Static task
static1
Behavioral task
behavioral1
Sample
f18268e7ef02f66a20d6815eef826fa77364b64ab80869a8c9360a9b5f3b0084.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f18268e7ef02f66a20d6815eef826fa77364b64ab80869a8c9360a9b5f3b0084.exe
Resource
win10v2004-20220901-en
General
-
Target
f18268e7ef02f66a20d6815eef826fa77364b64ab80869a8c9360a9b5f3b0084
-
Size
332KB
-
MD5
0ee92113adcfd60cbfc2daed4ee848e1
-
SHA1
344d1652175611289fed40d50135e4361cc81898
-
SHA256
f18268e7ef02f66a20d6815eef826fa77364b64ab80869a8c9360a9b5f3b0084
-
SHA512
4e23790930cb28d92ae024e7f5526d604d2ff27836eb46068227566725f008638b7ab6ac786144844a14a39e6794fce68be05cb7002d94309054fafda00ad2e3
-
SSDEEP
6144:s9SEEFjbbXYSqeABmxJKX3ZFKR/NUUvo1VSHZN7VXkHMpCTMyP5mjcg:scEEFjXo1jBmxJmZcR1UFqHHFqMp74Yo
Malware Config
Signatures
Files
-
f18268e7ef02f66a20d6815eef826fa77364b64ab80869a8c9360a9b5f3b0084.exe windows x86
9b7f8c6f5c53281fb15d43744258972a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
GetPrinterW
DeviceCapabilitiesA
SetJobW
SetPrinterDataW
EnumPrintersW
GetPrinterA
FreePrinterNotifyInfo
GetJobW
OpenPrinterA
FindFirstPrinterChangeNotification
OpenPrinterW
ClosePrinter
FindNextPrinterChangeNotification
DeviceCapabilitiesW
ord204
DocumentPropertiesA
EnumPortsW
DocumentPropertiesW
GetJobA
comctl32
ImageList_DragLeave
InitCommonControlsEx
ImageList_Destroy
ImageList_Remove
DestroyPropertySheetPage
PropertySheetA
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_GetBkColor
ImageList_AddMasked
ImageList_Add
CreatePropertySheetPageA
ImageList_GetDragImage
ImageList_EndDrag
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Create
ImageList_BeginDrag
ImageList_GetImageInfo
CreateStatusWindowW
ImageList_Draw
CreatePropertySheetPageW
PropertySheetW
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_Merge
ImageList_SetOverlayImage
_TrackMouseEvent
ImageList_Replace
ImageList_GetIcon
ImageList_DragEnter
ord17
ImageList_ReplaceIcon
gdi32
Pie
GetCharABCWidthsFloatA
BeginPath
GetDeviceCaps
StrokeAndFillPath
GdiComment
CreateBitmapIndirect
GetViewportExtEx
CreatePatternBrush
GetRgnBox
IntersectClipRect
FrameRgn
GetPolyFillMode
CreateICW
SetBkColor
GetWindowOrgEx
GetPath
CreateEnhMetaFileA
GetBitmapDimensionEx
GetBkMode
RoundRect
PtInRegion
GetPaletteEntries
CreateRectRgnIndirect
GetClipRgn
PtVisible
GetMapMode
EnumMetaFile
CreatePolygonRgn
TextOutW
CreateHatchBrush
SetPixel
GetKerningPairsA
CreateFontA
CopyMetaFileA
CreateDiscardableBitmap
GetNearestPaletteIndex
StretchDIBits
SetMapMode
CreateEllipticRgn
SetWindowOrgEx
GetFontData
UnrealizeObject
GetBoundsRect
DeleteDC
FloodFill
Polyline
CombineRgn
PolyDraw
ExtSelectClipRgn
CreateRoundRectRgn
ScaleWindowExtEx
StretchBlt
GetBrushOrgEx
SelectObject
SetDIBitsToDevice
SelectPalette
AngleArc
CreateMetaFileA
GetWindowExtEx
PatBlt
ExtTextOutA
Escape
SaveDC
OffsetWindowOrgEx
PlayEnhMetaFile
SetBitmapDimensionEx
RectVisible
GetTextFaceA
EnumFontFamiliesExA
CreateCompatibleDC
PlgBlt
DrawEscape
RealizePalette
SetWindowExtEx
GetObjectType
ExtFloodFill
SetColorAdjustment
EndPage
ResetDCA
SetTextJustification
ModifyWorldTransform
GetRegionData
SetWinMetaFileBits
PaintRgn
SetViewportOrgEx
WidenPath
GetNearestColor
GetObjectA
MaskBlt
EnumFontFamiliesExW
GetViewportOrgEx
Arc
StrokePath
PolylineTo
CloseMetaFile
BitBlt
CreatePen
EnumFontFamiliesA
GetTextColor
StartPage
SetWorldTransform
CreateDIBPatternBrushPt
EndPath
SetAbortProc
CloseEnhMetaFile
UpdateColors
AbortPath
PlayMetaFileRecord
GetClipBox
ExtEscape
DeleteObject
GetTextCharacterExtra
GetCharWidthFloatA
OffsetViewportOrgEx
CreatePalette
SetBkMode
ArcTo
ExcludeClipRect
GetBkColor
GetSystemPaletteEntries
CreateFontIndirectA
Rectangle
OffsetRgn
GetBitmapBits
GetCharABCWidthsA
DPtoLP
Polygon
EndDoc
CreateBitmap
RestoreDC
GetStockObject
TranslateCharsetInfo
SelectClipRgn
CreateCompatibleBitmap
ExtTextOutW
CreateICA
CreateSolidBrush
AnimatePalette
LineTo
SetMiterLimit
GetTextMetricsW
SetStretchBltMode
GetROP2
SetPaletteEntries
SetTextCharacterExtra
GetCharWidthA
CreateDIBitmap
SetPolyFillMode
SetRectRgn
GetMiterLimit
SetArcDirection
StartDocA
GetArcDirection
GetStretchBltMode
CopyEnhMetaFileA
SetMapperFlags
PolyBezierTo
CreateEllipticRgnIndirect
GetAspectRatioFilterEx
GetPixel
ScaleViewportExtEx
PlayMetaFile
AbortDoc
OffsetClipRgn
GetColorAdjustment
SetTextColor
SetTextAlign
SetPixelV
GdiFlush
SetROP2
MoveToEx
PolyPolyline
GetDIBits
ExtCreatePen
GetTextExtentPoint32A
GetCurrentObject
GetTextAlign
SetViewportExtEx
TextOutA
SetBrushOrgEx
InvertRgn
GetTextExtentPoint32W
EnumObjects
FlattenPath
GetTextMetricsA
ExtCreateRegion
GetTextExtentPointA
ResizePalette
CreateRectRgn
LPtoDP
GetCurrentPositionEx
Ellipse
DeleteMetaFile
CreateDIBSection
GetCharABCWidthsW
Chord
mpr
WNetGetLastErrorW
WNetEnumResourceW
WNetOpenEnumW
WNetCloseEnum
WNetAddConnection2W
shell32
SHGetFolderPathW
ExtractIconExW
SHGetFileInfoA
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetPathFromIDListW
ord155
DragAcceptFiles
SHBrowseForFolderA
DragQueryFileW
ShellExecuteExW
DragFinish
SHGetFileInfoW
Shell_NotifyIconW
ExtractIconW
SHGetSpecialFolderLocation
SHGetMalloc
SHBrowseForFolderW
ShellExecuteW
kernel32
GetPrivateProfileStringA
GetFullPathNameW
EnumSystemLocalesA
FreeLibrary
CompareStringA
GlobalAddAtomA
IsBadWritePtr
VirtualQuery
CreateFileW
SetFileAttributesA
GlobalAddAtomW
WideCharToMultiByte
WriteConsoleA
GetCurrentThread
UnhandledExceptionFilter
GetFileAttributesW
SetHandleInformation
WinExec
GlobalDeleteAtom
GetSystemTimeAsFileTime
FindFirstFileW
lstrcatW
lstrlenW
GetCurrentProcess
GetConsoleMode
SearchPathA
GetProcessHeap
CreateFileMappingA
CopyFileW
lstrcmpiA
GetLocaleInfoW
GetDateFormatA
GetFileSize
SystemTimeToFileTime
LocalAlloc
FindNextFileA
LocalFree
GetStringTypeA
GlobalAlloc
CreateThread
SetHandleCount
CreateMutexA
IsDBCSLeadByte
GetLocaleInfoA
SetErrorMode
GetCurrentDirectoryA
GetCurrentThreadId
TlsFree
GetOEMCP
GetLastError
TlsGetValue
GlobalGetAtomNameA
GetFileType
EnterCriticalSection
GetLogicalDrives
OpenProcess
CreateDirectoryW
GlobalHandle
CopyFileA
FindFirstFileA
HeapAlloc
WriteFile
GetSystemTime
GetACP
OpenMutexA
ReadFile
LeaveCriticalSection
DeleteFileA
GetModuleFileNameA
MultiByteToWideChar
UnlockFile
GetModuleHandleW
MoveFileA
SetUnhandledExceptionFilter
GetFileAttributesA
GetVolumeInformationW
GetShortPathNameA
HeapCreate
GlobalReAlloc
GetVersion
GetFileTime
SizeofResource
InitializeCriticalSection
FormatMessageW
MulDiv
GetProcessVersion
WaitForSingleObject
SetLastError
ResetEvent
GetFullPathNameA
GetConsoleOutputCP
GetSystemInfo
TlsAlloc
MoveFileW
GetConsoleCP
HeapReAlloc
AllocConsole
LocalReAlloc
CreatePipe
LoadResource
IsValidCodePage
GetModuleFileNameW
GetTimeFormatA
lstrcpyA
GetTimeZoneInformation
HeapFree
lstrcmpW
GetProcAddress
GlobalUnlock
GetPrivateProfileStringW
lstrlenA
LoadLibraryA
IsBadReadPtr
SetStdHandle
SetConsoleCtrlHandler
FreeEnvironmentStringsW
LoadLibraryW
QueryPerformanceCounter
LocalFileTimeToFileTime
lstrcpynA
FindResourceA
lstrcmpA
GetTempPathW
IsDebuggerPresent
DuplicateHandle
GetFileInformationByHandle
FileTimeToSystemTime
InterlockedCompareExchange
GetStringTypeW
TerminateProcess
HeapDestroy
GetThreadLocale
GetCPInfo
InterlockedExchange
FlushFileBuffers
CreateEventA
FatalAppExitA
FreeEnvironmentStringsA
GetStringTypeExA
FileTimeToDosDateTime
GetDriveTypeA
VirtualAlloc
CreateDirectoryA
LCMapStringA
GetEnvironmentStringsW
GetCommandLineW
CompareStringW
CloseHandle
ReleaseMutex
FindResourceW
GetPrivateProfileSectionA
GetStdHandle
SetEnvironmentVariableA
WriteConsoleW
GetWindowsDirectoryA
InterlockedDecrement
GetEnvironmentStrings
CreateProcessW
CreateFileA
GetVolumeInformationA
GetExitCodeThread
lstrcmpiW
FileTimeToLocalFileTime
FindClose
GetVersionExA
LoadLibraryExA
MapViewOfFile
GetStartupInfoW
SetFilePointer
DeleteCriticalSection
SetEnvironmentVariableW
ExitProcess
GetLocalTime
SuspendThread
GetEnvironmentVariableA
GetOverlappedResult
RaiseException
TlsSetValue
CreateMutexW
RtlUnwind
GetCurrentProcessId
VirtualFree
GlobalFlags
FormatMessageA
GetTickCount
ExpandEnvironmentStringsA
IsBadCodePtr
Sleep
GetUserDefaultLCID
IsValidLocale
GetSystemDefaultLangID
GlobalLock
InterlockedIncrement
GetModuleHandleA
HeapSize
LockFile
GetCommandLineA
LCMapStringW
SetEndOfFile
GetStartupInfoA
lstrcatA
GetExitCodeProcess
WritePrivateProfileSectionA
user32
MapWindowPoints
GetMessageTime
DispatchMessageA
CharLowerA
DefWindowProcW
SetPropA
GetPropA
SetClassLongW
IntersectRect
GetAsyncKeyState
EqualRect
SetCaretPos
EnableWindow
InflateRect
GetDlgItem
GetClipboardFormatNameA
GetWindowTextA
SetRectEmpty
GetSysColorBrush
SetMenu
EnableMenuItem
SendMessageW
IsWindowUnicode
GetClientRect
CopyRect
CallWindowProcW
GetDCEx
BringWindowToTop
GetDesktopWindow
RegisterClipboardFormatA
GetForegroundWindow
CopyAcceleratorTableW
SetScrollRange
CallWindowProcA
DrawIconEx
GetParent
keybd_event
GetMenuCheckMarkDimensions
IsDialogMessageA
CreatePopupMenu
DrawStateA
SetWindowsHookExW
ScrollWindow
GetMessagePos
SetRect
SetDlgItemInt
CharUpperW
CreateCaret
MapDialogRect
InvalidateRect
LoadAcceleratorsA
LoadMenuA
ModifyMenuA
GetKeyboardState
ReleaseDC
GetTopWindow
GetWindowLongA
ScreenToClient
SetDlgItemTextW
GetMessageA
MoveWindow
GetKeyState
CloseClipboard
AppendMenuA
GetDC
SetMenuItemBitmaps
SetWindowLongA
LoadMenuW
DestroyIcon
GetNextDlgTabItem
BeginDeferWindowPos
DrawEdge
RemovePropA
SetDlgItemTextA
ReuseDDElParam
SetWindowPos
EndDeferWindowPos
OpenClipboard
IsMenu
EnumWindows
ScrollWindowEx
RemoveMenu
GetClassLongW
SetMenuDefaultItem
SetScrollPos
PostMessageA
IsWindowEnabled
IsWindowVisible
TrackPopupMenu
InSendMessage
SetWindowContextHelpId
AppendMenuW
SendMessageA
SystemParametersInfoA
SetForegroundWindow
CreateDialogIndirectParamW
DeleteMenu
CreateAcceleratorTableW
IsClipboardFormatAvailable
GetWindowDC
CreateWindowExA
RegisterClassA
IsWindow
DrawMenuBar
AdjustWindowRect
KillTimer
GetFocus
RegisterWindowMessageA
GetPropW
DefFrameProcA
DispatchMessageW
GetMenuItemID
GetCapture
TranslateAcceleratorA
RegisterClassExA
CharUpperA
GetScrollInfo
EndPaint
GetSubMenu
IsIconic
GrayStringA
SetWindowTextA
GetWindowRect
DefWindowProcA
RegisterWindowMessageW
PostThreadMessageA
CheckDlgButton
GetWindowTextLengthA
GetIconInfo
GetMenuStringA
GetUpdateRect
DrawTextExA
RegisterClassW
GetWindowPlacement
DrawTextA
RegisterClipboardFormatW
TranslateAcceleratorW
EnumChildWindows
MessageBoxA
CheckMenuRadioItem
IsChild
FillRect
TabbedTextOutA
PeekMessageA
LoadBitmapA
WindowFromDC
SendMessageTimeoutW
SetTimer
GetMenuState
DestroyMenu
IsZoomed
EndDialog
LoadCursorA
SetWindowPlacement
GetClassNameW
SetWindowsHookExA
GetActiveWindow
GetClassInfoExW
GetWindow
SetParent
DeferWindowPos
GetSystemMenu
CopyIcon
GetDlgCtrlID
GetMenu
CheckRadioButton
CharNextW
GetWindowThreadProcessId
WindowFromPoint
LoadImageW
LockWindowUpdate
DrawFocusRect
SetCursorPos
InvalidateRgn
MessageBoxW
GetMenuItemCount
CharUpperBuffA
wsprintfA
BeginPaint
ShowCaret
LoadCursorW
CharLowerW
DestroyAcceleratorTable
SetCapture
SetFocus
ShowWindow
GetClassInfoW
DestroyWindow
WinHelpA
GetClassNameA
InsertMenuItemA
GetUserObjectInformationW
PtInRect
CreateAcceleratorTableA
SetActiveWindow
GetClassInfoA
SendDlgItemMessageA
OffsetRect
PeekMessageW
UpdateWindow
GetScrollRange
GetClassLongA
GetAncestor
CreateDialogIndirectParamA
DialogBoxIndirectParamW
GetDlgItemTextA
RemovePropW
UnregisterClassA
SetScrollInfo
LoadIconW
GetWindowTextLengthW
LoadImageA
GetSystemMetrics
GetLastActivePopup
UnhookWindowsHookEx
ReleaseCapture
CheckMenuItem
TranslateMessage
CallNextHookEx
RedrawWindow
GetWindowLongW
GetWindowRgn
IsRectEmpty
MessageBeep
SetMenuItemInfoW
DrawFrameControl
ValidateRect
GetCursorPos
ShowOwnedPopups
ClientToScreen
CharNextA
SetCursor
GetDialogBaseUnits
SendMessageTimeoutA
DrawIcon
AdjustWindowRectEx
LoadIconA
GetSysColor
EmptyClipboard
PostQuitMessage
LoadBitmapW
UnregisterClassW
GetScrollPos
PostMessageW
advapi32
RegCloseKey
RegDeleteValueA
CryptDestroyKey
ControlService
GetUserNameA
OpenServiceA
RegDeleteKeyW
RegCreateKeyW
MapGenericMask
RegCreateKeyExA
InitializeAcl
InitializeSecurityDescriptor
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumKeyA
CryptCreateHash
RegOpenKeyExA
RegDeleteKeyA
GetSidSubAuthorityCount
RegQueryInfoKeyA
RegOpenKeyExW
RegEnumKeyExW
GetFileSecurityW
RegDeleteValueW
RegEnumValueA
GetSecurityInfo
SetFileSecurityW
StartServiceA
RegQueryInfoKeyW
OpenProcessToken
RegSetValueW
DuplicateToken
OpenSCManagerA
AddAccessAllowedAce
AllocateAndInitializeSid
SetEntriesInAclW
LookupPrivilegeValueA
ChangeServiceConfigA
CopySid
AdjustTokenPrivileges
GetSidSubAuthority
IsValidSecurityDescriptor
SetSecurityDescriptorDacl
RegQueryValueA
RevertToSelf
CryptAcquireContextA
DeleteService
RegQueryValueExA
RegEnumKeyExA
RegQueryValueExW
RegSetValueA
SetFileSecurityA
OpenThreadToken
RegCreateKeyA
RegCreateKeyExW
QueryServiceStatus
CryptReleaseContext
GetLengthSid
RegSetValueExA
CryptHashData
RegQueryValueW
RegOpenKeyA
RegEnumValueW
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ