Static task
static1
Behavioral task
behavioral1
Sample
ce0a1a23d1a9f2acd1aabe0ca8e75692d805d6bd82084433226d7de22a52c09b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ce0a1a23d1a9f2acd1aabe0ca8e75692d805d6bd82084433226d7de22a52c09b.exe
Resource
win10v2004-20221111-en
General
-
Target
ce0a1a23d1a9f2acd1aabe0ca8e75692d805d6bd82084433226d7de22a52c09b
-
Size
500KB
-
MD5
db66e64c6dd629bdba0cf3ae181cd3d1
-
SHA1
2324bbf5deb3d66fea109359ce33bb25847be68b
-
SHA256
ce0a1a23d1a9f2acd1aabe0ca8e75692d805d6bd82084433226d7de22a52c09b
-
SHA512
4ea9dbc99f743f4dd13b87dd9223a1408b9c9935b22e7961529514e97ea29f980e5af9217a44139188cc92c90e5c0e67158febbadfc913a37306eee160fd32db
-
SSDEEP
12288:lMszOvJn8fLy0iWwnX9oZPaRpVB6x+lcdl3:lVO18fLjiNUPqBI+lcX3
Malware Config
Signatures
Files
-
ce0a1a23d1a9f2acd1aabe0ca8e75692d805d6bd82084433226d7de22a52c09b.exe windows x86
36a03607aab5d71455b53ba5aa5f14b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord1576
kernel32
GetLocalTime
EnterCriticalSection
FlushFileBuffers
FileTimeToLocalFileTime
GetSystemDirectoryA
HeapSize
GetVersionExA
GetThreadLocale
CreatePipe
FindResourceW
LCMapStringA
LockResource
GetUserDefaultLangID
GetStringTypeExW
GetLocaleInfoA
CopyFileA
lstrcpyA
SetFileTime
GetLastError
GetModuleHandleA
GetSystemDefaultLCID
CreateEventA
MultiByteToWideChar
InitializeCriticalSection
lstrlenW
SetStdHandle
GetCommandLineW
IsBadWritePtr
GetFileAttributesA
GetCurrentProcessId
GetTimeFormatW
UnhandledExceptionFilter
HeapReAlloc
GetTimeFormatA
GetModuleFileNameA
CreateProcessA
TerminateThread
GetSystemTimeAsFileTime
GetCPInfo
EnumSystemLocalesA
GetEnvironmentStrings
OutputDebugStringA
GetOEMCP
LoadLibraryW
lstrcmpiA
GetCurrentDirectoryA
FindFirstFileW
IsDBCSLeadByteEx
IsProcessorFeaturePresent
LocalReAlloc
LoadLibraryA
EnumResourceLanguagesA
CreateFileW
SuspendThread
GlobalHandle
DeviceIoControl
WriteConsoleW
SetEndOfFile
ExitProcess
VirtualProtect
FatalAppExitA
lstrcatA
ReadFile
GetVersion
RaiseException
GetFileType
GetEnvironmentStringsW
CopyFileW
WideCharToMultiByte
LoadResource
LoadLibraryExA
GetACP
IsValidCodePage
SetCommTimeouts
SetUnhandledExceptionFilter
SetHandleCount
GetCurrentThread
GetProcAddress
IsDebuggerPresent
lstrlenA
LocalFree
CreateProcessW
lstrcpynA
GetOverlappedResult
MapViewOfFile
SetErrorMode
DeleteCriticalSection
SystemTimeToFileTime
VirtualAlloc
HeapFree
PeekNamedPipe
GetExitCodeProcess
GetFileAttributesW
WinExec
SetFileAttributesA
GetStringTypeA
GetTempPathA
GetDiskFreeSpaceExA
Sleep
FreeEnvironmentStringsW
InterlockedDecrement
SetThreadPriority
FreeLibrary
UnmapViewOfFile
GetTimeZoneInformation
GetProcessVersion
GetDiskFreeSpaceA
CompareStringA
MulDiv
SetEnvironmentVariableA
SetCurrentDirectoryA
SetCurrentDirectoryW
GetTempFileNameA
GetCurrentProcess
WaitForSingleObject
DuplicateHandle
TlsSetValue
SizeofResource
WriteFile
TlsAlloc
CompareStringW
GetExitCodeThread
GetProcessHeap
GlobalMemoryStatus
GetWindowsDirectoryA
RtlUnwind
GetConsoleMode
ResetEvent
CreateEventW
GetLocaleInfoW
ExpandEnvironmentStringsA
GetShortPathNameA
VirtualQuery
GetStdHandle
InterlockedIncrement
GetVolumeInformationA
GlobalSize
SetLastError
GetFileTime
GetCommandLineA
GetStartupInfoW
FindResourceA
GlobalFindAtomA
GlobalFree
FindClose
GlobalLock
LCMapStringW
GlobalAlloc
InterlockedCompareExchange
CreateFileMappingA
LeaveCriticalSection
TerminateProcess
LocalAlloc
TlsGetValue
ReleaseMutex
IsBadCodePtr
FreeResource
InterlockedExchange
GetCurrentThreadId
LockFile
CreateFileA
GetPriorityClass
GetFullPathNameW
GetUserDefaultLCID
HeapCreate
GetStringTypeW
GetEnvironmentVariableA
FileTimeToDosDateTime
lstrcatW
GetPrivateProfileStringA
SetEvent
GetModuleFileNameW
GlobalFlags
SetFilePointer
GlobalUnlock
CreateThread
FindFirstFileA
HeapDestroy
QueryPerformanceCounter
FileTimeToSystemTime
TlsFree
HeapAlloc
LocalLock
LocalFileTimeToFileTime
GetTickCount
WritePrivateProfileStringA
CloseHandle
FreeEnvironmentStringsA
FindResourceExA
GetStartupInfoA
MoveFileA
GlobalGetAtomNameA
lstrcmpA
OpenMutexA
GetSystemTime
GetModuleHandleW
IsBadReadPtr
OpenProcess
UnlockFile
VirtualFree
GetDriveTypeA
GetSystemDefaultLangID
CreateMutexA
user32
DrawTextExW
GetKeyNameTextA
DeferWindowPos
SetWindowsHookExA
GetWindowDC
SetTimer
GetWindow
CopyRect
GetClassLongA
ValidateRect
DrawIconEx
GetPropA
GetForegroundWindow
GetAsyncKeyState
KillTimer
DestroyAcceleratorTable
GetSystemMenu
GetMenuCheckMarkDimensions
MoveWindow
DispatchMessageA
DrawEdge
TranslateMessage
HideCaret
RegisterWindowMessageA
DrawFocusRect
WinHelpW
CallWindowProcA
LoadStringW
SetWindowPlacement
EnableMenuItem
LockWindowUpdate
GetKeyboardLayout
PostQuitMessage
ScreenToClient
RegisterClipboardFormatA
ChangeClipboardChain
GetWindowLongA
DrawStateA
GetKeyState
SetDlgItemInt
CreateWindowExA
GetMenuItemCount
SendDlgItemMessageA
LoadAcceleratorsA
GetDesktopWindow
GetWindowTextA
PostMessageW
IntersectRect
UnionRect
DefWindowProcA
ReuseDDElParam
SetWindowTextA
GetSystemMetrics
MessageBoxW
SystemParametersInfoW
GetMessageW
GetMenuState
CopyAcceleratorTableW
GetTabbedTextExtentA
UnregisterClassA
CallNextHookEx
GetLastActivePopup
DrawIcon
GetSysColor
GetScrollPos
ExcludeUpdateRgn
RemovePropW
InflateRect
DefMDIChildProcW
SetCapture
GetClipboardData
GetClassNameW
SetWindowsHookExW
AdjustWindowRect
GetCursorPos
GetFocus
CheckMenuItem
GetMessagePos
UpdateWindow
SystemParametersInfoA
CreateWindowExW
SetMenu
GetParent
GetActiveWindow
SetWindowContextHelpId
PtInRect
EnableWindow
CreatePopupMenu
IsZoomed
ShowScrollBar
SendDlgItemMessageW
GetWindowTextLengthA
IsWindowEnabled
GetDlgItemTextA
GetMessageTime
SetFocus
UnhookWindowsHookEx
GetMenuItemID
ModifyMenuW
DdeCreateStringHandleA
InsertMenuW
DefMDIChildProcA
SetParent
DestroyMenu
IsMenu
SendMessageW
GetClassNameA
SetScrollPos
DrawTextW
TranslateMDISysAccel
EmptyClipboard
EndPaint
MapWindowPoints
OffsetRect
SubtractRect
IsClipboardFormatAvailable
IsWindowUnicode
SetWindowTextW
GetMenuDefaultItem
BeginDeferWindowPos
GetPropW
GetClientRect
GetDC
RedrawWindow
PeekMessageA
DispatchMessageW
GetScrollRange
UnregisterClassW
RegisterClassExA
RemoveMenu
EnumChildWindows
GetWindowRect
InsertMenuA
SetActiveWindow
SetMenuDefaultItem
RegisterClipboardFormatW
GetWindowTextLengthW
GetNextDlgTabItem
GetCapture
AdjustWindowRectEx
LoadBitmapA
GetClassInfoA
InsertMenuItemA
GetNextDlgGroupItem
GetIconInfo
GetClassInfoExW
SetClipboardData
BringWindowToTop
WindowFromPoint
CheckDlgButton
LoadIconA
GetWindowPlacement
GrayStringW
GrayStringA
ScrollWindowEx
DefWindowProcW
TabbedTextOutW
DestroyCursor
TrackMouseEvent
PostMessageA
GetWindowThreadProcessId
FillRect
GetUpdateRect
DefDlgProcA
ClientToScreen
IsRectEmpty
SetWindowLongW
DrawTextA
TabbedTextOutA
SetPropA
wsprintfW
SetRectEmpty
SetRect
IsIconic
TrackPopupMenu
RegisterClassA
BeginPaint
MessageBeep
GetDlgItem
SetMenuItemBitmaps
DrawStateW
GetCursor
PostThreadMessageW
ScrollWindow
SetWindowRgn
RemovePropA
SetScrollRange
ReleaseCapture
IsWindow
GetDoubleClickTime
ShowWindow
CreateMenu
CreateIconFromResourceEx
CallWindowProcW
AppendMenuA
ReleaseDC
ShowOwnedPopups
SendMessageA
GetDCEx
GetTopWindow
ModifyMenuA
IsWindowVisible
CharNextA
GetDlgCtrlID
GetMenuItemInfoA
EndDialog
TranslateAcceleratorA
LoadMenuA
GetSubMenu
FrameRect
LoadBitmapW
LoadCursorW
EndDeferWindowPos
SetCursorPos
LoadIconW
mouse_event
EqualRect
OpenClipboard
WaitForInputIdle
DeleteMenu
GetSysColorBrush
GetWindowLongW
InSendMessage
CloseClipboard
OemToCharA
TranslateAcceleratorW
SetWindowLongA
DestroyWindow
SetForegroundWindow
LoadCursorA
DestroyIcon
DrawTextExA
SetCursor
GetClassInfoExA
CharUpperA
TrackPopupMenuEx
PostThreadMessageA
GetMenu
SetDlgItemTextA
IsDialogMessageA
IsChild
IsDialogMessageW
MessageBoxA
InvalidateRect
shell32
SHGetSpecialFolderLocation
SHGetMalloc
DragQueryFileW
SHAppBarMessage
ShellExecuteW
Shell_NotifyIconA
SHChangeNotify
SHBrowseForFolderW
ShellExecuteExW
ShellExecuteA
SHGetFileInfoW
ord155
FindExecutableA
SHGetFileInfoA
DragAcceptFiles
CommandLineToArgvW
SHFileOperationW
ShellExecuteExA
ExtractIconW
winmm
waveInClose
waveInStart
PlaySoundA
waveInGetNumDevs
mixerGetLineControlsA
waveOutMessage
mixerGetControlDetailsA
mixerSetControlDetails
waveInPrepareHeader
mixerGetNumDevs
waveInReset
waveOutClose
mciGetErrorStringA
waveOutOpen
waveOutGetNumDevs
waveOutUnprepareHeader
waveInStop
PlaySoundW
mixerClose
timeGetTime
waveOutPrepareHeader
mmioGetInfo
waveInOpen
mmioRead
waveOutReset
waveOutWrite
waveOutRestart
mixerOpen
mmioDescend
waveOutGetDevCapsA
waveOutPause
waveInGetDevCapsA
mixerGetLineInfoA
waveInUnprepareHeader
waveInAddBuffer
mciSendCommandA
comctl32
ImageList_AddMasked
ImageList_GetDragImage
ImageList_LoadImageW
ImageList_Create
ImageList_BeginDrag
ImageList_Destroy
ImageList_Draw
ImageList_GetBkColor
ImageList_EndDrag
ImageList_Add
_TrackMouseEvent
ImageList_Duplicate
ImageList_SetDragCursorImage
ord17
ImageList_DragShowNolock
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
CreateToolbarEx
ImageList_Merge
ImageList_GetIconSize
ImageList_DragLeave
ImageList_GetImageCount
ImageList_DragEnter
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_DragMove
ImageList_LoadImageA
ImageList_Remove
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_SetOverlayImage
ImageList_GetIcon
advapi32
RegNotifyChangeKeyValue
RegQueryValueW
InitializeSecurityDescriptor
DeregisterEventSource
GetFileSecurityW
GetFileSecurityA
RegEnumValueA
RegQueryValueA
CloseServiceHandle
OpenSCManagerA
RegSetValueExA
RegQueryValueExA
StartServiceW
RegOpenKeyW
RegDeleteValueA
RegSetValueW
RegCreateKeyW
AddAccessAllowedAce
RegOpenKeyExA
RegDeleteKeyA
ChangeServiceConfigA
AccessCheck
AddAce
RegEnumKeyW
CryptAcquireContextA
GetUserNameA
RegQueryValueExW
RegOpenKeyA
LookupPrivilegeValueA
RegQueryInfoKeyA
RegCreateKeyExW
SetSecurityDescriptorOwner
GetSecurityDescriptorDacl
DuplicateToken
SetSecurityDescriptorDacl
GetUserNameW
RegCloseKey
OpenThreadToken
RegOpenKeyExW
RegisterEventSourceW
RegEnumKeyA
GetTokenInformation
RegSetValueA
InitializeAcl
CryptGenRandom
OpenProcessToken
QueryServiceConfigA
RegEnumKeyExA
StartServiceA
GetLengthSid
MapGenericMask
RegDeleteKeyW
DeleteService
RegCreateKeyExA
ReportEventW
AllocateAndInitializeSid
RegSetValueExW
RegDeleteValueW
AdjustTokenPrivileges
CopySid
SetSecurityDescriptorGroup
OpenServiceA
ole32
CoCreateInstance
CreateItemMoniker
CoTreatAsClass
OleInitialize
CoLoadLibrary
OleSetMenuDescriptor
OleCreateStaticFromData
WriteClassStm
StgOpenStorageOnILockBytes
OleCreateFromData
OleRun
CLSIDFromString
ReadClassStg
OleCreateLinkToFile
CoInitialize
OleCreateLinkFromData
GetRunningObjectTable
CreateGenericComposite
OleSetContainedObject
CoRegisterMessageFilter
OleUninitialize
ReleaseStgMedium
CreateOleAdviseHolder
OleIsRunning
OleRegEnumVerbs
WriteClassStg
CoRevokeClassObject
StgCreateDocfileOnILockBytes
StgIsStorageILockBytes
OleIsCurrentClipboard
StgIsStorageFile
StringFromGUID2
CoResumeClassObjects
GetHGlobalFromILockBytes
CoInitializeEx
CoInitializeSecurity
IsAccelerator
RegisterDragDrop
CoRegisterClassObject
OleFlushClipboard
CreateILockBytesOnHGlobal
OleDestroyMenuDescriptor
OleRegGetUserType
OleCreateMenuDescriptor
CoFreeUnusedLibraries
CoTaskMemRealloc
StgCreateDocfile
CoSuspendClassObjects
OleGetIconOfClass
StringFromCLSID
CoUninitialize
CreateFileMoniker
CoGetClassObject
CreateBindCtx
OleSaveToStream
CoGetMalloc
OleLockRunning
OleDuplicateData
RevokeDragDrop
GetClassFile
OleSave
OleRegGetMiscStatus
CoCreateGuid
CoLockObjectExternal
OleTranslateAccelerator
CoTaskMemFree
CreateStreamOnHGlobal
CLSIDFromProgID
CoGetInterfaceAndReleaseStream
OleCreateFromFile
CoDisconnectObject
OleCreate
oleaut32
LoadTypeLi
comdlg32
PrintDlgA
GetSaveFileNameA
CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
ChooseColorA
GetFileTitleA
ChooseFontW
GetOpenFileNameA
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ