Static task
static1
Behavioral task
behavioral1
Sample
amcap_EN_ V3.0.9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
amcap_EN_ V3.0.9.exe
Resource
win10v2004-20220812-en
General
-
Target
amcap_EN_V3.0.9.zip
-
Size
294KB
-
MD5
13c68329d8399e7e8980327f90c5eb40
-
SHA1
0dd7b816db9ae1dcb881e799164591bf635ec74d
-
SHA256
c1d7a335a4ea06ac200f88055ca4885f4881c5959ebb5eeb188bd657c1ec6c95
-
SHA512
09649f3e9e591b470f2c0fd56beb6460740a9ac9c8706bdb2eab010e3b5dae2b9ea5c4d60ed88ff8b30788c0cf7c0c83f145965e0ead17a9086dd12c911cc307
-
SSDEEP
6144:wrL4Xh9JyO7asS+aGurSOd0ruXF/DwUOdXy7NuQKNgIh5:AL4XRyAvWGu1B17iwQpzj
Malware Config
Signatures
Files
-
amcap_EN_V3.0.9.zip.zip
-
amcap_EN_ V3.0.9.exe.exe windows x86
5d4b8f8ed2816fdabae68fc26095ed5c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
olepro32
ord250
kernel32
GetFileSizeEx
GetFileTime
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentDirectoryW
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapReAlloc
HeapSize
ExitThread
CreateThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FatalAppExitA
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
SetFileTime
LocalFileTimeToFileTime
IsValidCodePage
GetTimeZoneInformation
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
FileTimeToLocalFileTime
SetErrorMode
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetModuleHandleA
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GlobalFlags
SystemTimeToFileTime
FileTimeToSystemTime
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
lstrlenA
lstrcmpA
GetAtomNameW
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
GetStringTypeExW
DeleteFileW
MoveFileW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
SetLastError
CopyFileW
FormatMessageW
LocalFree
MulDiv
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GetFileAttributesW
CreateDirectoryW
WriteFile
lstrcmpiW
LoadLibraryExW
MultiByteToWideChar
FreeLibrary
RaiseException
GetLastError
GetModuleFileNameW
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceW
Sleep
GetCurrentProcessId
WriteProfileStringW
CreateFileW
GetSystemTimeAsFileTime
GetFileSize
CloseHandle
WideCharToMultiByte
GetSystemDirectoryW
LoadLibraryW
lstrlenW
GetVersionExW
lstrcpyW
GetProfileStringW
GetProfileIntW
GetModuleHandleW
GetProcAddress
lstrcpynW
lstrcatW
RtlUnwind
ExitProcess
CreateFileA
SetFileAttributesW
SetEnvironmentVariableA
user32
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
CopyRect
PtInRect
SetWindowPlacement
GetDlgCtrlID
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetFocus
IsWindowEnabled
GetParent
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetWindowTextW
GetSysColor
CharNextW
SendDlgItemMessageW
EnableWindow
GetDlgItem
SetScrollInfo
RegisterHotKey
SetMenu
UnregisterHotKey
LoadMenuW
GetSysColorBrush
GetScrollInfo
SetScrollPos
ScrollWindow
GetDlgItemInt
CheckDlgButton
GetDlgItemTextW
IsDlgButtonChecked
EndDialog
DialogBoxParamW
SetClassLongW
GetClassNameW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
IsChild
WinHelpW
GetMenuItemCount
wsprintfW
RemoveMenu
AppendMenuW
InvalidateRect
SetTimer
UpdateWindow
MessageBoxW
IsWindow
KillTimer
DestroyWindow
CreateDialogParamW
SendMessageW
SetFocus
GetWindowRect
GetClientRect
ClientToScreen
SetWindowPos
EnableMenuItem
CheckMenuItem
GetMenu
GetSubMenu
PostQuitMessage
GetAsyncKeyState
PostMessageW
BeginPaint
GetWindowThreadProcessId
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
CreateDialogIndirectParamW
GetActiveWindow
GetDesktopWindow
InflateRect
GetMenuItemInfoW
SystemParametersInfoW
ValidateRect
GetCursorPos
GetMessageW
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetWindowDC
UnregisterClassW
DestroyIcon
GetDialogBaseUnits
SetRectEmpty
SetCursor
ShowOwnedPopups
DeleteMenu
BringWindowToTop
CreatePopupMenu
SetCapture
LockWindowUpdate
GetDCEx
UnionRect
SetParent
GetSystemMenu
IsRectEmpty
MapVirtualKeyW
GetKeyNameTextW
WindowFromPoint
SetRect
EndPaint
SetDlgItemTextW
SendDlgItemMessageA
RegisterWindowMessageW
CharUpperW
CheckRadioButton
SetDlgItemInt
IsDialogMessageW
ScrollWindowEx
GetSystemMetrics
MoveWindow
DefWindowProcW
PeekMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
WaitMessage
LoadAcceleratorsW
LoadStringW
LoadCursorW
LoadIconW
RegisterClassW
GetDC
ReleaseDC
CreateWindowExW
GetWindowLongW
SetWindowLongW
ShowWindow
SetWindowTextW
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
ReleaseCapture
GetScrollPos
InsertMenuItemW
DestroyMenu
gdi32
CreateBitmap
CreateFontIndirectW
GetTextExtentPoint32W
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocW
PtVisible
RectVisible
GetObjectW
CreateDCW
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateHatchBrush
GetCharWidthW
StretchDIBits
CreateCompatibleBitmap
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetBkColor
GetClipBox
TextOutW
GetDCOrgEx
CopyMetaFileW
GetDeviceCaps
SetBkColor
SetTextColor
ExtTextOutW
PatBlt
CreateSolidBrush
CreateFontW
StretchBlt
CreateCompatibleDC
CreateDIBitmap
BitBlt
DeleteObject
DeleteDC
GetStockObject
GetTextMetricsW
Escape
SelectObject
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
comdlg32
GetOpenFileNameW
GetFileTitleW
advapi32
RegSetValueExW
RegEnumKeyW
RegQueryValueW
RegCreateKeyW
RegOpenKeyW
RegSetValueW
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
shell32
SHBrowseForFolderW
SHGetFileInfoW
ExtractIconW
DragFinish
DragQueryFileW
SHGetPathFromIDListW
ole32
CoTreatAsClass
ReleaseStgMedium
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemAlloc
CoGetMalloc
GetRunningObjectTable
CreateItemMoniker
CreateBindCtx
MkParseDisplayName
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx
OleDuplicateData
CoDisconnectObject
StringFromGUID2
CLSIDFromString
StringFromCLSID
oleaut32
SafeArrayCopy
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SysFreeString
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysStringLen
VarUI4FromStr
comctl32
CreateStatusWindowW
shlwapi
PathRemoveExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
gdiplus
GdipCreateFromHWNDICM
GdipCreateFromHWND
GdipCreateBitmapFromGdiDib
GdipDrawImageRectI
GdipCloneImage
GdipDisposeImage
GdipSaveImageToStream
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDrawImageRect
GdipDeleteGraphics
GdiplusShutdown
GdiplusStartup
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipFree
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
Sections
.text Size: 479KB - Virtual size: 478KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ