Static task
static1
Behavioral task
behavioral1
Sample
8af92a61dc464185f30e69fe153a6080a00dad00247a86da372f33c541918868.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8af92a61dc464185f30e69fe153a6080a00dad00247a86da372f33c541918868.exe
Resource
win10v2004-20220901-en
General
-
Target
8af92a61dc464185f30e69fe153a6080a00dad00247a86da372f33c541918868
-
Size
322KB
-
MD5
cea5b14b1a855c3b6f97f106df8d901f
-
SHA1
ab3d41e213cf5c800ceb76e4a0b2b61b870b76c8
-
SHA256
8af92a61dc464185f30e69fe153a6080a00dad00247a86da372f33c541918868
-
SHA512
0b089cef57215a01f336f049e812d5c48ef5b94d1f8fd319295f2a612a52c16a5bbdcc8b90ca94c66656eca114c6e734af7dcdd8852c004b55642db76a570233
-
SSDEEP
6144:hqMKQ++YaP58G41daXn262YlUH4XRQEvAim+:hq+5YC58D10X2IljBQ8
Malware Config
Signatures
Files
-
8af92a61dc464185f30e69fe153a6080a00dad00247a86da372f33c541918868.exe windows x86
093fdfe6e6565ec5b310de22c53d029a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
DrawMenuBar
DrawTextW
DrawTextExW
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EndMenu
EndPaint
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
MessageBoxA
CharNextW
DrawIconEx
PeekMessageW
RegisterClassExW
PostThreadMessageW
GetMessageW
DefWindowProcW
GetDlgItem
DestroyWindow
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
SetClassLongW
GetClassLongW
SetWindowLongW
GetWindowLongW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
LoadStringW
OpenClipboard
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
InsertMenuItemW
InsertMenuW
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetScrollBarInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassInfoExW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
SHChangeNotify
SHBrowseForFolderW
Shell_NotifyIconW
ShellExecuteW
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoCreateInstance
CoUninitialize
CoInitialize
advapi32
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryInfoKeyW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegQueryValueExW
RegOpenKeyExW
gdi32
SetBrushOrgEx
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
SetDIBColorTable
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
Chord
BitBlt
ArcTo
Arc
AngleArc
AbortDoc
SetDIBits
SetEnhMetaFileBits
SetMapMode
SetPixel
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWinMetaFileBits
SetWindowOrgEx
StartDocW
StartPage
StretchBlt
StretchDIBits
UnrealizeObject
CreateRoundRectRgn
LineTo
SetBkMode
opengl32
glTexCoord4d
glCopyPixels
glMapGrid2f
glGetMapiv
glTexGend
glGetPixelMapusv
glClearColor
dbghelp
SymGetModuleInfoW
SymGetLineNext
SymEnumerateSymbols64
ImagehlpApiVersion
MiniDumpWriteDump
comctl32
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_DragEnter
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ord17
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_Read
ImageList_Write
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_GetImageInfo
_TrackMouseEvent
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
InitializeFlatSB
ImageList_SetOverlayImage
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
TlsSetValue
TlsGetValue
LocalFree
LocalAlloc
Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
BeginUpdateResourceW
CreateDirectoryW
CreateEventW
CreateFileW
CreateFileMappingW
DeleteFileW
EndUpdateResourceW
EnumCalendarInfoW
EnumResourceNamesW
EnumSystemLocalesW
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindResourceW
FormatMessageW
FreeResource
GetCPInfo
GetCPInfoExW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetDateFormatW
GetDiskFreeSpaceW
GetDriveTypeW
GetExitCodeThread
GetFileAttributesW
GetFileAttributesExW
GetFileSize
GetFullPathNameW
GetLocalTime
GetLogicalDriveStringsW
GetLogicalDrives
GetPrivateProfileStringW
GetLongPathNameW
GetSystemDefaultLangID
GetSystemTimes
GetTempPathW
GetThreadLocale
GetThreadPriority
GetTimeZoneInformation
GetVersionExW
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapSize
LoadLibraryW
LoadResource
LocalFileTimeToFileTime
LockResource
MapViewOfFile
MulDiv
IsDebuggerPresent
QueryDosDeviceW
ReadFile
RemoveDirectoryW
ResetEvent
ResumeThread
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetThreadPriority
SizeofResource
SuspendThread
SystemTimeToFileTime
TryEnterCriticalSection
UnmapViewOfFile
UpdateResourceW
VirtualProtect
VirtualQueryEx
WaitForMultipleObjectsEx
WaitForSingleObject
WritePrivateProfileStringW
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
LCMapStringW
GetFileType
TlsFree
TlsAlloc
IsValidCodePage
GetOEMCP
FlushFileBuffers
SetUnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
SetEnvironmentVariableA
TerminateThread
GetShortPathNameW
CopyFileW
HeapReAlloc
CreateFileA
SetStdHandle
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
GetProcessHeap
InitializeCriticalSectionAndSpinCount
WriteConsoleA
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
WriteFile
GetStdHandle
CloseHandle
GetConsoleOutputCP
WriteConsoleW
CompareStringA
GetExitCodeProcess
CreateProcessW
SetFileAttributesA
MoveFileA
GetTempPathA
GetModuleHandleA
GetFileAttributesA
GetCurrentDirectoryA
GetCommandLineA
FindResourceA
ExpandEnvironmentStringsA
DeleteFileA
CreateProcessA
CreateFileMappingA
CopyFileA
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
CreateDirectoryA
SetCurrentDirectoryA
InterlockedIncrement
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
GetStartupInfoW
GetProfileStringW
GetStartupInfoA
EnumSystemCodePagesW
FindClose
SetCommConfig
BackupSeek
FatalAppExitW
BuildCommDCBAndTimeoutsW
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ