Static task
static1
Behavioral task
behavioral1
Sample
ad29f9a11d7dd255fb91d5377d8f8fd37ccf0403f16931e5d541794afcc0e8ed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad29f9a11d7dd255fb91d5377d8f8fd37ccf0403f16931e5d541794afcc0e8ed.exe
Resource
win10v2004-20220812-en
General
-
Target
ad29f9a11d7dd255fb91d5377d8f8fd37ccf0403f16931e5d541794afcc0e8ed
-
Size
460KB
-
MD5
5fbfe357d63b92d0cd364483b23f5254
-
SHA1
e50519fb07f00686634c23968f2bcf122135beb3
-
SHA256
ad29f9a11d7dd255fb91d5377d8f8fd37ccf0403f16931e5d541794afcc0e8ed
-
SHA512
a102037e230b0c2c9bfa111fa8fd1e0c5d9d96eed978040256b0ca636bbf0a719f9433b34eab8cbe1933b9a588da6e13a6cbf2ed78f7ad59b48d29b7483acde9
-
SSDEEP
12288:Z9sRhn2fYwdRNlIgXHZPcS4FZTJnYgbSgUmVnIfVboD:vsHStlrXHZPz0ZTJnYguTm12V
Malware Config
Signatures
Files
-
ad29f9a11d7dd255fb91d5377d8f8fd37ccf0403f16931e5d541794afcc0e8ed.exe windows x86
fc9bf8da06031f74ee4e61c3f6647ee5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
GetOEMCP
TerminateThread
MultiByteToWideChar
FreeEnvironmentStringsW
GetFileAttributesW
CreatePipe
SizeofResource
FileTimeToSystemTime
CreateThread
SetFileTime
FindClose
CloseHandle
GetVersionExW
FormatMessageA
GlobalDeleteAtom
GetModuleFileNameA
GetThreadLocale
HeapReAlloc
GetTempFileNameW
lstrcmpA
GetConsoleOutputCP
GetFileAttributesA
VirtualAlloc
ExitProcess
IsBadWritePtr
ReleaseMutex
GlobalFindAtomW
HeapDestroy
FileTimeToDosDateTime
GetCurrentProcessId
GetWindowsDirectoryA
lstrcmpiA
DeleteFileW
SetFilePointer
lstrlenA
DebugBreak
VirtualQuery
UnmapViewOfFile
GetStartupInfoA
OutputDebugStringA
ExitThread
GetPrivateProfileIntA
lstrcatW
IsBadCodePtr
GetLastError
FindResourceA
TlsFree
GetModuleHandleW
OpenMutexA
IsDebuggerPresent
Sleep
TerminateProcess
DeleteCriticalSection
GetCurrentThreadId
IsValidLocale
GetEnvironmentStringsW
GetFileSize
InitializeCriticalSection
lstrcatA
GetOverlappedResult
GetModuleHandleA
GetCPInfo
WritePrivateProfileStringW
GetExitCodeThread
FindResourceExA
GetCommandLineA
EnterCriticalSection
ReadFile
GetCurrentProcess
LeaveCriticalSection
CreateMutexW
ResetEvent
OpenProcess
TlsGetValue
WaitForSingleObject
GetFileTime
FreeEnvironmentStringsA
lstrlenW
MulDiv
GetProfileIntA
GetVersion
GetComputerNameW
GetShortPathNameA
InitializeCriticalSectionAndSpinCount
SetEndOfFile
CreateFileA
WriteConsoleW
GetConsoleMode
LoadLibraryW
WriteConsoleA
CreateProcessW
GetVersionExA
InterlockedExchange
VirtualFree
lstrcpyA
GetProcessHeap
SuspendThread
GetLocalTime
LoadLibraryExA
QueryPerformanceCounter
GetLocaleInfoA
GlobalFree
OpenThread
GetCurrentThread
InterlockedDecrement
FileTimeToLocalFileTime
WritePrivateProfileStringA
EnumResourceLanguagesW
GlobalHandle
HeapSize
FlushInstructionCache
LocalAlloc
CreateSemaphoreW
HeapValidate
GetEnvironmentStrings
LockResource
GetTempFileNameA
DeleteFileA
GetPrivateProfileStringA
GetStartupInfoW
HeapFree
GetStringTypeExA
GlobalFindAtomA
GetFullPathNameW
GetProcAddress
GetDateFormatA
FindFirstFileW
GetSystemTime
GetVolumeInformationA
CreateDirectoryA
WideCharToMultiByte
VirtualProtect
EnumResourceLanguagesA
FlushFileBuffers
GetModuleFileNameW
CompareStringA
FormatMessageW
LCMapStringW
DuplicateHandle
LoadResource
GetACP
RtlUnwind
GetConsoleCP
GetTimeZoneInformation
EnumSystemLocalesA
CreateMutexA
TlsAlloc
LCMapStringA
SetHandleCount
RaiseException
GetSystemInfo
SetErrorMode
GlobalUnlock
GetStdHandle
lstrcpynA
GetUserDefaultLCID
UnhandledExceptionFilter
SetEnvironmentVariableA
InterlockedIncrement
FreeLibrary
GetTickCount
SetConsoleCtrlHandler
WritePrivateProfileSectionA
IsValidCodePage
HeapCreate
lstrcmpW
GetDriveTypeA
LocalFree
WriteFile
GlobalAddAtomA
GlobalLock
GlobalGetAtomNameA
GetSystemTimeAsFileTime
lstrcpyW
lstrcmpiW
SetLastError
HeapAlloc
OpenFileMappingW
GlobalFlags
GetTimeFormatA
GetStringTypeA
GlobalSize
CopyFileA
ReleaseSemaphore
GetSystemDirectoryA
InterlockedCompareExchange
OutputDebugStringW
SetEvent
GetLocaleInfoW
GetFileType
LoadLibraryA
GetFullPathNameA
CompareStringW
SetFileAttributesW
SetStdHandle
GetUserDefaultLangID
TlsSetValue
SystemTimeToFileTime
FreeResource
GetStringTypeW
SetUnhandledExceptionFilter
FatalAppExitA
comdlg32
CommDlgExtendedError
GetSaveFileNameA
ChooseColorW
FindTextA
GetOpenFileNameA
ChooseFontA
ChooseColorA
PrintDlgA
GetFileTitleA
oleaut32
LoadTypeLi
winspool.drv
GetPrinterA
GetPrinterDriverDirectoryA
StartDocPrinterA
ord204
OpenPrinterA
EnumJobsA
EnumPrinterDriversA
DeviceCapabilitiesA
DocumentPropertiesA
ClosePrinter
EnumPrintersA
GetPrinterDriverA
AddPrinterA
AddPrinterDriverA
user32
DestroyWindow
DefFrameProcA
GetMenuStringA
SetPropA
LoadAcceleratorsA
GetDlgCtrlID
ShowCaret
DrawIcon
RegisterClipboardFormatA
ChildWindowFromPoint
RegisterHotKey
GetDialogBaseUnits
SetWindowTextA
GetForegroundWindow
GetMenuStringW
GetClipboardViewer
GetMessageTime
DrawTextA
LoadCursorA
SetWindowLongA
PostThreadMessageA
LockWindowUpdate
DrawMenuBar
PostMessageA
SetMenuDefaultItem
CopyIcon
GetDC
GetDlgItemTextA
SetDlgItemInt
WaitMessage
InvertRect
CharUpperA
FindWindowA
GetParent
TrackPopupMenuEx
GetScrollRange
RegisterClassA
LoadStringW
LoadStringA
TranslateMessage
IsDlgButtonChecked
GetMenuItemID
GetPropA
UnhookWindowsHookEx
PostMessageW
UnregisterHotKey
GetSysColorBrush
DestroyCursor
GetKeyboardLayoutList
GetMenuState
DrawStateW
CreateMenu
CreateDialogIndirectParamA
PostThreadMessageW
SetParent
CreateDialogIndirectParamW
InsertMenuItemW
MapDialogRect
ClientToScreen
GetKeyState
GetClassNameW
SetWindowPlacement
MessageBeep
IsWindowEnabled
DefMDIChildProcA
keybd_event
EnumWindows
CharNextA
GetNextDlgTabItem
FillRect
GetLastActivePopup
IsRectEmpty
OffsetRect
GrayStringA
IsClipboardFormatAvailable
SetForegroundWindow
DispatchMessageW
DeferWindowPos
CreateWindowExW
LoadMenuA
IsDialogMessageW
FrameRect
SetMenu
SetFocus
PtInRect
RemoveMenu
GetPropW
IsWindowVisible
SetWindowLongW
GetCapture
SetCaretPos
IsIconic
GetMenu
RegisterWindowMessageW
GetMenuItemCount
CopyAcceleratorTableA
PostQuitMessage
GetWindowPlacement
EndPaint
GetWindowTextLengthA
SetWindowsHookExA
GetSystemMetrics
SetClipboardData
AttachThreadInput
AdjustWindowRectEx
GetClassInfoW
wvsprintfA
IsWindowUnicode
BeginPaint
SetCursor
CharLowerW
ModifyMenuA
DdeCreateStringHandleA
MessageBoxA
GetActiveWindow
CallNextHookEx
GetMessagePos
GetSystemMenu
SendMessageA
OpenClipboard
WindowFromPoint
DestroyMenu
SystemParametersInfoW
GetClassInfoA
CreateCaret
LoadCursorW
TranslateAcceleratorW
GetCursor
MoveWindow
GetClassNameA
GetWindowTextLengthW
ShowScrollBar
IsZoomed
GetMessageA
SendDlgItemMessageW
RemovePropA
DrawFocusRect
AppendMenuA
ExcludeUpdateRgn
EqualRect
SetWindowsHookExW
DrawFrameControl
GetAsyncKeyState
GetWindowLongW
DispatchMessageA
DefDlgProcA
DialogBoxParamA
GetWindowDC
GetFocus
SetDlgItemTextA
ReuseDDElParam
TrackPopupMenu
SetScrollInfo
ReleaseCapture
KillTimer
CharUpperBuffA
CreateIconIndirect
WaitForInputIdle
TranslateAcceleratorA
UpdateWindow
MapWindowPoints
GetWindow
GetSysColor
OpenIcon
AppendMenuW
GetMenuItemInfoA
ValidateRect
GetClassLongA
DefWindowProcW
GetClipboardOwner
RegisterClassExW
GetDesktopWindow
GetCursorPos
ShowWindow
EndDialog
CheckMenuItem
GetMenuDefaultItem
GetMenuCheckMarkDimensions
ShowOwnedPopups
SetRectEmpty
RemovePropW
SetWindowPos
CreatePopupMenu
CallWindowProcA
WinHelpW
SetTimer
LoadIconA
DrawStateA
SendDlgItemMessageA
EnableMenuItem
DefWindowProcA
CallWindowProcW
ScrollWindow
GetScrollPos
FindWindowExA
UnionRect
DrawTextW
MessageBoxW
IsMenu
UnpackDDElParam
GetNextDlgGroupItem
InvalidateRect
EnableWindow
CreateWindowExA
LoadMenuW
EnumChildWindows
SystemParametersInfoA
DestroyIcon
IsWindow
SetCapture
GetClientRect
ScreenToClient
InflateRect
GetWindowLongA
IsChild
LoadBitmapA
DeleteMenu
GetScrollInfo
BringWindowToTop
RegisterClassW
CopyRect
IsDialogMessageA
InsertMenuItemA
EnableScrollBar
GetWindowRect
WinHelpA
GetDlgItem
DrawTextExW
CheckDlgButton
GetOpenClipboardWindow
RegisterClassExA
ClipCursor
UnregisterClassA
GetSubMenu
RegisterWindowMessageA
GetWindowThreadProcessId
GetTopWindow
PeekMessageA
TabbedTextOutA
SetRect
IntersectRect
GetWindowTextA
ReleaseDC
GetTabbedTextExtentA
advapi32
CryptHashData
AllocateAndInitializeSid
CryptCreateHash
CryptDestroyHash
FreeSid
GetLengthSid
CryptEncrypt
CryptDeriveKey
RegSetValueExA
RegConnectRegistryA
MapGenericMask
SetSecurityDescriptorGroup
OpenThreadToken
RegQueryValueA
RegOpenKeyA
SetSecurityDescriptorOwner
ImpersonateSelf
RegCreateKeyExW
RegQueryValueW
RegCreateKeyExA
GetFileSecurityA
SetFileSecurityA
ConvertSidToStringSidW
RegOpenKeyExW
RevertToSelf
ControlService
RegEnumValueW
StartServiceCtrlDispatcherA
RegEnumValueA
RegCloseKey
DeregisterEventSource
CloseServiceHandle
RegSetValueW
CopySid
DeleteService
StartServiceW
GetTokenInformation
OpenProcessToken
RegDeleteKeyA
RegQueryValueExA
AdjustTokenPrivileges
RegSetValueExW
RegEnumKeyA
StartServiceA
RegOpenKeyExA
InitializeSecurityDescriptor
RegDeleteValueW
OpenSCManagerA
RegEnumKeyW
CryptDecrypt
RegQueryValueExW
SetSecurityDescriptorDacl
CryptDestroyKey
RegOpenKeyW
LookupPrivilegeValueA
GetUserNameA
RegSetValueA
RegCreateKeyA
RegQueryInfoKeyA
InitializeAcl
RegDeleteKeyW
RegisterServiceCtrlHandlerA
mfc42
ord1576
comctl32
ImageList_GetIcon
ImageList_SetImageCount
DestroyPropertySheetPage
ImageList_SetOverlayImage
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Merge
ord17
ImageList_AddMasked
ImageList_EndDrag
CreatePropertySheetPageA
ImageList_Create
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_Remove
ImageList_DragLeave
ImageList_Draw
ImageList_DrawIndirect
ImageList_Duplicate
ImageList_Read
PropertySheetA
ImageList_Add
ImageList_Write
ImageList_GetIconSize
ImageList_SetBkColor
InitCommonControlsEx
ImageList_DragShowNolock
ImageList_GetImageInfo
ImageList_GetBkColor
ImageList_GetImageCount
_TrackMouseEvent
ImageList_DragEnter
ImageList_DrawEx
Sections
.text Size: 208KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ