Static task
static1
Behavioral task
behavioral1
Sample
a30d75fef78c91d1ce3a7cfa6cb473053913dd827309394da65e1da5865de318.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a30d75fef78c91d1ce3a7cfa6cb473053913dd827309394da65e1da5865de318.exe
Resource
win10v2004-20220812-en
General
-
Target
a30d75fef78c91d1ce3a7cfa6cb473053913dd827309394da65e1da5865de318
-
Size
2.5MB
-
MD5
04dc464d5cf7c40105a0b238565a8c5f
-
SHA1
4fe67103cc0f6ef0963cd64130517a7381898235
-
SHA256
a30d75fef78c91d1ce3a7cfa6cb473053913dd827309394da65e1da5865de318
-
SHA512
1563e0214b02178ab7ae953877083b1b36b2fa363a245dd2c1723d201be18cb0939db3d62598f20057f026beb7582dab9095dcacb66fa7c10853f4f0260eb2bb
-
SSDEEP
49152:wLr+3mzc6IfH1pyfnueUtyF2V4H0yEoUAzTD61TLZlZrb4t92QzFs+i:wP+3mznIfH1pdeQyY80yEpA3mTFlZrbn
Malware Config
Signatures
Files
-
a30d75fef78c91d1ce3a7cfa6cb473053913dd827309394da65e1da5865de318.exe windows x86
0b4654e2873510e5711fc3f6b70ffb2a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringW
LCMapStringW
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteConsoleW
GetStartupInfoW
GetProcessHeap
GetStdHandle
GetStringTypeW
TerminateThread
ExpandEnvironmentStringsA
CreateFileW
SetEnvironmentVariableA
QueryPerformanceCounter
GetTimeZoneInformation
IsValidCodePage
GetFileType
SetStdHandle
HeapQueryInformation
HeapSize
GetModuleHandleExW
ExitProcess
ExitThread
IsDebuggerPresent
HeapReAlloc
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapAlloc
HeapFree
GetCommandLineA
GetSystemTimeAsFileTime
RaiseException
IsProcessorFeaturePresent
RtlUnwind
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
GetTempFileNameA
GetTickCount
SetErrorMode
GetVolumeInformationA
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
GetThreadLocale
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
InterlockedIncrement
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
GetACP
FileTimeToSystemTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
InterlockedExchange
ResumeThread
SetThreadPriority
lstrcmpA
GetCurrentProcessId
InterlockedDecrement
CopyFileA
FormatMessageA
LocalFree
GlobalSize
GlobalAlloc
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DecodePointer
EncodePointer
FindResourceA
LoadLibraryW
GlobalFree
GlobalUnlock
GlobalLock
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeResource
GetVersion
SetLastError
OutputDebugStringA
GetFileAttributesW
GetVersionExA
ReadProcessMemory
OpenProcess
VirtualFreeEx
VirtualAllocEx
lstrcmpiA
GetWindowsDirectoryA
LoadLibraryExA
LoadLibraryA
lstrlenA
lstrcatA
lstrcpyA
LockResource
MulDiv
WinExec
FreeLibrary
CreateFileA
WriteFile
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryW
GetModuleFileNameA
GetSystemTime
CloseHandle
WaitForSingleObject
CreateThread
GetCurrentProcess
SetProcessWorkingSetSize
CreateMutexA
GetLastError
MultiByteToWideChar
GetCurrentDirectoryA
GetFileAttributesA
Sleep
WideCharToMultiByte
FindResourceW
SizeofResource
LoadResource
user32
GetMenuState
GetMenuStringA
IsDialogMessageA
SetWindowTextA
CheckDlgButton
MoveWindow
ShowWindow
WinHelpA
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassLongA
SetWindowLongA
MessageBoxA
AdjustWindowRectEx
GetWindowTextLengthA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
GetForegroundWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
CreateWindowExA
GetClassInfoExA
RegisterClassA
CallWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
InsertMenuA
RemoveMenu
DrawTextA
DrawTextExA
GrayStringA
EnableWindow
TabbedTextOutA
GetWindowDC
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
BeginPaint
SendDlgItemMessageA
GetDesktopWindow
SetActiveWindow
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GetWindowThreadProcessId
FindWindowA
EndPaint
IsIconic
BringWindowToTop
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
CreatePopupMenu
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
SetParent
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
EnumChildWindows
MapWindowPoints
LoadIconA
GetClassNameA
GetParent
GetWindowLongA
EqualRect
TranslateMDISysAccel
InflateRect
GetKeyNameTextA
MapVirtualKeyA
GetMenuItemInfoA
GetMessageA
TranslateMessage
ShowOwnedPopups
SendMessageA
GetClientRect
GetWindowRect
LoadIconW
PostMessageA
GetDC
ReleaseDC
LoadBitmapW
IsChild
GetFocus
KillTimer
GetSystemMenu
DestroyMenu
MenuItemFromPoint
GetCursorPos
InvalidateRect
RedrawWindow
WindowFromPoint
SetCursorPos
SetTimer
GetSysColor
PostQuitMessage
AppendMenuA
ModifyMenuA
DeleteMenu
SetForegroundWindow
CopyRect
GetSystemMetrics
SetRect
MonitorFromPoint
MonitorFromWindow
EnumDisplayMonitors
IntersectRect
PtInRect
GetMonitorInfoA
FillRect
DestroyIcon
MapVirtualKeyExA
CreateIconIndirect
CopyIcon
SetWindowContextHelpId
GetIconInfo
SetCursor
LoadCursorA
GetMenuInfo
GetMenuItemRect
SetMenuInfo
LoadBitmapA
DestroyCursor
LoadImageA
SystemParametersInfoA
RegisterWindowMessageA
DefWindowProcA
GetClassInfoA
IsWindow
SetCapture
ReleaseCapture
IsWindowEnabled
SetWindowRgn
GetWindowTextA
ClientToScreen
ScreenToClient
ChildWindowFromPoint
SetRectEmpty
OffsetRect
IsRectEmpty
MapDialogRect
WaitMessage
DrawIcon
LoadCursorW
RealChildWindowFromPoint
GetSysColorBrush
CopyImage
UnregisterClassA
UnionRect
LockWindowUpdate
CharUpperA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
GetMenuDefaultItem
DrawFocusRect
DrawIconEx
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
RegisterClipboardFormatA
SetLayeredWindowAttributes
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
LoadImageW
DrawEdge
DrawFrameControl
IsMenu
UpdateLayeredWindow
TrackMouseEvent
LoadMenuW
GetComboBoxInfo
IsZoomed
PostThreadMessageA
GetKeyboardLayout
IsCharLowerA
WindowFromDC
GetWindowRgn
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
FrameRect
CharUpperBuffA
SetMenuDefaultItem
GetDoubleClickTime
SetClassLongA
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardState
LoadAcceleratorsW
CheckMenuItem
gdi32
SetTextAlign
ExtTextOutA
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CreateFontA
GetCharWidthA
StretchDIBits
CreateEllipticRgn
Ellipse
DPtoLP
LPtoDP
GetBkColor
GetMapMode
SetRectRgn
GetTextColor
GetRgnBox
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetPixel
SetDIBColorTable
Polygon
Polyline
Rectangle
EnumFontFamiliesExA
GetCurrentObject
RoundRect
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
GetBoundsRect
GetWindowOrgEx
GetViewportOrgEx
SetROP2
GetNearestColor
GetTextAlign
GetTextExtentPointA
GetTextFaceA
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetObjectType
GetCurrentPositionEx
GetClipBox
ExcludeClipRect
Escape
CreatePatternBrush
CreateHatchBrush
CopyMetaFileA
GetPixel
CreatePolygonRgn
SelectClipRgn
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SelectPalette
UnrealizeObject
SetBrushOrgEx
SetDIBits
OffsetRgn
FrameRgn
FillRgn
CreateRoundRectRgn
CreateRectRgn
CombineRgn
TextOutA
SetTextJustification
SetBkMode
SetBkColor
GetTextExtentPoint32A
CreateFontIndirectA
MoveToEx
SetTextColor
StretchBlt
LineTo
CreateSolidBrush
CreatePen
CreateCompatibleBitmap
CreateBitmap
SetViewportOrgEx
SetViewportExtEx
GetTextMetricsA
GetDeviceCaps
CreateDCA
ExtSelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
BitBlt
GetObjectA
RealizePalette
GetStockObject
msimg32
TransparentBlt
GradientFill
AlphaBlend
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
ControlService
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
CreateServiceA
StartServiceA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
DeregisterEventSource
ReportEventA
RegisterEventSourceA
ReadEventLogA
GetOldestEventLogRecord
CloseEventLog
GetNumberOfEventLogRecords
OpenEventLogA
LookupAccountSidA
RegEnumKeyExA
RegEnumValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegQueryValueA
RegOpenKeyExA
RegCloseKey
QueryServiceStatus
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
Shell_NotifyIconA
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFileInfoA
DragFinish
DragQueryFileA
ShellExecuteA
comctl32
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_Add
ImageList_Replace
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ord17
ImageList_AddMasked
ImageList_Draw
shlwapi
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW
PathIsUNCA
uxtheme
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
OpenThemeData
CloseThemeData
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
DrawThemeText
IsAppThemed
GetThemePartSize
DrawThemeBackground
ole32
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
OleRun
CoInitializeEx
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoFreeUnusedLibraries
CoUninitialize
CoInitialize
CreateILockBytesOnHGlobal
oleaut32
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantChangeType
VariantClear
SysAllocStringLen
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopy
VarDateFromStr
VarBstrFromCy
VarBstrFromDate
OleCreateFontIndirect
VariantInit
SysAllocString
GetErrorInfo
VarUdateFromDate
SafeArrayCreateVector
oledlg
ord8
wsock32
send
select
recv
htons
connect
closesocket
gethostbyname
ioctlsocket
WSAGetLastError
WSASetLastError
WSACleanup
socket
WSAStartup
gethostname
inet_addr
simcextdlg
SIMCDll_ShowPublicBoard
SIMCDll_QueryHistory
oci
OCIErrorGet
OCIHandleFree
OCIServerDetach
OCISessionEnd
OCISessionBegin
OCIAttrSet
OCIServerAttach
OCIHandleAlloc
OCIEnvCreate
ws2_32
shutdown
ioctlsocket
__WSAFDIsSet
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
gdiplus
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDrawImageI
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 376KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 362KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ