetClassInfoW
OpenClipboard
SendDlgItemMessageA
SendDlgItemMessageW
ExitWindowsEx
DrawIcon
PostQuitMessage
SetWindowsHookExA
MapWindowPoints
SetWindowPos
DefWindowProcA
EmptyClipboard
SetDlgItemTextA
SetWindowRgn
InflateRect
EndPaint
GetDialogBaseUnits
MessageBoxA
ReleaseDC
SetScrollPos
GetDlgItemTextA
EndDialog
DrawTextA
IsDialogMessageA
LoadStringA
CreateWindowExW
ScrollWindow
GetDoubleClickTime
LoadAcceleratorsW
CharLowerBuffA
RegisterClassA
MessageBoxW
CallWindowProcW
PeekMessageW
SetWindowContextHelpId
MessageBeep
GetDesktopWindow
CheckDlgButton
UnpackDDElParam
GetForegroundWindow
GetDlgCtrlID
wsprintfA
ClientToScreen
InvertRect
IsIconic
UpdateWindow
DestroyMenu
DrawEdge
LoadImageA
ShowScrollBar
WindowFromPoint
GetWindowDC
LoadAcceleratorsA
EnableScrollBar
WinHelpW
GetAsyncKeyState
EnableMenuItem
RegisterClassW
GetUpdateRgn
PeekMessageA
GetWindowTextLengthA
SetPropA
wsprintfW
SetFocus
MoveWindow
ChildWindowFromPoint
ChangeClipboardChain
IsWindowUnicode
CreateCaret
GetLastActivePopup
EnableWindow
TrackPopupMenuEx
KillTimer
SetCursor
CopyAcceleratorTableA
CloseClipboard
DeleteMenu
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
BeginPaint
GetTopWindow
DispatchMessageA
GetWindowTextA
GetMenuItemID
ModifyMenuA
SetWindowPlacement
ModifyMenuW
FillRect
LoadCursorA
RemoveMenu
IsRectEmpty
DispatchMessageW
GetDCEx
GetClassInfoExW
EndDeferWindowPos
GetMessageTime
GetCursorPos
SetRectEmpty
LoadIconA
RegisterClipboardFormatW
GetParent
SetWindowLongW
DefDlgProcA
IsDlgButtonChecked
DialogBoxParamW
GetClassNameA
GetFocus
SetWindowTextW
ValidateRect
LoadIconW
CreateAcceleratorTableW
comdlg32
GetFileTitleA
ChooseFontA
PrintDlgA
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
CommDlgExtendedError
ChooseColorW
FindTextA
shell32
ShellExecuteExA
SHEmptyRecycleBinA
SHGetSpecialFolderPathW
SHFileOperationA
ord155
SHGetFileInfoA
ExtractIconExA
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetFolderPathW
Shell_NotifyIconA
ShellExecuteA
SHGetMalloc
DragAcceptFiles
DragQueryFileA
SHGetSpecialFolderLocation
ShellExecuteW
SHBrowseForFolderA
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ