Static task
static1
Behavioral task
behavioral1
Sample
c3527be1116a67acfc06459c24d5f785be7619ba21b56acc9574c870fba1ec11.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3527be1116a67acfc06459c24d5f785be7619ba21b56acc9574c870fba1ec11.exe
Resource
win10v2004-20221111-en
General
-
Target
c3527be1116a67acfc06459c24d5f785be7619ba21b56acc9574c870fba1ec11
-
Size
896KB
-
MD5
7776397a2d47b4802940e0f164dcdc9a
-
SHA1
c57fc1453304a2c21b327cddbfe0b1be45514cae
-
SHA256
c3527be1116a67acfc06459c24d5f785be7619ba21b56acc9574c870fba1ec11
-
SHA512
1aab3a10f02077c7a7181ad93e49cd697417c7e2c06c5d20dedb8a1e8834c51014b73fc459221667a2c9739dbbf6cfa1cb3580508f17eed6e0d9410285b3a772
-
SSDEEP
24576:/GudaYy3Ev/b/eSCuUIIBM3+elDZgE92Au:S38b/eSQeVZgE92
Malware Config
Signatures
Files
-
c3527be1116a67acfc06459c24d5f785be7619ba21b56acc9574c870fba1ec11.exe windows x86
2ab5cd07674e23c339e7ba13a1fcbcee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ReleaseCapture
SetRect
GetDC
CharUpperA
DestroyAcceleratorTable
DefWindowProcA
DestroyCursor
MapDialogRect
GetDesktopWindow
PeekMessageA
FillRect
GetNextDlgTabItem
GetMenuItemInfoA
BringWindowToTop
GetScrollInfo
LoadIconA
GetWindowLongA
LoadIconW
DrawEdge
GetCaretPos
ShowOwnedPopups
GetClassNameW
IsRectEmpty
MapVirtualKeyW
EnumWindows
OffsetRect
ClientToScreen
IsWindow
GetMenuState
GetActiveWindow
CharNextA
WindowFromPoint
SetTimer
SendMessageW
SetClipboardData
CloseDesktop
ReleaseDC
wsprintfW
UnregisterClassW
DdePostAdvise
GetMenu
GetMessageA
SetDlgItemInt
PostQuitMessage
GetMessageTime
ScreenToClient
SetScrollRange
CreateDialogParamA
UnhookWindowsHookEx
DlgDirSelectComboBoxExA
LoadImageA
PostThreadMessageW
LoadMenuIndirectA
GetClassInfoA
SetActiveWindow
ValidateRgn
wsprintfA
GetMenuItemInfoW
CreateWindowExA
RemovePropA
SendMessageA
IsDialogMessageA
GetWindowRect
UnpackDDElParam
SetCursor
MoveWindow
DrawFocusRect
GetDlgItemTextA
KillTimer
TranslateMessage
GetMenuItemID
RegisterClassA
MapVirtualKeyA
InflateRect
UnionRect
MessageBeep
GetUpdateRgn
SetMenu
wvsprintfA
CallWindowProcA
GetKeyboardState
GrayStringA
GetWindowDC
GetCapture
SetWindowPos
ModifyMenuA
RegisterWindowMessageW
IsWindowEnabled
PtInRect
GetMenuCheckMarkDimensions
ModifyMenuW
GetDCEx
ChildWindowFromPoint
AppendMenuA
PostThreadMessageA
GetMessagePos
GetKeyNameTextA
GetWindowLongW
DefWindowProcW
GetIconInfo
GetMessageW
GetClassInfoW
GetClipboardData
SetMenuItemInfoA
GetScrollPos
GetWindowThreadProcessId
SetWindowContextHelpId
GetAsyncKeyState
GetWindowTextLengthA
ArrangeIconicWindows
DeleteMenu
CheckDlgButton
ExcludeUpdateRgn
WinHelpA
DlgDirSelectExA
SetWindowTextW
GetPropW
DrawIconEx
CreateDialogIndirectParamW
GetSystemMenu
RemoveMenu
EnumChildWindows
SetPropW
LoadStringW
EnableWindow
RedrawWindow
GetMenuContextHelpId
GetFocus
GetWindowRgn
SetParent
OpenClipboard
MessageBoxA
GetWindowTextA
LoadCursorA
GetSystemMetrics
SetWindowPlacement
GetDlgCtrlID
GetClassNameA
CloseWindow
SetWindowTextA
SetWindowLongA
CopyRect
EndPaint
ShowCaret
DestroyMenu
LoadCursorW
SetMenuItemBitmaps
DlgDirListComboBoxA
RegisterClipboardFormatW
LoadBitmapW
GetWindowContextHelpId
BeginPaint
DestroyIcon
InsertMenuItemA
DlgDirListA
GetMenuItemCount
PostMessageA
CallWindowProcW
GetPropA
TranslateAcceleratorA
CopyAcceleratorTableA
FrameRect
UpdateWindow
SetForegroundWindow
InsertMenuW
LoadStringA
GetLastActivePopup
CreateDialogIndirectParamA
SetRectEmpty
SetFocus
GetSubMenu
InvalidateRect
GrayStringW
GetClientRect
IsChild
WinHelpW
DrawTextExA
RemovePropW
DragDetect
RegisterClassW
GetWindow
GetDoubleClickTime
SendDlgItemMessageA
IsWindowVisible
GetCursorPos
RegisterWindowMessageA
EndDeferWindowPos
CallNextHookEx
AppendMenuW
CreateWindowExW
GetSysColorBrush
CheckMenuItem
GetWindowTextW
EndDialog
HideCaret
ShowWindow
SetScrollInfo
DestroyCaret
GetWindowTextLengthW
SetPropA
CharNextW
GetKeyState
CheckRadioButton
ClipCursor
SetCapture
SystemParametersInfoA
DestroyWindow
WaitMessage
MapWindowPoints
GetDlgItem
LoadBitmapA
GetMenuStringA
DispatchMessageA
DrawTextA
IntersectRect
EnableMenuItem
GetParent
ScrollWindowEx
GetWindowPlacement
ValidateRect
TranslateMDISysAccel
GetClassLongA
RegisterClassExA
SetWindowLongW
TrackPopupMenu
GetMenuStringW
GetTopWindow
CloseClipboard
ScrollWindow
BeginDeferWindowPos
IsIconic
LoadMenuA
TabbedTextOutW
PeekMessageW
CreatePopupMenu
GetScrollRange
UnregisterClassA
FindWindowA
SystemParametersInfoW
SetWindowRgn
IsZoomed
LoadAcceleratorsA
GetForegroundWindow
UnregisterHotKey
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoSizeW
VerQueryValueW
VerQueryValueA
GetFileVersionInfoW
shell32
ord155
SHGetSpecialFolderLocation
ShellExecuteA
ExtractIconA
ShellExecuteW
SHFileOperationW
SHGetMalloc
SHBrowseForFolderA
Shell_NotifyIconA
SHGetFileInfoW
SHGetFileInfoA
SHGetDesktopFolder
DragQueryFileA
CommandLineToArgvW
DragFinish
SHGetSpecialFolderPathA
Shell_NotifyIconW
DragQueryFileW
SHGetPathFromIDListA
winspool.drv
GetJobA
ord204
DocumentPropertiesA
ClosePrinter
DeviceCapabilitiesA
EnumJobsA
EndDocPrinter
EnumPrintersA
OpenPrinterA
AddPrinterDriverA
StartDocPrinterA
WritePrinter
GetPrinterDriverDirectoryA
AddPrinterA
GetPrinterA
kernel32
lstrcpynW
CreateFileA
GetStartupInfoA
FindFirstFileW
ResumeThread
FatalAppExitA
GetConsoleCP
InterlockedExchange
VirtualAlloc
GetProfileIntW
SetConsoleCtrlHandler
UnmapViewOfFile
GetCommandLineA
CreateMutexA
LoadLibraryW
GetStringTypeExA
lstrcpynA
GlobalHandle
GetVersionExW
IsBadReadPtr
GetFileType
GlobalReAlloc
GetFileAttributesA
RemoveDirectoryA
GetTempFileNameA
lstrcmpW
FindFirstFileA
LCMapStringW
SetUnhandledExceptionFilter
WaitForSingleObject
HeapValidate
GetModuleFileNameA
IsDebuggerPresent
ResetEvent
UnhandledExceptionFilter
HeapFree
GetStartupInfoW
SetFilePointer
GlobalUnlock
GetCurrentProcessId
CreateThread
GetEnvironmentVariableA
LocalReAlloc
InitializeCriticalSection
GetEnvironmentStrings
FreeLibrary
EnterCriticalSection
GetThreadLocale
SuspendThread
CloseHandle
GetCurrentDirectoryW
GetFileInformationByHandle
GetLocaleInfoW
TlsGetValue
GetSystemTime
GlobalSize
lstrcatA
GetFileTime
SetErrorMode
CompareStringW
RaiseException
FindCloseChangeNotification
IsValidLocale
VerLanguageNameA
GetVolumeInformationW
SetFileAttributesA
FindClose
GetCurrentThreadId
WriteFile
GetExitCodeProcess
GetLastError
FindResourceA
WideCharToMultiByte
GlobalFlags
GetCommandLineW
GetTempFileNameW
GetOEMCP
LCMapStringA
GetFullPathNameW
UnlockFile
LoadResource
FlushFileBuffers
GetShortPathNameA
GetWindowsDirectoryA
SetThreadPriority
GetModuleFileNameW
TlsFree
SetEvent
VirtualQuery
DebugBreak
GetPrivateProfileStringA
GetCPInfo
GetModuleHandleA
QueryPerformanceCounter
IsBadWritePtr
TlsAlloc
GetConsoleMode
SetEnvironmentVariableA
GetPrivateProfileIntA
GetStringTypeA
SetFileTime
ReleaseSemaphore
GetProcAddress
CreateEventA
GetLocaleInfoA
GetSystemInfo
HeapDestroy
InterlockedIncrement
GetTempPathA
FileTimeToLocalFileTime
FormatMessageA
CopyFileW
DuplicateHandle
GetSystemTimeAsFileTime
lstrlenA
GetVersionExA
GlobalFree
GetCurrentDirectoryA
ExitProcess
GetExitCodeThread
GetFullPathNameA
LockResource
GlobalGetAtomNameA
Sleep
ConnectNamedPipe
HeapSize
FreeResource
GetDriveTypeA
RtlUnwind
FlushInstructionCache
OpenMutexA
OutputDebugStringA
HeapAlloc
CreateDirectoryA
GetCurrentThread
GetLocalTime
GlobalFindAtomA
DeleteFileA
SetStdHandle
MoveFileA
GetACP
GetComputerNameW
GlobalAlloc
lstrcpyA
FileTimeToSystemTime
DeleteCriticalSection
FreeEnvironmentStringsW
WriteConsoleA
TerminateProcess
ExitThread
OutputDebugStringW
LocalAlloc
IsValidCodePage
GetSystemDirectoryW
EnumSystemLocalesA
lstrcmpiW
HeapReAlloc
FreeEnvironmentStringsA
SetProcessWorkingSetSize
VirtualFree
LockFile
LoadLibraryA
GetUserDefaultLCID
SetHandleCount
GetLogicalDrives
MapViewOfFile
CompareStringA
GetConsoleOutputCP
ReadFile
LocalFree
GetTempPathW
FindNextChangeNotification
GetPrivateProfileStringW
lstrcmpiA
GetCurrentProcess
InterlockedCompareExchange
GetFileSize
SetLastError
WriteConsoleW
SetPriorityClass
CreateDirectoryW
VirtualLock
GlobalDeleteAtom
GetTimeFormatA
GetDateFormatA
SizeofResource
GetProcessHeap
GetModuleHandleW
GetStringTypeW
GetEnvironmentStringsW
LeaveCriticalSection
MultiByteToWideChar
MulDiv
MoveFileExW
GetTickCount
InterlockedDecrement
TlsSetValue
GetStdHandle
GetTimeZoneInformation
FindNextFileA
HeapCreate
WritePrivateProfileStringA
GlobalLock
comctl32
ImageList_LoadImageA
ImageList_Replace
ord17
_TrackMouseEvent
ImageList_GetIcon
ImageList_DragEnter
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_Merge
CreatePropertySheetPageA
ImageList_SetImageCount
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_SetOverlayImage
ImageList_GetImageInfo
ImageList_DragMove
CreateToolbarEx
ImageList_SetDragCursorImage
InitCommonControlsEx
ImageList_Destroy
ImageList_AddMasked
ImageList_Draw
ImageList_SetBkColor
ImageList_Create
ImageList_BeginDrag
ImageList_DrawEx
ImageList_DragLeave
ImageList_Add
ImageList_GetBkColor
ImageList_EndDrag
PropertySheetA
ImageList_DragShowNolock
ImageList_Remove
gdi32
SetMapperFlags
PolyPolygon
Escape
Chord
PolyBezierTo
SetWindowOrgEx
GetCharABCWidthsA
CreateCompatibleBitmap
ExtFloodFill
CreatePenIndirect
UnrealizeObject
BeginPath
GetKerningPairsA
CreateDCA
GdiFlush
StretchBlt
CreateRoundRectRgn
GetBkColor
PlayMetaFileRecord
GetViewportExtEx
SaveDC
GetMapMode
CopyMetaFileW
GetOutlineTextMetricsA
GetDIBits
StretchDIBits
GetTextExtentPointW
GetBrushOrgEx
OffsetRgn
RectVisible
SetTextAlign
DPtoLP
PlayEnhMetaFile
SetTextJustification
GetClipBox
CreatePatternBrush
StartPage
WidenPath
SetMapMode
MoveToEx
Ellipse
GetClipRgn
ResizePalette
RealizePalette
GetStockObject
GetCharWidthA
CreateFontW
SetBkColor
CreatePen
CreateBitmap
PtVisible
GetROP2
SetArcDirection
CreateRectRgnIndirect
EnumFontFamiliesExW
SetColorAdjustment
PolyBezier
PtInRegion
PlgBlt
ExcludeClipRect
GetTextCharacterExtra
RestoreDC
GetBkMode
SetTextCharacterExtra
CreateBitmapIndirect
CreateFontA
AbortDoc
AbortPath
IntersectClipRect
GetPaletteEntries
PolylineTo
CombineRgn
GetObjectW
GetRgnBox
CreateDIBSection
GetNearestPaletteIndex
GetPixel
CreateMetaFileA
GetWindowOrgEx
CreateICA
DeleteDC
GetAspectRatioFilterEx
LineTo
GetObjectType
Polygon
CreateDIBPatternBrushPt
OffsetClipRgn
TextOutA
GetCurrentPositionEx
RoundRect
GetCharWidthW
GetMiterLimit
GetPath
SetViewportExtEx
CreateHatchBrush
GetStretchBltMode
DeleteEnhMetaFile
ExtSelectClipRgn
GetTextMetricsW
SelectObject
SelectClipPath
GetCharWidthFloatA
AngleArc
SelectClipRgn
CreateEllipticRgn
GetRegionData
GetCurrentObject
SetPixel
GetGlyphOutlineA
Arc
EnumFontFamiliesExA
OffsetWindowOrgEx
CreatePolyPolygonRgn
OffsetViewportOrgEx
GetDCOrgEx
GetBitmapBits
CreateCompatibleDC
FillPath
PlayMetaFile
CreateFontIndirectA
FlattenPath
SetRectRgn
GetViewportOrgEx
GetTextAlign
CloseMetaFile
CreateRectRgn
GetTextExtentPoint32A
DeleteMetaFile
SelectPalette
GetTextColor
SetROP2
DrawEscape
CreatePolygonRgn
GetTextCharsetInfo
PatBlt
CreateBrushIndirect
ArcTo
ScaleViewportExtEx
ExtTextOutW
CreateSolidBrush
GetTextFaceA
EndPage
SetBkMode
EnumFontFamiliesA
ResetDCA
SetPixelV
PolyDraw
DeleteObject
SetStretchBltMode
EndDoc
PolyPolyline
StrokePath
Pie
GetDeviceCaps
GetTextExtentPoint32W
GdiComment
SetTextColor
StartDocA
GetColorAdjustment
CreateEllipticRgnIndirect
ExtCreateRegion
ScaleWindowExtEx
SetAbortProc
SetPaletteEntries
EnumMetaFile
GetWindowExtEx
GetSystemPaletteEntries
SetPolyFillMode
EnumObjects
GetCharABCWidthsFloatA
GetObjectA
EqualRgn
ExtTextOutA
SetDIBitsToDevice
MaskBlt
SetBrushOrgEx
GetPolyFillMode
SetViewportOrgEx
ExtCreatePen
StrokeAndFillPath
GetTextMetricsA
SetWindowExtEx
Polyline
BitBlt
SetMiterLimit
CreateDiscardableBitmap
GetNearestColor
Rectangle
EndPath
CreateHalftonePalette
FrameRgn
StartDocW
CreateFontIndirectW
RectInRegion
CreatePalette
AnimatePalette
ExtEscape
advapi32
RegisterEventSourceW
OpenServiceW
RegCreateKeyExW
RegCreateKeyExA
RegQueryValueA
RegEnumValueW
OpenSCManagerA
GetFileSecurityW
RegDeleteKeyW
RegDeleteValueW
OpenProcessToken
RegEnumKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueExW
RegQueryInfoKeyA
SetFileSecurityA
RegSetValueW
RegCreateKeyW
CopySid
GetUserNameW
ControlService
GetTokenInformation
RegQueryValueExA
OpenServiceA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExW
RegQueryValueW
AllocateAndInitializeSid
RegEnumValueA
FreeSid
InitializeSecurityDescriptor
RegDeleteValueA
CryptAcquireContextA
CryptHashData
RegOpenKeyW
StartServiceA
SetSecurityDescriptorOwner
DeleteService
RegSetValueA
RegOpenKeyA
CryptDestroyKey
RegCreateKeyA
RegSetValueExW
QueryServiceStatus
CryptReleaseContext
SetSecurityDescriptorGroup
CryptGetHashParam
AdjustTokenPrivileges
CloseServiceHandle
RegQueryInfoKeyW
RegSetValueExA
RegOpenKeyExW
CreateServiceA
InitializeAcl
GetLengthSid
SetSecurityDescriptorDacl
CryptCreateHash
OpenThreadToken
IsValidSecurityDescriptor
OpenSCManagerW
Sections
.text Size: 228KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 492KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ