Static task
static1
Behavioral task
behavioral1
Sample
5eaea835b8a41aeb1cced801fa374ffb8154c5788562bb0add083636ed0a75b8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5eaea835b8a41aeb1cced801fa374ffb8154c5788562bb0add083636ed0a75b8.exe
Resource
win10v2004-20221111-en
General
-
Target
5eaea835b8a41aeb1cced801fa374ffb8154c5788562bb0add083636ed0a75b8
-
Size
39KB
-
MD5
88fae49393788e8fa8a0d52e38b786e4
-
SHA1
bcac8dcac6275ea3b0b31914116b6b8c8e46bf8c
-
SHA256
5eaea835b8a41aeb1cced801fa374ffb8154c5788562bb0add083636ed0a75b8
-
SHA512
a61a5905a32e9e702e51bfcf2b3e310e736a44aaab673de4ff1834ec536c5cefb783221bd29e455c14ccc93fa0a1783fd95cf37105d3dfbf3e78f9b17628da17
-
SSDEEP
768:lrQwoJcMIyJSqqmyqLYEFv5ZVNhKi2LfS4SI/I+SCeWsG:llMbJSqqIccZ7hr4SI/IHq
Malware Config
Signatures
Files
-
5eaea835b8a41aeb1cced801fa374ffb8154c5788562bb0add083636ed0a75b8.exe windows x86
fd82bc28c990d6f33ba7a005f959ae03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtCreateKey
advapi32
RegQueryValueW
RegDeleteValueW
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyW
GetFileSecurityW
RegSetValueW
RegDeleteKeyW
RegCreateKeyW
SetFileSecurityW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegOpenKeyW
gdi32
SetMapperFlags
StretchDIBits
GetWindowExtEx
SetWindowOrgEx
PolyDraw
GetPolyFillMode
GetDeviceCaps
DeleteMetaFile
Rectangle
GetPaletteEntries
ExtTextOutW
GetTextFaceW
GetClipBox
SetRectRgn
SetAbortProc
PolyBezierTo
DeleteObject
SetViewportOrgEx
PtVisible
SetROP2
EndDoc
GetWindowOrgEx
SelectPalette
EndPage
CreatePalette
SetViewportExtEx
CreateCompatibleBitmap
GetStockObject
ArcTo
SaveDC
CreateRectRgn
LineTo
LPtoDP
CreateFontW
SetStretchBltMode
TextOutW
PlayMetaFile
SetColorAdjustment
StartPage
SetTextAlign
SetMapMode
Escape
GetTextColor
RectVisible
CreateHatchBrush
SetWindowExtEx
ScaleViewportExtEx
BitBlt
AbortDoc
GetTextMetricsW
SetArcDirection
PolylineTo
SetBkColor
EnumFontFamiliesW
CreatePen
SelectClipPath
CreateSolidBrush
CloseMetaFile
CreateMetaFileW
SelectObject
GetROP2
IntersectClipRect
CreatePatternBrush
CreateRectRgnIndirect
GetCurrentPositionEx
PatBlt
CreateCompatibleDC
ExcludeClipRect
CombineRgn
GetObjectW
GetCharWidthW
GetBkMode
CopyMetaFileW
DeleteDC
GetStretchBltMode
CreateBitmap
PlayMetaFileRecord
MoveToEx
CreateDIBPatternBrushPt
RealizePalette
GetTextExtentPoint32A
RestoreDC
OffsetRgn
GetMapMode
SelectClipRgn
UnrealizeObject
ExtSelectClipRgn
SetTextColor
SetTextJustification
SetBrushOrgEx
SetBkMode
GetObjectType
OffsetWindowOrgEx
DPtoLP
OffsetViewportOrgEx
GetBkColor
GetNearestColor
CreateFontIndirectW
GetTextExtentPoint32W
GetClipRgn
SetPolyFillMode
GetViewportOrgEx
GetViewportExtEx
ScaleWindowExtEx
SetTextCharacterExtra
OffsetClipRgn
EnumMetaFile
GetTextAlign
GetPixel
StartDocW
CreateDCW
ExtCreatePen
EnumFontFamiliesExW
ws2_32
WSAGetLastError
kernel32
lstrcmpiA
UnhandledExceptionFilter
WideCharToMultiByte
IsDBCSLeadByte
GetCurrentThread
GetVolumeInformationW
SetUnhandledExceptionFilter
UnlockFile
GetFileSize
lstrlenA
WritePrivateProfileStringW
SetFileTime
OutputDebugStringW
GlobalLock
GetProcAddress
FindNextFileW
InitializeCriticalSection
LocalReAlloc
DuplicateHandle
FreeLibrary
GetShortPathNameW
FileTimeToLocalFileTime
ReadFile
LockResource
SetFileAttributesW
TlsAlloc
ReleaseMutex
CreateFileW
LocalFileTimeToFileTime
FileTimeToSystemTime
GlobalReAlloc
GetSystemTimeAsFileTime
SetFilePointer
GetPrivateProfileIntW
CopyFileW
SetErrorMode
lstrcatA
lstrcmpiW
DelayLoadFailureHook
LocalLock
GetFileTime
WaitForMultipleObjects
WriteFile
GetDiskFreeSpaceW
SetEndOfFile
ReleaseSemaphore
GlobalSize
GlobalHandle
TlsGetValue
GlobalDeleteAtom
lstrcatW
GlobalGetAtomNameW
InterlockedDecrement
GetModuleHandleW
WaitForSingleObject
GlobalUnlock
lstrlenW
ResumeThread
LeaveCriticalSection
DeleteCriticalSection
GetTempPathW
GetCurrentThreadId
GetProfileIntW
LoadLibraryW
EnterCriticalSection
GetFullPathNameW
LocalFree
GetProcessVersion
FindFirstFileW
GetTempFileNameW
lstrcpynW
VirtualAlloc
GetFileAttributesW
LocalAlloc
GetSystemDirectoryA
GetModuleFileNameW
GetModuleHandleA
SetEvent
GetUserDefaultLCID
LoadResource
GlobalFree
CloseHandle
GetTickCount
GlobalAlloc
SearchPathW
SetLastError
Sleep
VirtualQuery
TerminateProcess
CreateMutexW
GetPrivateProfileStringW
MoveFileW
GetCurrentProcessId
GlobalFindAtomW
FreeResource
SystemTimeToFileTime
DeleteFileW
FindResourceExW
LocalUnlock
lstrcpynA
FindResourceW
GlobalAddAtomW
LockFile
MulDiv
LoadLibraryA
SetThreadPriority
lstrcmpA
SizeofResource
LoadLibraryExA
FlushFileBuffers
GetVersionExA
lstrcpyW
GetVersion
VirtualProtect
TlsFree
GetSystemInfo
FindClose
CreateSemaphoreW
MultiByteToWideChar
GetStringTypeExW
GetCurrentProcess
lstrcmpW
GetCurrentDirectoryW
InterlockedIncrement
GetLastError
GetVersionExW
TlsSetValue
CreateEventW
SuspendThread
QueryPerformanceCounter
InterlockedCompareExchange
GetThreadLocale
lstrcpyA
GlobalFlags
FormatMessageW
wininet
FtpOpenFileW
InternetQueryOptionW
FtpGetCurrentDirectoryW
InternetConnectW
GopherCreateLocatorW
InternetSetStatusCallbackW
FtpDeleteFileW
HttpEndRequestW
InternetQueryDataAvailable
InternetReadFile
InternetSetOptionExW
HttpAddRequestHeadersW
GopherGetAttributeW
HttpSendRequestExW
FtpGetFileW
InternetOpenW
FtpFindFirstFileW
FtpCreateDirectoryW
InternetOpenUrlW
FtpRemoveDirectoryW
InternetCloseHandle
InternetCanonicalizeUrlW
HttpSendRequestW
HttpOpenRequestW
InternetWriteFile
InternetSetFilePointer
FtpPutFileW
InternetGetCookieW
GopherFindFirstFileW
InternetGetLastResponseInfoW
FtpSetCurrentDirectoryW
InternetCrackUrlW
GopherOpenFileW
HttpQueryInfoW
FtpRenameFileW
InternetErrorDlg
InternetFindNextFileW
InternetSetCookieW
user32
BringWindowToTop
SetForegroundWindow
WinHelpW
DeferWindowPos
GetMenu
GetWindowLongW
IsChild
GetTopWindow
DispatchMessageW
GetScrollPos
AppendMenuW
GetScrollInfo
TranslateMDISysAccel
SetMenu
GetWindowTextW
CheckMenuItem
GetParent
ClipCursor
SetTimer
WindowFromPoint
InvalidateRgn
CountClipboardFormats
GrayStringW
InvertRect
IsDialogMessageW
GetTabbedTextExtentA
SystemParametersInfoW
MsgWaitForMultipleObjects
GetSysColorBrush
SetRectEmpty
GetActiveWindow
LockWindowUpdate
AdjustWindowRectEx
WaitMessage
RedrawWindow
UnhookWindowsHookEx
ClientToScreen
GetScrollRange
GetAsyncKeyState
InflateRect
MapDialogRect
GetFocus
GetDCEx
IsClipboardFormatAvailable
PeekMessageW
TrackPopupMenu
SetFocus
GetMenuCheckMarkDimensions
SetCursor
LoadAcceleratorsW
DrawTextW
CopyAcceleratorTableW
SetWindowPos
GetMessageW
LoadBitmapW
CheckDlgButton
EnableWindow
PtInRect
RemoveMenu
CharUpperW
InSendMessage
PostQuitMessage
SystemParametersInfoA
SetActiveWindow
GetMenuStringW
PostMessageW
IsIconic
GetNextDlgGroupItem
IsWindow
GetWindow
GetDlgCtrlID
GetKeyState
CreateWindowExW
GetWindowTextLengthW
ScrollWindowEx
LoadIconW
GetCapture
RemovePropW
IsRectEmpty
PostThreadMessageW
UnregisterClassW
SendDlgItemMessageA
ShowOwnedPopups
GetWindowDC
LoadMenuW
TabbedTextOutW
CopyRect
SetWindowContextHelpId
UnpackDDElParam
CreateMenu
SetCursorPos
GetWindowRect
GetClassNameW
IntersectRect
SetWindowsHookExW
SetCapture
SetPropW
GetDesktopWindow
SetScrollInfo
SetDlgItemTextW
GetLastActivePopup
OffsetRect
GetMenuItemCount
DefWindowProcW
DrawMenuBar
RegisterWindowMessageW
GetTabbedTextExtentW
DestroyIcon
ShowScrollBar
GetDlgItemTextW
BeginPaint
DestroyMenu
CharNextW
EnableMenuItem
MoveWindow
EnumChildWindows
DestroyWindow
CallNextHookEx
InsertMenuW
KillTimer
ModifyMenuW
GetClassInfoW
GetPropW
GetWindowThreadProcessId
GetClientRect
BeginDeferWindowPos
ScrollWindow
SetMenuItemBitmaps
GetCursorPos
GetForegroundWindow
GetSubMenu
EndDialog
GetSystemMetrics
MessageBoxW
SetWindowLongW
DestroyCursor
RegisterClassW
FrameRect
TranslateAcceleratorW
MapWindowPoints
GetDC
GetDlgItemInt
SetDlgItemInt
CheckRadioButton
FillRect
DefFrameProcW
ReleaseCapture
UpdateWindow
GetSystemMenu
GetWindowPlacement
GetMenuItemID
SetRect
IsWindowVisible
ReuseDDElParam
MessageBoxA
IsZoomed
WindowFromDC
CreateDialogIndirectParamW
wvsprintfW
RegisterClipboardFormatW
GetDialogBaseUnits
EndPaint
IsWindowEnabled
LoadCursorW
ReleaseDC
SetParent
SetScrollPos
wsprintfW
SetScrollRange
TranslateMessage
UnionRect
LoadStringW
GetMenuState
InvalidateRect
EqualRect
SetWindowTextW
EndDeferWindowPos
IsDlgButtonChecked
SendMessageW
GetMessagePos
GetMessageTime
FindWindowW
SendDlgItemMessageW
MessageBeep
ScreenToClient
GetNextDlgTabItem
ValidateRect
DrawFocusRect
DefMDIChildProcW
ShowWindow
GetSysColor
CallWindowProcW
DrawEdge
DeleteMenu
SetWindowPlacement
GetDlgItem
adsldpc
ADsEnumClasses
ole32
OleCreateLinkFromData
StgIsStorageFile
OleCreateStaticFromData
GetRunningObjectTable
CreateItemMoniker
OleGetClipboard
OleInitialize
OleCreate
OleUninitialize
CoInitialize
CoGetMalloc
OleRun
OleDestroyMenuDescriptor
OleFlushClipboard
OleLockRunning
OleSetMenuDescriptor
CreateFileMoniker
ReadClassStg
CreateDataCache
CoUninitialize
CoTreatAsClass
StringFromGUID2
IsAccelerator
StgCreateDocfile
OleRegEnumVerbs
DoDragDrop
CoRevokeClassObject
OleLoadFromStream
OleCreateFromFile
StringFromCLSID
StgOpenStorage
CoRegisterMessageFilter
CoGetClassObject
CoDisconnectObject
OleCreateFromData
CoCreateInstance
WriteFmtUserTypeStg
CreateStreamOnHGlobal
ReadFmtUserTypeStg
RegisterDragDrop
OleQueryLinkFromData
WriteClassStg
OleSaveToStream
ReadClassStm
OleRegGetMiscStatus
CoLockObjectExternal
OleSave
SetConvertStg
RevokeDragDrop
OleLoad
ReleaseStgMedium
StgCreateDocfileOnILockBytes
CreateDataAdviseHolder
OleSetClipboard
OleCreateLinkToFile
OleGetIconOfClass
CoTaskMemFree
CreateGenericComposite
OleRegGetUserType
CreateOleAdviseHolder
CLSIDFromString
OleDuplicateData
CLSIDFromProgID
OleSetContainedObject
CoFreeUnusedLibraries
OleIsRunning
OleCreateMenuDescriptor
CreateILockBytesOnHGlobal
CoRegisterClassObject
CreateBindCtx
CoTaskMemAlloc
GetHGlobalFromILockBytes
OleQueryCreateFromData
GetClassFile
OleTranslateAccelerator
OleIsCurrentClipboard
WriteClassStm
StgOpenStorageOnILockBytes
msvcrt
__doserrno
__wargv
_wcsrev
clearerr
iswspace
ftell
_wsplitpath
_except_handler3
fflush
fwrite
_CxxThrowException
_fdopen
_beginthreadex
_expand
malloc
wcsrchr
_itow
__CxxFrameHandler
wcstoul
swprintf
_onexit
wcschr
modf
_wfullpath
wcsstr
fseek
wcsncpy
gmtime
_msize
_purecall
_get_osfhandle
wcscpy
wcstol
memmove
free
__argc
_wcslwr
wcspbrk
_snwprintf
floor
fread
__dllonexit
wcsftime
fclose
wcscmp
_ultow
iswdigit
vswprintf
abort
time
wcstod
_adjust_fdiv
localtime
_initterm
wcslen
_wcsdup
_endthreadex
_ltow
ceil
realloc
_wtol
_wtoi
mktime
wcsncmp
wcsspn
fputws
_wcsupr
calloc
fgetws
_open_osfhandle
_wcsnicmp
wcscspn
Sections
.textbss Size: 512B - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE