Static task
static1
Behavioral task
behavioral1
Sample
24ca1c5731998fd8204957c60e5b71ec37402e7e69aa4eee2ee1e68d75a3d001.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
24ca1c5731998fd8204957c60e5b71ec37402e7e69aa4eee2ee1e68d75a3d001.exe
Resource
win10v2004-20220812-en
General
-
Target
24ca1c5731998fd8204957c60e5b71ec37402e7e69aa4eee2ee1e68d75a3d001
-
Size
304KB
-
MD5
0af7bd02cf51ef2e8d19ac91b972ac8c
-
SHA1
e2efae230ba447f89d270f53291a3204586bbb5e
-
SHA256
24ca1c5731998fd8204957c60e5b71ec37402e7e69aa4eee2ee1e68d75a3d001
-
SHA512
284abb6c2a461304471b685c3f52dbcb67f53fdf9186eefed08422bde039f6eda4de8cb8c79c3fe3811f21473d48c9b85ed79b5c8bf5144adf06b5d793242a9f
-
SSDEEP
6144:j8iMKpdD24scCdEQpbAv55lkHqTbIkgKgcwWig:jh7JsVbbAhkKnIkgKjxi
Malware Config
Signatures
Files
-
24ca1c5731998fd8204957c60e5b71ec37402e7e69aa4eee2ee1e68d75a3d001.exe windows x86
a51a8d0b0ad52a153a88fec7283abeb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CreateFileMoniker
CreateGenericComposite
OleCreate
CLSIDFromProgID
OleCreateMenuDescriptor
CoSetProxyBlanket
OleGetClipboard
OleRegEnumVerbs
CoGetClassObject
StringFromGUID2
OleLockRunning
CoCreateInstance
OleLoad
CoRevokeClassObject
GetClassFile
StgIsStorageFile
CoTreatAsClass
CreateOleAdviseHolder
WriteClassStg
IsAccelerator
OleRun
OleCreateStaticFromData
OleUninitialize
DoDragDrop
CoCreateGuid
OleSaveToStream
OleFlushClipboard
WriteClassStm
CoDisconnectObject
OleSetMenuDescriptor
SetConvertStg
WriteFmtUserTypeStg
GetHGlobalFromILockBytes
CoRegisterClassObject
OleTranslateAccelerator
OleCreateFromData
OleCreateLinkToFile
CoFreeUnusedLibraries
OleIsCurrentClipboard
CoInitialize
OleCreateLinkFromData
OleInitialize
StringFromCLSID
CreateBindCtx
StgIsStorageILockBytes
OleSetClipboard
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
OleGetIconOfClass
OleCreateFromFile
RevokeDragDrop
ReadClassStg
OleDestroyMenuDescriptor
CoUninitialize
StgOpenStorageOnILockBytes
CLSIDFromString
OleRegGetMiscStatus
GetRunningObjectTable
OleSave
StgCreateDocfileOnILockBytes
ReleaseStgMedium
ReadFmtUserTypeStg
CoTaskMemFree
CoRegisterMessageFilter
OleRegGetUserType
RegisterDragDrop
CreateItemMoniker
CoLockObjectExternal
StgCreateDocfile
OleIsRunning
OleDuplicateData
StgOpenStorage
shell32
ShellExecuteA
DragAcceptFiles
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
ShellExecuteExA
SHFileOperationW
DragQueryFileW
DragQueryFileA
ExtractIconW
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ExtractIconExA
SHEmptyRecycleBinA
Shell_NotifyIconA
SHGetFileInfoA
SHGetFolderPathA
ord155
SHBrowseForFolderA
advapi32
GetSecurityDescriptorDacl
RegDeleteValueW
RegOpenKeyExA
RevertToSelf
RegOpenKeyA
AdjustTokenPrivileges
GetTokenInformation
RegCreateKeyExA
SetFileSecurityW
RegQueryValueA
CloseServiceHandle
OpenProcessToken
SetSecurityDescriptorGroup
RegSetValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
LookupAccountNameW
ReportEventA
SetSecurityDescriptorDacl
RegCloseKey
RegDeleteKeyW
GetAclInformation
ControlService
RegEnumKeyExA
RegEnumKeyA
EqualSid
LookupPrivilegeValueA
GetFileSecurityW
RegQueryValueExW
RegCreateKeyW
RegOpenKeyW
InitializeAcl
MapGenericMask
GetLengthSid
RegCreateKeyA
GetFileSecurityA
CreateProcessAsUserA
RegSetValueExW
RegisterEventSourceA
GetUserNameW
RegOpenKeyExW
RegQueryInfoKeyA
InitiateSystemShutdownA
OpenSCManagerA
OpenServiceA
AddAce
RegDeleteValueA
CopySid
RegEnumValueW
RegDeleteKeyA
CreateServiceW
RegQueryInfoKeyW
GetUserNameA
RegEnumKeyExW
DeregisterEventSource
RegQueryValueExA
DeleteService
OpenThreadToken
RegCreateKeyExW
StartServiceCtrlDispatcherA
RegEnumValueA
SetServiceStatus
kernel32
CreateFileW
ResumeThread
GetEnvironmentStrings
LoadLibraryExW
LocalLock
GetStartupInfoW
HeapDestroy
SetLastError
GetVolumeInformationW
GlobalGetAtomNameA
GetLastError
CreateThread
RaiseException
WritePrivateProfileStringA
GetVolumeInformationA
GetConsoleCP
CreateFileA
GetTimeFormatW
ExitThread
GetTempPathW
ResetEvent
UnhandledExceptionFilter
InterlockedCompareExchange
FreeEnvironmentStringsA
EnumSystemLocalesA
ExitProcess
GetCommandLineW
SetErrorMode
GetCurrentThread
VirtualProtect
InterlockedIncrement
lstrcpyA
GetTickCount
VirtualFree
DeleteFileA
EnterCriticalSection
GetFileTime
GlobalDeleteAtom
CopyFileW
FindNextFileW
HeapReAlloc
WriteFile
LocalFree
GetDateFormatA
FindResourceA
DeviceIoControl
lstrcmpW
GlobalAddAtomA
WideCharToMultiByte
GetACP
GetUserDefaultLangID
LoadLibraryA
lstrlenW
GetStringTypeExA
GetVersionExA
GetPrivateProfileIntA
GlobalReAlloc
GetCPInfo
IsDebuggerPresent
GetEnvironmentStringsW
GetTimeZoneInformation
IsBadCodePtr
GetFileType
GetCurrentDirectoryW
CompareStringW
SetEnvironmentVariableW
IsBadReadPtr
GetModuleHandleA
lstrcpynA
RtlUnwind
QueryPerformanceCounter
CreateDirectoryW
FlushFileBuffers
TlsFree
SizeofResource
lstrlenA
FindClose
lstrcmpA
CreateToolhelp32Snapshot
InterlockedExchange
MultiByteToWideChar
GetFullPathNameA
VirtualQuery
lstrcatW
OutputDebugStringA
CreateDirectoryA
InterlockedDecrement
lstrcatA
LCMapStringA
LoadResource
GetConsoleOutputCP
LeaveCriticalSection
MoveFileExW
SetHandleCount
GlobalFree
FatalAppExitA
FindNextFileA
FreeEnvironmentStringsW
GetDriveTypeA
GlobalFindAtomA
GetSystemInfo
HeapCreate
GetComputerNameW
GetCurrentThreadId
GlobalFlags
GetProcessHeap
GetWindowsDirectoryA
LocalFileTimeToFileTime
GetStringTypeA
GetProcAddress
SetCurrentDirectoryA
GetCurrentProcessId
CreateEventA
ReadFile
GetVersionExW
FileTimeToSystemTime
SetFilePointer
ReleaseMutex
GetLogicalDriveStringsW
GetLocaleInfoA
GetVersion
RemoveDirectoryW
GetSystemDirectoryA
GetCurrentProcess
GetLocalTime
SetEndOfFile
GetEnvironmentVariableA
LockFile
GetCurrentDirectoryA
TerminateProcess
DeleteCriticalSection
GetTempPathA
GlobalLock
lstrcmpiW
GetThreadLocale
CreateMutexA
SetUnhandledExceptionFilter
FreeLibrary
FindResourceW
GlobalUnlock
GetCommandLineA
IsBadWritePtr
SetEvent
IsValidLocale
InitializeCriticalSection
GlobalAlloc
GetModuleFileNameA
lstrcpyW
FindFirstFileA
VirtualAlloc
GetFileSize
OpenMutexA
IsValidCodePage
GetTempFileNameA
SetFileAttributesW
LockResource
GetTimeFormatA
HeapAlloc
FormatMessageA
TlsAlloc
GetModuleHandleW
FindFirstFileW
GetStringTypeW
Sleep
GetWindowsDirectoryW
TlsGetValue
SetThreadPriority
WinExec
MoveFileA
GetLocaleInfoW
LCMapStringW
GetFullPathNameW
SetFileAttributesA
CompareStringA
GetStartupInfoA
LocalReAlloc
UnmapViewOfFile
GetUserDefaultLCID
SetEnvironmentVariableA
CloseHandle
SetCurrentDirectoryW
SystemTimeToFileTime
CreateFileMappingW
GlobalHandle
SuspendThread
CreateEventW
lstrcmpiA
GetSystemTimeAsFileTime
GetPrivateProfileStringA
HeapFree
WaitForSingleObject
UnlockFile
GetStdHandle
GlobalFindAtomW
GetProfileIntA
DebugBreak
SetStdHandle
GetProfileStringA
GetLogicalDrives
TlsSetValue
HeapSize
GetOEMCP
CreateProcessA
comctl32
ImageList_SetBkColor
ImageList_Replace
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_SetDragCursorImage
ImageList_AddMasked
ImageList_DrawIndirect
ord17
ImageList_GetIcon
CreatePropertySheetPageA
ImageList_Read
ImageList_DragMove
ImageList_Create
ImageList_Destroy
ImageList_Duplicate
ImageList_Draw
ImageList_GetImageCount
ImageList_LoadImageA
ImageList_Write
ImageList_GetImageInfo
PropertySheetA
_TrackMouseEvent
InitCommonControlsEx
ImageList_Remove
ImageList_Add
ImageList_GetIconSize
PropertySheetW
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
DestroyPropertySheetPage
user32
AttachThreadInput
CallNextHookEx
GetScrollRange
GetWindowPlacement
ShowScrollBar
PtInRect
GetMenuState
EnableWindow
RegisterWindowMessageA
DrawMenuBar
SetMenuDefaultItem
TranslateAcceleratorW
SubtractRect
RegisterClassExW
InflateRect
WindowFromDC
SendMessageW
GetClientRect
GetFocus
SetWindowLongW
MoveWindow
GetMessageTime
GetNextDlgGroupItem
CreateDialogIndirectParamA
DrawIcon
FindWindowA
FrameRect
wsprintfA
TranslateMDISysAccel
AppendMenuA
GetScrollPos
CopyRect
GetDlgItem
ScrollWindow
GetIconInfo
GetMenuItemCount
SetFocus
SetWindowTextW
CopyIcon
TabbedTextOutW
PostMessageW
MessageBoxA
DefDlgProcA
EndDeferWindowPos
DestroyCaret
OffsetRect
RemovePropA
SetCapture
GetMenu
GetMessageW
GetWindowRgn
GetDesktopWindow
InsertMenuW
CharLowerW
GetTopWindow
SetPropW
GetNextDlgTabItem
RegisterClassA
UpdateWindow
GetSystemMenu
SetWindowsHookExA
DrawTextExW
GetAncestor
GetCursorPos
DestroyMenu
GetLastActivePopup
OpenClipboard
CreateDialogParamA
DestroyCursor
DeleteMenu
LockWindowUpdate
SetClipboardData
AdjustWindowRectEx
RegisterClipboardFormatW
GetKeyState
GetActiveWindow
LoadStringA
GetWindowLongA
MapWindowPoints
GetSysColor
UnregisterHotKey
GetWindowTextW
RedrawWindow
CharUpperA
DdeFreeDataHandle
EndDialog
CheckDlgButton
GetClassInfoA
GetPropW
DestroyWindow
GetMenuItemInfoA
RegisterWindowMessageW
PeekMessageA
SendMessageTimeoutA
MsgWaitForMultipleObjects
IsWindowUnicode
GetScrollInfo
LoadAcceleratorsA
SetTimer
LoadStringW
IsMenu
SetPropA
MessageBoxW
SetCursor
GetMenuItemInfoW
IsDlgButtonChecked
IsIconic
SendNotifyMessageA
GetMenuItemRect
UnionRect
PostQuitMessage
CreateWindowExA
GetPropA
GetMenuItemID
GetSystemMetrics
GetWindowThreadProcessId
PostMessageA
PostThreadMessageA
DrawStateW
LoadIconW
SetWindowRgn
BeginPaint
MessageBeep
ScreenToClient
GetDC
GetWindowTextA
DispatchMessageA
TranslateMessage
BeginDeferWindowPos
IsWindowEnabled
KillTimer
GrayStringW
GetDoubleClickTime
GetAsyncKeyState
IsZoomed
CheckMenuItem
GetWindowTextLengthA
LoadIconA
DdeCreateDataHandle
CopyAcceleratorTableA
ValidateRect
SetWindowLongA
LoadBitmapA
RegisterClassExA
RemovePropW
ShowWindow
GetDlgCtrlID
GrayStringA
GetMessagePos
RemoveMenu
GetUpdateRect
GetDlgItemInt
IsClipboardFormatAvailable
SetWindowTextA
LoadCursorA
DialogBoxParamA
CharLowerA
GetMonitorInfoW
InvalidateRect
CreateMenu
EnableMenuItem
GetMenuCheckMarkDimensions
EnumWindows
GetKeyboardLayout
SetScrollInfo
GetSysColorBrush
GetWindow
EndPaint
SetWindowsHookExW
SetRect
GetWindowRect
SystemParametersInfoA
DeferWindowPos
GetMessageA
DefWindowProcW
SetScrollRange
UnregisterClassA
SendDlgItemMessageA
SetWindowPos
IsWindow
GetWindowDC
TrackPopupMenu
DrawFrameControl
DrawTextW
ReuseDDElParam
CreatePopupMenu
GetClassLongA
IsChild
GetClassNameA
RegisterClassW
ShowCaret
ReleaseDC
ModifyMenuA
GetForegroundWindow
GetCapture
EqualRect
LoadMenuW
MapDialogRect
CharNextA
HideCaret
DefWindowProcA
SendMessageA
GetKeyNameTextA
InvalidateRgn
CreateWindowExW
DrawIconEx
IsRectEmpty
SetMenuItemBitmaps
ClientToScreen
DrawStateA
DrawFocusRect
SetForegroundWindow
WaitForInputIdle
InsertMenuA
ExcludeUpdateRgn
GetSubMenu
BringWindowToTop
GetClassNameW
LoadMenuA
SetMenu
GetParent
UnregisterClassW
CallWindowProcA
LoadBitmapW
DestroyIcon
CharUpperW
CallWindowProcW
UnhookWindowsHookEx
InsertMenuItemA
WinHelpA
IsDialogMessageA
CloseClipboard
IsWindowVisible
GetDCEx
WindowFromPoint
GetClassInfoExA
SetActiveWindow
ReleaseCapture
FillRect
SetRectEmpty
SetParent
wsprintfW
LoadImageA
SetMenuItemInfoA
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ