Static task
static1
Behavioral task
behavioral1
Sample
85b6d30327436efc67bc5007646d0a1e3794e98d42cfb9af2156453d404830c6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
85b6d30327436efc67bc5007646d0a1e3794e98d42cfb9af2156453d404830c6.exe
Resource
win10v2004-20221111-en
General
-
Target
85b6d30327436efc67bc5007646d0a1e3794e98d42cfb9af2156453d404830c6
-
Size
340KB
-
MD5
b88dc27aa0d1c4ae28fcabfa05a7abaa
-
SHA1
a5111c4340984dc51aa911c292c83850a356aa3f
-
SHA256
85b6d30327436efc67bc5007646d0a1e3794e98d42cfb9af2156453d404830c6
-
SHA512
682cc7ba30ed7f51e2d347ef15e4cf739a854f81a5011987424542226056c872759bd66a2dc600a65f28b12391e90c9bd81b20e9924aa87e7401c748a432776b
-
SSDEEP
6144:t04e9l1GsUHF4m8b7qs35KBC3070k95KBKKtyx:u4sy7HFj8b93UBC30ItBK+G
Malware Config
Signatures
Files
-
85b6d30327436efc67bc5007646d0a1e3794e98d42cfb9af2156453d404830c6.exe windows x86
7713d8dd7dacee3e3bff69a715e4a22a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
UnlockFile
GetProcessVersion
FindFirstFileA
CreateEventA
GetFileType
GetUserDefaultLCID
GetCurrentProcessId
SetFilePointer
LocalReAlloc
CreateDirectoryA
LoadLibraryA
SetLastError
VerLanguageNameA
GlobalSize
CreatePipe
GlobalGetAtomNameA
lstrcmpiA
FormatMessageA
FlushFileBuffers
FindNextFileA
GetShortPathNameA
GetModuleFileNameW
SystemTimeToFileTime
GetProcessHeap
ReadFile
HeapSize
SetThreadPriority
GlobalFree
CompareStringA
GlobalReAlloc
SetFileAttributesA
ExitProcess
GetDateFormatA
TerminateThread
EnterCriticalSection
LocalLock
GetACP
GetLocalTime
IsValidLocale
GlobalMemoryStatus
GetTimeZoneInformation
SleepEx
InterlockedExchange
lstrcmpA
OpenProcess
CompareFileTime
MultiByteToWideChar
HeapDestroy
GetSystemDirectoryA
CreateFileA
TerminateProcess
GetWindowsDirectoryA
GetTickCount
LeaveCriticalSection
SetEndOfFile
GetStartupInfoA
TlsAlloc
CreateFileW
DeleteCriticalSection
FindFirstFileW
GetFullPathNameA
GetModuleFileNameA
GetProcAddress
CreateMutexW
HeapCreate
SearchPathA
FindNextFileW
UnhandledExceptionFilter
IsValidCodePage
SetConsoleMode
GlobalUnlock
WaitForSingleObject
FatalAppExitA
SizeofResource
GetFileTime
GetThreadLocale
ResetEvent
LockFile
FileTimeToSystemTime
SetStdHandle
MulDiv
TlsSetValue
GetModuleHandleA
GetVolumeInformationA
SetUnhandledExceptionFilter
VirtualProtect
GetLocaleInfoW
TlsFree
LocalFree
GetTempPathA
FreeEnvironmentStringsA
DeleteFileA
FileTimeToLocalFileTime
WriteConsoleA
GetPrivateProfileStringA
GetLogicalDrives
LoadLibraryExA
GetCurrentThread
GetStdHandle
InitializeCriticalSection
LockResource
GetDiskFreeSpaceA
FreeResource
InterlockedDecrement
GetSystemInfo
GetCommandLineW
GetOEMCP
InterlockedIncrement
OpenMutexA
GetProfileStringA
SystemTimeToTzSpecificLocalTime
GetCurrentDirectoryA
GetSystemTime
VirtualAlloc
CreateProcessA
GetCommandLineA
GetStartupInfoW
GlobalDeleteAtom
EnumSystemLocalesA
GetUserDefaultLangID
IsBadCodePtr
GetEnvironmentStringsW
WritePrivateProfileStringW
lstrlenA
GetStringTypeW
WritePrivateProfileStringA
GetStringTypeA
QueryPerformanceCounter
CopyFileW
GlobalHandle
LocalAlloc
GlobalFlags
FreeEnvironmentStringsW
FindClose
RtlUnwind
GetFileInformationByHandle
GetLastError
SetHandleCount
HeapAlloc
GetFileSize
CloseHandle
GetVersionExW
GetPrivateProfileSectionNamesA
GetComputerNameW
lstrlenW
SetHandleInformation
LCMapStringA
GetLocaleInfoA
GetTimeFormatA
LoadLibraryW
MoveFileA
lstrcpyA
LCMapStringW
lstrcmpW
SetEnvironmentVariableA
lstrcpynW
WaitForMultipleObjects
lstrcatA
GetFileAttributesA
GetTempPathW
GetCurrentThreadId
IsBadReadPtr
ReleaseMutex
GetDiskFreeSpaceExA
GetVersion
GetCPInfo
VirtualQuery
GlobalAddAtomA
EnumResourceLanguagesA
GetConsoleMode
GetPrivateProfileIntA
GetTempFileNameA
TlsGetValue
FindResourceA
Sleep
SetEvent
GetProfileIntA
GetEnvironmentVariableA
CreateMutexA
LocalFileTimeToFileTime
DeviceIoControl
FreeLibrary
GetVolumePathNameA
GetCurrentProcess
GetEnvironmentStrings
GetStringTypeExA
CompareStringW
GlobalLock
GetSystemTimeAsFileTime
GetDriveTypeA
GetSystemDefaultLangID
VirtualFree
IsBadWritePtr
GlobalFindAtomA
WriteFile
RaiseException
DuplicateHandle
lstrcpynA
SuspendThread
HeapReAlloc
GetVersionExA
WideCharToMultiByte
advapi32
AccessCheck
RegCreateKeyExW
RegEnumValueA
DeregisterEventSource
CryptGetHashParam
SetEntriesInAclW
CryptAcquireContextA
OpenThreadToken
GetUserNameA
FreeSid
RegisterServiceCtrlHandlerA
RegCloseKey
OpenServiceA
GetAclInformation
OpenProcessToken
RegEnumKeyA
GetLengthSid
RegEnumKeyW
RegisterEventSourceA
RegEnumKeyExW
RegDeleteValueW
RegQueryInfoKeyA
CryptDecrypt
CryptReleaseContext
CryptDestroyHash
RegQueryValueExA
RegCreateKeyW
SetSecurityDescriptorDacl
RegDeleteKeyW
GetUserNameW
CryptDeriveKey
InitializeSecurityDescriptor
RegDeleteValueA
ControlService
SetServiceStatus
RegCreateKeyExA
CryptEncrypt
AllocateAndInitializeSid
RegSetValueExA
StartServiceCtrlDispatcherA
CryptCreateHash
RegDeleteKeyA
RegQueryValueExW
CopySid
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueA
RegOpenKeyExA
DeleteAce
RegQueryInfoKeyW
GetSecurityDescriptorDacl
CryptDestroyKey
DuplicateToken
RegCreateKeyA
GetTokenInformation
RegOpenKeyA
CryptHashData
EqualSid
ReportEventA
GetNamedSecurityInfoA
ImpersonateSelf
SetNamedSecurityInfoA
comctl32
ImageList_DragEnter
ImageList_GetIcon
ImageList_Destroy
ImageList_Remove
ImageList_Duplicate
DestroyPropertySheetPage
ImageList_GetImageCount
ImageList_Draw
ImageList_GetBkColor
ImageList_DrawEx
CreateToolbarEx
ImageList_SetBkColor
PropertySheetA
ImageList_Read
ImageList_Write
ImageList_DragMove
ImageList_GetIconSize
ord17
ImageList_Add
ImageList_SetOverlayImage
ImageList_Create
ImageList_Replace
ImageList_SetImageCount
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_AddMasked
CreatePropertySheetPageA
ImageList_LoadImageA
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_DragLeave
ImageList_EndDrag
user32
LoadStringA
GetScrollInfo
LoadBitmapA
CharNextW
ModifyMenuW
GetMessagePos
CheckMenuItem
GetClassInfoExA
TrackPopupMenu
SendMessageW
RegisterClassExA
PostMessageW
GetDesktopWindow
wsprintfW
SetWindowTextW
GetScrollRange
GetSubMenu
MapWindowPoints
GetKeyboardState
GetWindow
GetSysColorBrush
DdeInitializeA
GetClassLongA
MessageBeep
MessageBoxA
DrawEdge
IsDialogMessageA
GetWindowTextLengthW
ShowScrollBar
MapVirtualKeyA
DispatchMessageA
SetCapture
UpdateWindow
SetForegroundWindow
GetWindowTextA
DefMDIChildProcA
FrameRect
ScreenToClient
ExcludeUpdateRgn
GetMenuItemCount
PeekMessageA
DrawTextA
PostQuitMessage
TranslateMDISysAccel
EmptyClipboard
BeginPaint
EqualRect
DdeUninitialize
WinHelpW
IsRectEmpty
SendNotifyMessageA
SetMenuDefaultItem
AppendMenuA
IsWindowVisible
GetWindowPlacement
GetLastActivePopup
GetAsyncKeyState
EnableMenuItem
CharUpperW
EnableScrollBar
GetSystemMetrics
IsIconic
TrackPopupMenuEx
UnhookWindowsHookEx
IsMenu
IsDialogMessageW
SystemParametersInfoA
SetRect
LockWindowUpdate
MessageBoxW
IsZoomed
GetMenuStringW
LoadIconA
RedrawWindow
GetMonitorInfoW
GetMenuCheckMarkDimensions
CallWindowProcA
KillTimer
BeginDeferWindowPos
GetClassInfoW
GetMenuItemID
GetClassInfoA
SetClassLongW
LoadBitmapW
IsWindowEnabled
PostThreadMessageA
GetDCEx
GetMenuItemInfoW
IsWindow
SetFocus
RegisterClipboardFormatW
RegisterWindowMessageA
GetDC
CreatePopupMenu
GetClientRect
GetDoubleClickTime
ReleaseCapture
SystemParametersInfoW
GetDlgItemInt
ShowCaret
OpenClipboard
WaitForInputIdle
DdeGetLastError
WaitMessage
SetTimer
GetActiveWindow
InsertMenuA
MoveWindow
DeferWindowPos
ModifyMenuA
LoadAcceleratorsA
SetWindowTextA
EnumChildWindows
UnregisterClassW
UnionRect
GetDlgCtrlID
IsChild
DestroyMenu
SetWindowRgn
GetNextDlgTabItem
SetWindowPos
IsDlgButtonChecked
SetWindowsHookExW
InflateRect
GetForegroundWindow
GetDlgItem
EndDialog
CharToOemA
CallNextHookEx
CheckDlgButton
DestroyWindow
GetIconInfo
GetParent
SetDlgItemTextW
SetWindowPlacement
DrawTextW
HideCaret
GetCursorPos
CopyAcceleratorTableA
DestroyAcceleratorTable
LoadMenuA
DrawIcon
GetWindowThreadProcessId
DeleteMenu
WindowFromPoint
CharUpperA
GetMenuItemInfoA
GetMessageA
GrayStringA
CheckRadioButton
GetSysColor
GetClassLongW
GetNextDlgGroupItem
InvalidateRect
InsertMenuItemA
LoadAcceleratorsW
ClientToScreen
ShowWindow
GetTabbedTextExtentA
SendMessageA
ReuseDDElParam
DrawFocusRect
EndPaint
IsWindowUnicode
DdeClientTransaction
LoadCursorA
MsgWaitForMultipleObjects
DdeDisconnect
RemovePropA
SetScrollPos
AdjustWindowRectEx
CallWindowProcW
GetMenuStringA
OffsetRect
GetTopWindow
CopyIcon
SetActiveWindow
CloseClipboard
SendDlgItemMessageA
LoadImageA
BringWindowToTop
SetMenuItemBitmaps
WindowFromDC
SendInput
SetWindowsHookExA
RegisterClipboardFormatA
GrayStringW
GetCapture
SetDlgItemTextA
GetWindowLongA
GetScrollPos
TabbedTextOutW
ValidateRect
wvsprintfA
UnregisterClassA
GetFocus
DefMDIChildProcW
wsprintfA
EndDeferWindowPos
DrawIconEx
GetWindowLongW
PtInRect
RegisterClassW
DefDlgProcA
GetClassNameA
SetPropA
GetMenu
GetMenuState
GetWindowRect
GetSystemMenu
IsClipboardFormatAvailable
ReleaseDC
SetMenuItemInfoA
IntersectRect
PostMessageA
DrawFrameControl
SetPropW
SetParent
CheckMenuRadioItem
GetUpdateRect
GetWindowTextLengthA
GetMessageTime
SetWindowLongA
CopyRect
AdjustWindowRect
TranslateAcceleratorA
CreateWindowExA
CreateWindowExW
EnableWindow
CreateCaret
AttachThreadInput
DestroyCursor
TranslateMessage
DefWindowProcA
RegisterClassA
DrawMenuBar
PeekMessageW
GetPropA
SetCursor
GetKeyState
ShowCursor
SetMenu
DefWindowProcW
ChildWindowFromPoint
gdi32
EndPage
CreateICW
UnrealizeObject
RectVisible
CreateRectRgn
CopyMetaFileA
ExtSelectClipRgn
SetPolyFillMode
SetBitmapBits
SetROP2
AnimatePalette
GetWindowOrgEx
PatBlt
CreateRectRgnIndirect
CreateDIBPatternBrushPt
CreatePatternBrush
CreateBitmap
EnumMetaFile
GetDIBits
DeleteObject
ExtTextOutW
StartDocA
GetFontData
EndDoc
CreateICA
GetCharWidthFloatA
SetViewportOrgEx
GetObjectA
GetMapMode
PlgBlt
CreatePolyPolygonRgn
SetWinMetaFileBits
GetPixel
TextOutA
OffsetViewportOrgEx
CombineRgn
SetDIBits
GdiFlush
GetTextMetricsW
GetGlyphOutlineA
InvertRgn
CreateFontA
SetTextJustification
GetTextFaceW
GetDeviceCaps
GetTextExtentPoint32W
CloseEnhMetaFile
CreateDIBSection
PathToRegion
CreateMetaFileA
GetClipRgn
GetKerningPairsA
CloseFigure
SetDIBitsToDevice
PolyPolygon
GetCharABCWidthsFloatA
GetCurrentPositionEx
GetTextColor
FillRgn
CreateEllipticRgn
SetPixelV
GetStretchBltMode
GetTextExtentPoint32A
EnumFontFamiliesExW
RealizePalette
CreatePen
CreateDIBitmap
EnumObjects
CreateFontIndirectA
SelectObject
AngleArc
PolyDraw
GetTextMetricsA
CreateDiscardableBitmap
SelectClipRgn
BeginPath
ScaleWindowExtEx
SetBkColor
GetTextFaceA
EqualRgn
UpdateColors
SetViewportExtEx
ExtTextOutA
GetBitmapDimensionEx
SetMapperFlags
StartPage
Pie
BitBlt
StrokeAndFillPath
TextOutW
CreateRoundRectRgn
CreateEnhMetaFileA
SetBrushOrgEx
GetBrushOrgEx
Polygon
SetPaletteEntries
CreateFontIndirectW
GetPolyFillMode
SetMiterLimit
OffsetRgn
ArcTo
GetPaletteEntries
CreateHatchBrush
GetRgnBox
GetStockObject
AbortPath
GetObjectW
CreateHalftonePalette
GetDIBColorTable
GetCurrentObject
DeleteDC
Polyline
RectInRegion
EnumEnhMetaFile
GetROP2
ExtCreateRegion
ScaleViewportExtEx
ExtCreatePen
SetWindowExtEx
GetCharWidthA
Ellipse
RestoreDC
GetViewportOrgEx
EnumFontFamiliesExA
GetColorAdjustment
SetColorAdjustment
CreateDCA
EndPath
GetMiterLimit
GetNearestPaletteIndex
GetAspectRatioFilterEx
SetRectRgn
PolyPolyline
GetBkColor
ExtEscape
WidenPath
SetMapMode
CreatePolygonRgn
GetCharABCWidthsA
GetTextExtentPointW
SetBitmapDimensionEx
LPtoDP
PtVisible
GdiComment
GetBkMode
GetObjectType
GetTextExtentPointA
ResetDCA
GetBitmapBits
AbortDoc
SetPixel
GetWindowExtEx
MoveToEx
GetBoundsRect
StretchDIBits
ExtFloodFill
GetMetaFileA
GetArcDirection
Chord
SaveDC
CreatePalette
PlayMetaFileRecord
DeleteEnhMetaFile
Escape
CreateCompatibleBitmap
ModifyWorldTransform
GetNearestColor
GetClipBox
CreateSolidBrush
DPtoLP
GetEnhMetaFileBits
FillPath
ExcludeClipRect
SetStretchBltMode
SelectPalette
PtInRegion
GetTextCharsetInfo
SetWindowOrgEx
GetEnhMetaFileA
SetTextColor
OffsetWindowOrgEx
SetBkMode
StretchBlt
ResizePalette
SetAbortProc
DrawEscape
RoundRect
CreateCompatibleDC
CloseMetaFile
GetSystemPaletteEntries
Rectangle
SetTextAlign
IntersectClipRect
GetViewportExtEx
Arc
SelectClipPath
FrameRgn
oleaut32
LoadTypeLi
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ