Static task
static1
Behavioral task
behavioral1
Sample
e29020b481023ae8eef64e5734a52f0c9f24d1c4922d08f1374d1a3679947569.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e29020b481023ae8eef64e5734a52f0c9f24d1c4922d08f1374d1a3679947569.exe
Resource
win10v2004-20220812-en
General
-
Target
e29020b481023ae8eef64e5734a52f0c9f24d1c4922d08f1374d1a3679947569
-
Size
435KB
-
MD5
92731b4c3d1242bfc6dd66713ce92c60
-
SHA1
38fa97eaee45f2f25a9665a08f08ab069349ebb5
-
SHA256
e29020b481023ae8eef64e5734a52f0c9f24d1c4922d08f1374d1a3679947569
-
SHA512
8076e5fff566c21efeca026b82b7c2602591db084bfc7da08af66ea5003a216f3db805ed6eafd2fb8825fe570270326562d650d3fb7c659b8cb7ebf32cba7308
-
SSDEEP
12288:dFO0uIvECg/ZxD4RdJjUBCfn4eMeNC+3FlK/c:dFO0uIvECg/ZxD45jZP4eMeNC0FH
Malware Config
Signatures
Files
-
e29020b481023ae8eef64e5734a52f0c9f24d1c4922d08f1374d1a3679947569.exe windows x86
f662be6909a36fc73681dcb7f3389ab1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MapVirtualKeyA
CopyIcon
ScrollDC
GetKeyNameTextA
GetCursor
InvalidateRgn
TrackMouseEvent
DestroyCaret
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
GetForegroundWindow
CopyAcceleratorTableW
SetCapture
PeekMessageA
LoadCursorFromFileW
DrawEdge
WindowFromDC
GetNextDlgGroupItem
GetWindowContextHelpId
mouse_event
SetMenuContextHelpId
CharPrevA
GetWindow
GetSysColor
GetWindowModuleFileNameA
DrawFrameControl
GetFocus
DialogBoxIndirectParamA
WaitForInputIdle
RegisterClassExA
GetDialogBaseUnits
CharLowerBuffA
GetDlgItemTextA
CreateDialogParamA
MsgWaitForMultipleObjects
SetWindowRgn
DrawIcon
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
RegisterClassA
SetWindowLongA
GetClassInfoA
GetLastActivePopup
IsWindowEnabled
LoadImageA
DrawStateA
FrameRect
DrawFocusRect
TrackPopupMenuEx
WindowFromPoint
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
GetAsyncKeyState
GetActiveWindow
GetWindowLongA
DestroyIcon
DestroyCursor
DestroyMenu
DrawTextA
LoadIconA
SendMessageTimeoutA
ShowScrollBar
GetMessageA
TranslateMessage
DispatchMessageA
GetClipboardData
HideCaret
GetWindowTextLengthA
GetDlgItem
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetForegroundWindow
SetFocus
SetScrollRange
KillTimer
SetTimer
UpdateWindow
PostMessageA
InsertMenuA
LoadMenuA
DeleteMenu
GetMenuItemID
GetMessageTime
RemovePropA
FindWindowA
SetWindowPos
GetSystemMetrics
InsertMenuItemA
DrawMenuBar
CreateWindowExA
GetWindowRect
OffsetRect
InflateRect
CreateCaret
SetCaretPos
ShowCaret
CreatePopupMenu
EnableWindow
ScreenToClient
ReleaseCapture
GetKeyState
ClientToScreen
CopyRect
WinHelpA
GetCapture
IsChild
SetWindowPlacement
SetScrollPos
GetScrollPos
GetScrollRange
SetScrollInfo
GetTabbedTextExtentA
DefWindowProcA
GetWindowInfo
RegisterWindowMessageA
CallWindowProcA
MessageBeep
RemoveMenu
LockWindowUpdate
GetDCEx
GetSysColorBrush
GetClassNameA
UnionRect
ClipCursor
CopyAcceleratorTableA
PostThreadMessageA
CreateMenu
SetCursorPos
InSendMessage
wvsprintfA
RegisterClipboardFormatA
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
IsClipboardFormatAvailable
IsZoomed
EndDialog
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetMenuStringA
SetMenu
TrackPopupMenu
CreateDialogIndirectParamA
InvertRect
RedrawWindow
ScrollWindow
DefMDIChildProcA
TranslateMDISysAccel
DefFrameProcA
ValidateRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
TranslateAcceleratorA
LoadAcceleratorsA
GetWindowTextA
IsWindowVisible
GetMenu
GetTopWindow
GetSystemMenu
SetParent
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
ShowWindow
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
CheckRadioButton
CheckDlgButton
GetDesktopWindow
CharUpperA
SendDlgItemMessageA
MapWindowPoints
IsWindow
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetMessagePos
GetCursorPos
GetScrollInfo
SendMessageA
ReleaseDC
FillRect
GetDC
SetActiveWindow
CheckMenuRadioItem
AppendMenuA
wsprintfA
EnumChildWindows
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuItemCount
GetSubMenu
SetWindowTextA
GetDlgCtrlID
SetRectEmpty
IsRectEmpty
PtInRect
SetRect
InvalidateRect
GetClientRect
GetParent
SetCursor
LoadCursorA
LoadBitmapA
UnregisterClassA
comdlg32
CommDlgExtendedError
GetSaveFileNameA
PrintDlgA
ChooseColorA
ChooseFontA
FindTextA
ReplaceTextA
GetOpenFileNameA
GetFileTitleA
shell32
ExtractIconExW
DragQueryFileA
DoEnvironmentSubstW
ShellAboutA
DragQueryFileW
ExtractIconExA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderPathW
ShellExecuteA
ShellExecuteW
SHChangeNotify
ShellExecuteExA
DragAcceptFiles
SHGetFileInfoA
DragFinish
ExtractIconA
SHGetSpecialFolderLocation
Shell_NotifyIconW
ole32
GetHGlobalFromStream
OleCreateStaticFromData
OleGetAutoConvert
CoInitialize
CoInitializeEx
CoUninitialize
CoCreateInstance
StringFromCLSID
CoImpersonateClient
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoCreateGuid
CoRevokeClassObject
CoRegisterClassObject
GetRunningObjectTable
CoGetInterfaceAndReleaseStream
CoReleaseMarshalData
CoMarshalInterThreadInterfaceInStream
CoTaskMemRealloc
OleGetClipboard
CoRegisterPSClsid
OleFlushClipboard
ProgIDFromCLSID
advapi32
RegCreateKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
GetUserNameA
RegQueryInfoKeyA
GetFileSecurityA
RegEnumKeyA
RegSetValueA
SetFileSecurityA
DecryptFileW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegFlushKey
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueA
FreeSid
AllocateAndInitializeSid
AdjustTokenPrivileges
RegOpenKeyA
PrivilegedServiceAuditAlarmA
GetTokenInformation
GetSidIdentifierAuthority
MapGenericMask
EqualSid
RegOpenKeyW
wininet
InternetCloseHandle
InternetOpenW
InternetOpenUrlW
InternetReadFile
gdi32
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateBrushIndirect
CopyEnhMetaFileA
BitBlt
Chord
ArcTo
CombineTransform
CreateCompatibleBitmap
CreateDIBPatternBrush
CombineRgn
CloseFigure
CreateBitmap
SetAbortProc
AbortDoc
DPtoLP
GetCharWidthA
SetRectRgn
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetNearestPaletteIndex
GetObjectA
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextMetricsA
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
PlayEnhMetaFile
Polyline
RealizePalette
RectVisible
Rectangle
RestoreDC
SaveDC
DeleteObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetEnhMetaFileBits
SetPixel
CreateRectRgnIndirect
Escape
GetMapMode
PtVisible
GetWindowExtEx
ExtCreatePen
GetViewportExtEx
GetObjectType
PolyBezierTo
SelectClipPath
GetClipRgn
SetTextAlign
SetWindowExtEx
SelectClipRgn
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetMapMode
SetPolyFillMode
GetTextColor
GetBkColor
CreateRectRgn
CreateDCA
StartDocA
EndDoc
StartPage
EndPage
PolyBezier
TextOutA
BeginPath
EndPath
StrokeAndFillPath
CreateFontA
GetBitmapDimensionEx
CreatePen
SetDIBitsToDevice
CreatePatternBrush
GetTextFaceA
PlayMetaFile
SetMetaFileBitsEx
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWinMetaFileBits
ExcludeClipRect
ExtTextOutA
ExtTextOutW
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetDCOrgEx
GetDIBColorTable
GetDIBits
SelectObject
SetWindowOrgEx
StretchBlt
StretchDIBits
UnrealizeObject
WidenPath
TextOutW
ExtEscape
GetOutlineTextMetricsA
EnumFontFamiliesExA
GetFontData
FillPath
GetROP2
Polygon
CreatePolygonRgn
CreateEllipticRgnIndirect
SetMiterLimit
StrokePath
EnumFontFamiliesA
Ellipse
GetCurrentPositionEx
GetTextAlign
LPtoDP
CopyMetaFileA
DeleteMetaFile
CreateMetaFileA
GetDeviceCaps
CloseMetaFile
comctl32
ImageList_Create
ImageList_Destroy
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Add
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_Draw
ImageList_Replace
ImageList_DrawEx
ImageList_Remove
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_GetIcon
DestroyPropertySheetPage
CreatePropertySheetPageA
PropertySheetA
ImageList_SetIconSize
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ord17
ImageList_DragMove
winspool.drv
EnumPrinterDriversA
ClosePrinter
EnumMonitorsA
kernel32
AddAtomW
GetLongPathNameW
SetTapeParameters
WriteProfileSectionW
GlobalAddAtomA
GetVersionExA
CreateIoCompletionPort
GetTempPathA
GetModuleFileNameA
DeleteFileA
GetProcAddress
FreeLibrary
MulDiv
CreateFileA
LoadLibraryA
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
lstrcpyA
GetACP
GetLastError
WriteFile
GetVersion
lstrcpynA
WaitForSingleObject
CreateProcessA
lstrcmpiA
lstrcmpA
GetSystemDirectoryA
LocalFree
FormatMessageA
lstrcatA
Sleep
GetTickCount
FindResourceA
GetSystemTimeAsFileTime
VirtualProtect
FindResourceExA
GlobalAlloc
GetFileSize
GlobalUnlock
GlobalLock
ReadFile
GetExitCodeThread
GlobalFree
CopyFileA
CreateEventA
CloseHandle
GetFullPathNameA
GetFileAttributesA
GetWindowsDirectoryA
SetEvent
GetTempFileNameA
GetProfileStringA
ResumeThread
lstrlenA
WriteProfileStringA
TerminateThread
GetModuleHandleA
GlobalDeleteAtom
MultiByteToWideChar
GlobalGetAtomNameA
GlobalFindAtomA
DuplicateHandle
GetCurrentProcess
GetCurrentThreadId
FlushFileBuffers
LockFile
SetFilePointer
SetEndOfFile
MoveFileA
UnlockFile
FindFirstFileA
GetVolumeInformationA
FindClose
GetThreadLocale
GetShortPathNameA
GetStringTypeExA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetLastError
DeleteCriticalSection
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
SuspendThread
GetProfileIntA
SetThreadPriority
GetCurrentDirectoryA
lstrlenW
GetCurrentThread
GetFileTime
GetDiskFreeSpaceA
SetFileTime
FileTimeToLocalFileTime
TlsAlloc
FileTimeToSystemTime
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
TlsGetValue
TlsSetValue
GetProcessVersion
GetCPInfo
GlobalFlags
LocalFileTimeToFileTime
SystemTimeToFileTime
GetOEMCP
SetErrorMode
lstrcpyW
RtlUnwind
GlobalSize
HeapAlloc
GetTimeZoneInformation
HeapFree
GetLocalTime
GetStartupInfoA
GetSystemTime
ExitProcess
RaiseException
GetCommandLineA
ExitThread
HeapReAlloc
CreateThread
SetStdHandle
GetFileType
TerminateProcess
GetEnvironmentVariableA
HeapDestroy
HeapSize
VirtualFree
VirtualAlloc
HeapCreate
FatalAppExitA
LCMapStringA
IsBadWritePtr
SetHandleCount
GetStdHandle
LCMapStringW
CompareStringW
UnhandledExceptionFilter
CompareStringA
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeA
GetStringTypeW
GetEnvironmentStringsW
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadCodePtr
SetEnvironmentVariableA
GetAtomNameA
AddAtomA
RemoveDirectoryA
SetThreadContext
FlushInstructionCache
WriteProcessMemory
VirtualProtectEx
GetThreadContext
QueryPerformanceFrequency
CreateMutexA
ReleaseMutex
GetPrivateProfileSectionNamesA
GetSystemDefaultLangID
GetSystemInfo
MoveFileExA
QueryPerformanceCounter
ResetEvent
VirtualQuery
FindNextFileA
SearchPathA
GetCurrentProcessId
FreeResource
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetFileAttributesA
LoadLibraryExA
CreateDirectoryA
GetExitCodeProcess
GetDriveTypeA
GetTimeFormatA
GetDateFormatA
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
IsDebuggerPresent
IsValidCodePage
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LocalAlloc
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 238KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ