Static task
static1
Behavioral task
behavioral1
Sample
45f10ca6720c5146c769473483b6d3b8d413e871221be92148b4d289e09c7f6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
45f10ca6720c5146c769473483b6d3b8d413e871221be92148b4d289e09c7f6c.exe
Resource
win10v2004-20220901-en
General
-
Target
45f10ca6720c5146c769473483b6d3b8d413e871221be92148b4d289e09c7f6c
-
Size
271KB
-
MD5
83c455d9a3cf643d38ab5b356087ac00
-
SHA1
042e14cad591709d67b8a34856c23128bee90e74
-
SHA256
45f10ca6720c5146c769473483b6d3b8d413e871221be92148b4d289e09c7f6c
-
SHA512
11a8aa9a49a64a65c1b802220dbdc50c488ec8bb20cdc0652c1afa1e65bcea3a66de2a24ff24c8500e38a9842bb4ba26eb63265557d572b6a76be66df5e9ca7d
-
SSDEEP
3072:MjAC7+m0nRn+FM68dJqQnEJgj9Cd+GjpHD4:MUCanR+I5zj9CMGjpU
Malware Config
Signatures
Files
-
45f10ca6720c5146c769473483b6d3b8d413e871221be92148b4d289e09c7f6c.exe windows x86
3a96c03665e581d9624bb1fe3f07c35d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClientRect
GetAncestor
DdeUnaccessData
SendMessageA
GetCursorInfo
GrayStringW
DdeSetUserHandle
GetWindow
CharLowerA
DispatchMessageW
TranslateAcceleratorA
OpenClipboard
GetQueueStatus
GetProcessWindowStation
GetDlgItem
GetParent
RemoveMenu
IsWindowVisible
UnregisterClassW
DestroyMenu
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
ShowWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
CheckRadioButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetLastActivePopup
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
GetProcessDefaultLayout
UpdateWindow
EnableWindow
CheckMenuItem
OpenInputDesktop
CreateDesktopW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
SendDlgItemMessageA
SetThreadDesktop
SwitchDesktop
CloseDesktop
SendMessageW
PostMessageW
GetSystemMetrics
IsIconic
GetFocus
GetTopWindow
GetWindowLongW
GetClassNameW
SetWindowLongW
SetWindowPos
SetForegroundWindow
EndDialog
GetNextDlgTabItem
IsWindowEnabled
SetFocus
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
comdlg32
GetFileTitleW
shell32
SHGetFolderPathW
ShellExecuteW
oledlg
OleUIBusyW
ole32
StgOpenStorageOnILockBytes
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoRegisterMessageFilter
OleFlushClipboard
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
advapi32
AllocateAndInitializeSid
RegDeleteValueW
RegDeleteValueA
SetThreadToken
RegSetKeySecurity
RegReplaceKeyA
PrivilegedServiceAuditAlarmW
EnumDependentServicesA
OpenBackupEventLogW
RegCloseKey
LookupPrivilegeValueW
RegOpenKeyExW
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
OpenProcessToken
RegQueryValueExW
AdjustTokenPrivileges
RegEnumKeyExW
CheckTokenMembership
FreeSid
RegSetValueExW
RegDeleteKeyW
RegEnumValueW
RegCreateKeyExW
gdi32
CopyEnhMetaFileA
CreateDIBitmap
CloseFigure
CombineTransform
CreateColorSpaceA
CreateDIBSection
ChoosePixelFormat
AddFontResourceW
BeginPath
CreateBitmapIndirect
opengl32
glLightfv
glLightModelfv
glLightModelf
glHint
glGetString
glGenTextures
glEnd
glEnable
glDisable
glDepthFunc
glCopyTexImage2D
glColor4f
glColor3f
glClearDepth
glClearColor
glClear
glCallList
glBlendFunc
glBegin
kernel32
GetStartupInfoW
GetSystemTimeAsFileTime
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
VirtualProtect
GetSystemInfo
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
FlushFileBuffers
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetEnvironmentVariableW
CreateFileA
GetCurrentDirectoryA
GetDriveTypeA
SetFilePointer
GetExitCodeProcess
CreatePipe
GetFileAttributesA
CreateProcessA
MoveFileA
DeleteFileA
GetLogicalDriveStringsW
ResetEvent
FormatMessageA
GetProcessHeap
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
CompareStringA
lstrcmpW
GlobalDeleteAtom
SetErrorMode
GetModuleHandleW
FreeResource
GetCurrentProcessId
lstrlenA
GlobalFree
HeapAlloc
HeapFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
SetLastError
GetExitCodeThread
GetDriveTypeW
WideCharToMultiByte
CreateEventW
SetEvent
GetModuleHandleA
GetCurrentProcess
GetVersionExW
GetProcAddress
LoadLibraryExW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetLocaleInfoW
RtlUnwind
RaiseException
GetLocaleInfoA
GetACP
GetTickCount
GlobalFlags
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetFileTime
GetVolumeInformationW
DuplicateHandle
GetFileSize
UnlockFile
LockFile
GetTimeFormatA
GetDateFormatA
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GetTimeZoneInformation
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
WriteFile
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
ReadFile
GetThreadLocale
GetCommandLineW
CreateDirectoryW
RemoveDirectoryW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTempPathW
GetCurrentDirectoryW
GetUserDefaultLCID
GetSystemDefaultLangID
SetCurrentDirectoryW
CreateThread
WaitForSingleObject
CloseHandle
GetModuleFileNameW
GetLastError
Sleep
FindResourceW
LoadResource
LockResource
LCMapStringW
VirtualAlloc
CreateRemoteThread
ReadConsoleOutputA
GetEnvironmentVariableW
GetThreadContext
SetConsoleCP
OutputDebugStringW
SizeofResource
GetSystemDefaultLCID
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 121KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ