Static task
static1
Behavioral task
behavioral1
Sample
eb0235fc74fe9a5cb4a4c7256eba0a5562664344a30fd38b62196b0e0c525507.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eb0235fc74fe9a5cb4a4c7256eba0a5562664344a30fd38b62196b0e0c525507.exe
Resource
win10v2004-20220812-en
General
-
Target
eb0235fc74fe9a5cb4a4c7256eba0a5562664344a30fd38b62196b0e0c525507
-
Size
658KB
-
MD5
45b2f979b67a75e5ff1211bb4f284354
-
SHA1
bbea6fd010f2a8af80c4e90d1ca7c9cc075bd0b5
-
SHA256
eb0235fc74fe9a5cb4a4c7256eba0a5562664344a30fd38b62196b0e0c525507
-
SHA512
52aaa01def9e226efce75faceccbe8ec36ed7ef6f1c720d35e8c62d986b87f267778b5bbf16b10358d4e1330315c91b278e8bafe2d7ab5e76973a952e9e5f863
-
SSDEEP
12288:c6R5ysZ6nJ9hoHRvEQ0SbX/MtLoWr69vxAfIiaqih4rhweHhhl28Zl1X4bUdj:usZS9m9ErSbXfWr69qQiaqih4r9HLlp9
Malware Config
Signatures
Files
-
eb0235fc74fe9a5cb4a4c7256eba0a5562664344a30fd38b62196b0e0c525507.exe windows x86
bf3d69aeac5bffd3a019bc77eb05101e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
OpenServiceA
RegEnumKeyA
GetSecurityDescriptorDacl
AddAccessAllowedAce
DeleteService
RegQueryValueExA
RegDeleteKeyA
SetSecurityDescriptorOwner
RegCreateKeyExW
SetSecurityDescriptorDacl
CloseServiceHandle
SetServiceStatus
OpenServiceW
GetFileSecurityA
RegCloseKey
RegOpenKeyExA
ControlService
SetSecurityDescriptorGroup
CryptHashData
InitializeAcl
AllocateAndInitializeSid
CreateServiceW
OpenSCManagerW
RegDeleteValueW
GetUserNameW
GetLengthSid
InitializeSecurityDescriptor
RegSetValueExW
CryptCreateHash
RegEnumValueW
RegisterEventSourceW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegisterEventSourceA
OpenSCManagerA
RegOpenKeyA
RegDeleteKeyW
OpenThreadToken
RegCreateKeyExA
RegCreateKeyA
GetTokenInformation
RegQueryValueExW
OpenProcessToken
RegEnumValueA
GetSecurityDescriptorControl
GetUserNameA
RegQueryInfoKeyA
DeregisterEventSource
RegisterServiceCtrlHandlerA
FreeSid
LookupPrivilegeValueW
SetFileSecurityA
AdjustTokenPrivileges
CreateServiceA
RegEnumKeyExA
RegQueryValueA
RegSetValueExA
ReportEventA
GetFileSecurityW
EqualSid
CryptDestroyHash
kernel32
SetFilePointer
FindFirstFileA
OutputDebugStringA
GetFileTime
lstrcmpA
DeleteFileA
RtlUnwind
HeapDestroy
VirtualLock
GetFileSize
VirtualProtect
GlobalSize
OpenProcess
IsDebuggerPresent
_llseek
GetUserDefaultLCID
GetDateFormatA
GetFileType
LockResource
WritePrivateProfileStringA
GetPrivateProfileStringA
InterlockedIncrement
lstrcpynA
GlobalReAlloc
FileTimeToSystemTime
LoadLibraryW
GetVolumeInformationA
AreFileApisANSI
FreeEnvironmentStringsW
LoadLibraryExA
LocalReAlloc
GetEnvironmentStringsW
GetCurrentThread
IsBadWritePtr
MapViewOfFile
GlobalUnlock
GetConsoleOutputCP
GetSystemInfo
ExitProcess
SetFileAttributesA
GlobalFlags
MulDiv
GetProcessVersion
IsBadReadPtr
GetLocaleInfoA
GetProcessHeap
GetConsoleCP
GetVersion
CopyFileA
HeapSize
GetThreadLocale
CreateMutexW
LCMapStringW
GetConsoleMode
SetLastError
WriteConsoleA
SetEndOfFile
UnhandledExceptionFilter
GetTempPathA
SystemTimeToFileTime
DebugBreak
FreeEnvironmentStringsA
SetEnvironmentVariableA
RaiseException
TerminateProcess
GlobalDeleteAtom
GlobalAlloc
GetShortPathNameA
CreateToolhelp32Snapshot
FreeLibrary
LoadLibraryA
GetCurrentProcessId
VirtualUnlock
GetCommandLineA
ReleaseMutex
FatalAppExitA
lstrcpyA
GetVersionExA
IsBadCodePtr
CompareStringA
WaitForMultipleObjects
LeaveCriticalSection
VirtualAlloc
_lclose
WaitForSingleObject
GetVolumeInformationW
OpenMutexA
SetConsoleCtrlHandler
VirtualQuery
CreateEventA
GetFullPathNameW
lstrcmpiA
SetErrorMode
GlobalFindAtomA
GetStdHandle
GetDiskFreeSpaceA
GetWindowsDirectoryA
GetModuleFileNameA
IsValidCodePage
GetModuleFileNameW
GetEnvironmentStrings
WideCharToMultiByte
CreateProcessA
GetFileAttributesA
lstrlenW
GetCurrentProcess
GetFileInformationByHandle
RemoveDirectoryA
DuplicateHandle
TlsGetValue
GetModuleHandleA
LoadResource
GetSystemTime
GetProcAddress
QueryPerformanceCounter
SetHandleCount
lstrcatA
SetCurrentDirectoryA
InterlockedExchange
SetEvent
FindResourceA
MoveFileA
GetStringTypeA
InterlockedDecrement
GlobalLock
WriteFile
GlobalAddAtomW
CompareStringW
SetUnhandledExceptionFilter
GetTickCount
GetLastError
CreateDirectoryA
CreateFileW
GetProfileStringA
GetSystemTimeAsFileTime
HeapValidate
GetPriorityClass
GetLocaleInfoW
UnlockFile
VirtualFreeEx
ReadProcessMemory
CreateFileA
WriteConsoleW
GetSystemDirectoryA
LockFile
Sleep
GetStringTypeW
LocalAlloc
HeapCreate
GetFullPathNameA
FlushFileBuffers
VirtualFree
TlsAlloc
SizeofResource
ResumeThread
lstrlenA
IsValidLocale
HeapReAlloc
LocalFree
DeleteCriticalSection
GlobalHandle
EnumResourceLanguagesA
EnterCriticalSection
UnmapViewOfFile
GetTimeZoneInformation
InitializeCriticalSection
GlobalFree
GlobalMemoryStatus
SuspendThread
LCMapStringA
GetModuleHandleW
CloseHandle
GetCurrentThreadId
LocalLock
EnumSystemLocalesA
TlsSetValue
lstrcmpW
ResetEvent
PeekNamedPipe
CreateMutexA
FindNextFileA
GetCPInfo
ReadFile
SetThreadPriority
GetTimeFormatA
GlobalGetAtomNameA
MultiByteToWideChar
OutputDebugStringW
CreateThread
FindClose
HeapFree
GetACP
GetCurrentDirectoryA
GetOEMCP
GetEnvironmentVariableA
GetStartupInfoA
SetStdHandle
GetWindowsDirectoryW
IsBadStringPtrA
HeapAlloc
TlsFree
lstrcpyW
GlobalAddAtomA
comctl32
ImageList_LoadImageA
CreateToolbarEx
ImageList_Remove
ImageList_ReplaceIcon
ImageList_AddMasked
CreatePropertySheetPageA
DestroyPropertySheetPage
ImageList_Write
ImageList_GetImageCount
ImageList_Read
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_BeginDrag
ImageList_SetBkColor
ImageList_SetImageCount
ImageList_DragEnter
ImageList_DragLeave
ImageList_Add
ImageList_Destroy
ImageList_DragMove
ord17
ImageList_SetOverlayImage
PropertySheetW
ImageList_Draw
CreateStatusWindowW
_TrackMouseEvent
InitCommonControlsEx
ImageList_DragShowNolock
PropertySheetA
ImageList_Replace
ImageList_Create
ImageList_GetIcon
ImageList_SetDragCursorImage
gdi32
SetViewportOrgEx
GetPixel
BitBlt
GetDIBits
GetObjectW
GetTextFaceA
PolyPolygon
StartDocA
CreateEnhMetaFileA
GetDCOrgEx
CreateSolidBrush
IntersectClipRect
CreateCompatibleDC
CreateRectRgnIndirect
EnumFontFamiliesExW
EndPage
SetROP2
FloodFill
Pie
SetPolyFillMode
GetBrushOrgEx
PolylineTo
GetTextCharsetInfo
GetTextExtentPointA
CreatePenIndirect
Ellipse
CreateRectRgn
GetCharABCWidthsFloatA
Escape
ExtTextOutA
WidenPath
SetMapMode
GetTextExtentPoint32A
Rectangle
GetClipBox
CreatePalette
GetGlyphOutlineA
PolyPolyline
GetCharWidthFloatA
PtInRegion
SetWindowOrgEx
StartPage
EnumFontFamiliesExA
EnumObjects
SetBitmapDimensionEx
TextOutW
GdiFlush
EnumFontFamiliesA
GetCharWidthW
SetAbortProc
RectVisible
OffsetViewportOrgEx
SetViewportExtEx
GetWindowExtEx
EndDoc
GetPolyFillMode
CreateEllipticRgnIndirect
GetNearestPaletteIndex
Polygon
Polyline
OffsetClipRgn
SetArcDirection
GetDeviceCaps
Arc
SetColorAdjustment
GetClipRgn
ExtCreatePen
CreateCompatibleBitmap
ExtCreateRegion
SetPixel
SetBkMode
GetSystemPaletteEntries
ScaleViewportExtEx
GetCharABCWidthsW
FillPath
ArcTo
SetGraphicsMode
SetBkColor
CreatePolyPolygonRgn
GetRegionData
GetWindowOrgEx
CreateDCA
PlayEnhMetaFile
RestoreDC
DrawEscape
SelectPalette
RoundRect
GetTextColor
SetDIBits
GetCharWidthA
SetWindowExtEx
SetStretchBltMode
GetTextExtentPoint32W
ExtFloodFill
StretchBlt
GetBoundsRect
OffsetWindowOrgEx
SetWinMetaFileBits
PlayMetaFile
PtVisible
StrokePath
GetFontData
EnumMetaFile
PathToRegion
StrokeAndFillPath
SetPixelV
PlgBlt
PatBlt
SetTextColor
PolyBezier
TextOutA
SaveDC
CreatePen
GdiComment
UnrealizeObject
FillRgn
CreateMetaFileA
GetCurrentPositionEx
CreateDIBSection
AngleArc
GetROP2
GetMiterLimit
RectInRegion
AbortDoc
GetTextMetricsW
GetPaletteEntries
CreateDIBPatternBrushPt
GetMapMode
SelectClipPath
ExcludeClipRect
GetBitmapDimensionEx
GetAspectRatioFilterEx
CreateDiscardableBitmap
MoveToEx
SetPaletteEntries
CreateHatchBrush
SetTextJustification
GetBitmapBits
CloseEnhMetaFile
CreateBitmap
ExtSelectClipRgn
GetTextExtentPointW
LineTo
SetRectRgn
LPtoDP
GetObjectA
GetColorAdjustment
GetStockObject
PlayMetaFileRecord
CloseMetaFile
ScaleWindowExtEx
CreateFontIndirectA
AnimatePalette
PolyDraw
SetMapperFlags
SetBoundsRect
PaintRgn
CreateEllipticRgn
SetTextCharacterExtra
CombineRgn
SetMiterLimit
DeleteObject
SelectObject
GetNearestColor
OffsetRgn
GetKerningPairsA
GetObjectType
GetViewportExtEx
FrameRgn
GetTextAlign
CreateBitmapIndirect
AbortPath
CreatePatternBrush
GetStretchBltMode
CreateDIBitmap
ExtTextOutW
RealizePalette
DPtoLP
SelectClipRgn
SetBrushOrgEx
CreateBrushIndirect
GetViewportOrgEx
CreateRoundRectRgn
MaskBlt
GetTextMetricsA
GetCurrentObject
SetTextAlign
DeleteDC
TranslateCharsetInfo
CloseFigure
GetBkColor
SetDIBitsToDevice
StretchDIBits
GetArcDirection
GetRgnBox
GetBkMode
GetTextFaceW
ole32
CreateOleAdviseHolder
OleIsRunning
CoCreateGuid
CoRegisterMessageFilter
ReadFmtUserTypeStg
StgOpenStorageOnILockBytes
StgCreateDocfile
OleFlushClipboard
CoLockObjectExternal
OleLockRunning
WriteClassStm
PropVariantClear
CreateFileMoniker
CoDisconnectObject
StringFromGUID2
OleInitialize
ReleaseStgMedium
GetRunningObjectTable
OleLoad
CoTaskMemFree
CreateDataAdviseHolder
StgIsStorageFile
ReadClassStg
StgIsStorageILockBytes
CoInitialize
WriteFmtUserTypeStg
OleTranslateAccelerator
CreateGenericComposite
OleDuplicateData
OleDestroyMenuDescriptor
StringFromCLSID
OleCreateStaticFromData
CoUnmarshalInterface
IsAccelerator
CoTaskMemAlloc
OleCreateFromData
CoGetMalloc
CoGetInterfaceAndReleaseStream
CoRevokeClassObject
OleUninitialize
CoSetProxyBlanket
CreateStreamOnHGlobal
CLSIDFromProgID
CreateILockBytesOnHGlobal
OleRun
CoCreateInstance
GetHGlobalFromILockBytes
RevokeDragDrop
SetConvertStg
CoRegisterClassObject
StgCreateDocfileOnILockBytes
CoInitializeSecurity
OleRegEnumVerbs
CreateBindCtx
GetClassFile
OleCreateMenuDescriptor
OleRegGetMiscStatus
RegisterDragDrop
StgOpenStorage
CoUninitialize
OleGetClipboard
CoInitializeEx
CoTreatAsClass
CoFreeUnusedLibraries
CoGetClassObject
CoTaskMemRealloc
WriteClassStg
DoDragDrop
OleSetContainedObject
CLSIDFromString
OleRegGetUserType
OleIsCurrentClipboard
user32
SetRect
CharUpperA
IsMenu
GetSysColorBrush
GetSysColor
SetWindowRgn
GetWindowTextLengthA
WinHelpW
ModifyMenuW
GetWindowLongW
GetMessageA
GetKeyState
GetDesktopWindow
DeferWindowPos
CreateWindowExA
SetClipboardViewer
GetWindowTextLengthW
SetMenuDefaultItem
DefWindowProcA
GetScrollInfo
TranslateMessage
AdjustWindowRectEx
LoadMenuW
RegisterClassA
SubtractRect
DrawIconEx
CharNextA
CreateIconIndirect
HideCaret
ShowCaret
ScrollWindow
GetMenu
ToAsciiEx
GetPropW
GetNextDlgGroupItem
TabbedTextOutA
GetClassNameA
AttachThreadInput
RegisterWindowMessageW
GetMenuStringA
GetDlgCtrlID
CreateWindowExW
IsCharLowerA
InflateRect
GetForegroundWindow
GetWindowDC
RedrawWindow
EndPaint
UnregisterClassW
SetTimer
DrawFocusRect
ScrollWindowEx
LoadBitmapA
CopyRect
FlashWindow
GetClassLongA
GetLastActivePopup
SetPropA
LoadCursorW
ExitWindowsEx
GetDlgItem
GetDoubleClickTime
CallWindowProcA
DestroyWindow
WindowFromPoint
SystemParametersInfoA
SetForegroundWindow
FrameRect
EndDialog
GetClientRect
DrawStateA
DrawIcon
DeleteMenu
DialogBoxParamA
SetClipboardData
LoadIconW
SetCapture
GetClipboardData
EnumChildWindows
RemoveMenu
GetIconInfo
GetMenuStringW
InvalidateRect
SetScrollInfo
wsprintfA
DrawTextA
OffsetRect
ShowWindow
SendDlgItemMessageA
CloseClipboard
LoadIconA
SetMenuItemBitmaps
RegisterWindowMessageA
IntersectRect
InsertMenuItemA
PeekMessageW
SetDlgItemTextA
IsWindowEnabled
GetScrollRange
ReleaseCapture
ScreenToClient
RemovePropA
DestroyMenu
GetMenuItemInfoA
IsWindow
ValidateRgn
SetWindowTextW
GetKeyboardState
InsertMenuA
RegisterClipboardFormatW
GetTabbedTextExtentA
GetMenuCheckMarkDimensions
GetMenuItemID
ReleaseDC
GetActiveWindow
GetMonitorInfoW
OpenClipboard
IsWindowVisible
IsChild
GetMessagePos
CreatePopupMenu
ReuseDDElParam
GetWindowTextW
GetMenuState
GetWindowLongA
MoveWindow
TrackPopupMenu
GetMessageW
SetRectEmpty
SetActiveWindow
ClientToScreen
GetWindowTextA
EmptyClipboard
SendDlgItemMessageW
GetMenuItemInfoW
GetDCEx
GetSystemMetrics
SystemParametersInfoW
CheckMenuItem
DefDlgProcA
DispatchMessageA
PostThreadMessageA
SetScrollPos
AppendMenuA
GetClassInfoA
GetKeyboardLayoutList
LoadImageA
SetWindowsHookExA
DragDetect
CopyIcon
RegisterClipboardFormatA
InsertMenuW
TranslateMDISysAccel
TranslateAcceleratorA
GetPropA
GetMenuItemCount
EnableWindow
LoadBitmapW
CopyAcceleratorTableA
PtInRect
IsIconic
ShowScrollBar
IsWindowUnicode
MapWindowPoints
IsDialogMessageA
SetPropW
RemovePropW
KillTimer
LoadStringW
ModifyMenuA
MessageBoxW
GetSubMenu
PeekMessageA
CallNextHookEx
LoadAcceleratorsA
CreateDialogIndirectParamA
GetCapture
GetMessageTime
GetClassInfoW
GetUpdateRect
IsClipboardFormatAvailable
GetDC
DefWindowProcW
MessageBeep
LoadMenuA
SetWindowTextA
CheckRadioButton
PostQuitMessage
UnhookWindowsHookEx
BeginPaint
MessageBoxA
GetClassInfoExA
DrawFrameControl
SetParent
GetCursorPos
GetSystemMenu
ExcludeUpdateRgn
SetFocus
LoadCursorA
UpdateWindow
AppendMenuW
CreateCaret
GetNextDlgTabItem
ValidateRect
EnableMenuItem
GrayStringA
LoadStringA
GetFocus
SetWindowLongW
SetWindowLongA
ClipCursor
PostMessageA
DispatchMessageW
ChildWindowFromPointEx
EqualRect
DestroyIcon
SetCursor
SetDlgItemInt
DrawTextExW
GetWindow
SendMessageA
GetDlgItemTextW
GetAsyncKeyState
SetWindowsHookExW
FillRect
FindWindowA
UnregisterClassA
GetWindowThreadProcessId
IsDlgButtonChecked
IsRectEmpty
SetMenu
RegisterClassExA
SetWindowPos
GetWindowRect
IsZoomed
MapDialogRect
LoadAcceleratorsW
GetTopWindow
GetKeyboardLayout
DrawMenuBar
GetWindowPlacement
CallWindowProcW
wsprintfW
PostThreadMessageW
Sections
.text Size: 222KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ