Static task
static1
Behavioral task
behavioral1
Sample
165239d2b76744cea8a3bb91aeb0ae11dbd0befb2788955a0adf5bde499ee330.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
165239d2b76744cea8a3bb91aeb0ae11dbd0befb2788955a0adf5bde499ee330.exe
Resource
win10v2004-20220812-en
General
-
Target
165239d2b76744cea8a3bb91aeb0ae11dbd0befb2788955a0adf5bde499ee330
-
Size
756KB
-
MD5
94bd3a720c0f825686d15f7708c6e721
-
SHA1
010aae4ccea26e7b243b1f878c84be1d45c9550c
-
SHA256
165239d2b76744cea8a3bb91aeb0ae11dbd0befb2788955a0adf5bde499ee330
-
SHA512
cb30a41ad0c46e8416f3b984bb47f6c180fa79e4715ac8f87fb03545d176a10ebecbbd9125d9cf408f881448c70830956e706f9ef4bcad7ca20ed69d4a2fd1cf
-
SSDEEP
12288:cFuWvbegZCJZoLOkXUnz9nZkQUlot9ydEsFWZNyVe8vu3OhVjEfq:2Tvb/AJebXUz9naPjdEqYNyVeiu3Ej
Malware Config
Signatures
Files
-
165239d2b76744cea8a3bb91aeb0ae11dbd0befb2788955a0adf5bde499ee330.exe windows x86
411e9be165bcf33be4f6171602230135
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHAppBarMessage
Shell_NotifyIconA
SHBrowseForFolderA
DragQueryFileW
ord155
ShellExecuteA
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
SHChangeNotify
ExtractIconA
ExtractIconExA
DragAcceptFiles
ExtractIconExW
SHEmptyRecycleBinA
DragQueryFileA
SHGetFileInfoA
SHGetPathFromIDListA
DragFinish
rpcrt4
UuidFromStringW
UuidCreateSequential
UuidCreate
UuidToStringA
RpcStringFreeA
kernel32
FindFirstFileA
ReadFile
RaiseException
CreateSemaphoreA
GetLogicalDriveStringsA
GetCPInfo
UnmapViewOfFile
GetProcessVersion
LocalFree
GetFileSize
GetEnvironmentStrings
GetSystemTimeAsFileTime
VirtualProtect
SetHandleCount
InterlockedIncrement
WriteConsoleA
SetUnhandledExceptionFilter
GlobalHandle
GetCurrentProcessId
LoadLibraryA
MoveFileA
GetProcAddress
lstrcpynA
SetThreadPriority
lstrlenW
HeapFree
SetConsoleCtrlHandler
GetTimeZoneInformation
LockResource
InterlockedCompareExchange
CreateFileA
CloseHandle
HeapCreate
IsBadCodePtr
CreateThread
LocalReAlloc
LocalAlloc
WaitForSingleObject
RemoveDirectoryA
LCMapStringA
GetPrivateProfileIntA
TlsAlloc
GetPrivateProfileIntW
WaitForMultipleObjects
CreateFileW
GetExitCodeThread
WideCharToMultiByte
HeapSize
MapViewOfFile
CreateDirectoryW
GetTimeFormatA
GetProfileIntA
LCMapStringW
GetSystemDirectoryA
DeviceIoControl
WritePrivateProfileStringA
CompareStringW
GetVersionExA
HeapAlloc
GetFileTime
GetVersion
GetConsoleMode
SetCurrentDirectoryA
GetThreadLocale
GetSystemInfo
CreateDirectoryA
TlsFree
UnhandledExceptionFilter
SetEvent
FreeLibrary
GetDateFormatA
GetDriveTypeA
GetFileAttributesW
SetEnvironmentVariableA
CreateEventW
GetStringTypeA
lstrcatA
GetSystemTime
ExitThread
SetLocalTime
QueryPerformanceCounter
GetModuleFileNameA
GetExitCodeProcess
SetErrorMode
CopyFileA
SetFileAttributesA
InitializeCriticalSection
SuspendThread
CreateMutexA
GetStartupInfoA
GlobalDeleteAtom
GetStringTypeExA
FileTimeToLocalFileTime
WriteFile
EnumResourceLanguagesA
FindClose
FlushFileBuffers
GetPrivateProfileStringA
HeapDestroy
WritePrivateProfileStringW
CompareStringA
GetFullPathNameA
FreeResource
IsBadStringPtrA
CreateProcessA
InterlockedExchange
IsValidLocale
GetTempPathA
VirtualFree
FindResourceA
LeaveCriticalSection
GetUserDefaultLCID
FileTimeToSystemTime
FindResourceExA
GetLastError
GlobalFlags
LoadLibraryExA
MultiByteToWideChar
UnlockFile
SetEndOfFile
GetStringTypeW
GetLocaleInfoW
FreeEnvironmentStringsA
FormatMessageW
EnumSystemLocalesA
GetCurrentProcess
LocalFileTimeToFileTime
GlobalUnlock
GetCurrentDirectoryA
SystemTimeToFileTime
TerminateProcess
DuplicateHandle
GetOEMCP
LockFile
ConvertDefaultLocale
TlsSetValue
DeleteFileA
MulDiv
lstrcmpA
GetModuleHandleA
GetACP
TlsGetValue
SetFilePointer
FormatMessageA
ResumeThread
IsDebuggerPresent
GlobalReAlloc
SetLastError
OpenEventA
Sleep
HeapReAlloc
GlobalSize
GetCommandLineA
GetConsoleOutputCP
ReleaseMutex
WriteConsoleW
GetTimeFormatW
CreateEventA
VirtualAlloc
lstrcmpiA
SetPriorityClass
GetTempFileNameA
GetCommandLineW
GetFileType
SetStdHandle
DeleteFileW
GetCurrentThread
RtlUnwind
GetEnvironmentStringsW
GlobalAddAtomA
IsBadWritePtr
SetFileTime
FreeEnvironmentStringsW
lstrlenA
CreateFileMappingA
GetProcessHeap
GetConsoleCP
GetFileAttributesA
FatalAppExitA
GetModuleFileNameW
GetModuleHandleW
LoadResource
GetStdHandle
DeleteCriticalSection
GetTickCount
lstrcpyW
GetCurrentThreadId
VirtualQuery
EnterCriticalSection
OpenMutexA
GetUserDefaultLangID
GetThreadPriority
FindNextFileA
GetLocaleInfoA
ExitProcess
InterlockedDecrement
GetFileInformationByHandle
GlobalFree
GlobalGetAtomNameA
SizeofResource
GetLocalTime
GlobalLock
IsBadReadPtr
user32
GetSysColorBrush
ClipCursor
EndDialog
LoadImageA
EqualRect
FindWindowA
MessageBoxA
FindWindowExA
BeginPaint
SetClipboardData
LoadBitmapA
GetDialogBaseUnits
LockWindowUpdate
GetDCEx
GrayStringW
SetMenu
LoadImageW
EnumChildWindows
MoveWindow
LoadStringA
DestroyAcceleratorTable
GetTopWindow
UnpackDDElParam
PostMessageW
GetParent
AttachThreadInput
GetKeyState
DefDlgProcA
PostQuitMessage
CallWindowProcA
RegisterClassA
SetForegroundWindow
MapVirtualKeyA
ExitWindowsEx
GetWindowRgn
BeginDeferWindowPos
GetClassLongA
GetScrollPos
RegisterHotKey
SetScrollPos
SendDlgItemMessageA
CreateIconIndirect
ScreenToClient
DefWindowProcW
IsWindowVisible
DefMDIChildProcW
RedrawWindow
LoadStringW
GetWindowLongA
GetWindow
InsertMenuW
GetDC
DrawEdge
OpenClipboard
CreateWindowExW
InvertRect
SetWindowTextW
GetClassLongW
DispatchMessageW
ReleaseDC
GetWindowTextA
CallNextHookEx
IsChild
GetMessagePos
DestroyWindow
ScrollWindowEx
GetAsyncKeyState
GetWindowTextW
SetCursor
SystemParametersInfoA
GetClassInfoExA
SetWindowContextHelpId
MessageBoxW
GetMessageTime
GetClientRect
LoadAcceleratorsW
HideCaret
CheckDlgButton
EnableMenuItem
TrackPopupMenu
IsZoomed
wsprintfW
ReleaseCapture
GetWindowRect
WaitMessage
RegisterWindowMessageA
LoadCursorA
GetMenuState
GetNextDlgTabItem
DestroyMenu
KillTimer
SetRectEmpty
DrawIcon
GetWindowPlacement
SetWindowsHookExA
RegisterWindowMessageW
MapWindowPoints
GetActiveWindow
DrawTextW
GetFocus
GetMenuCheckMarkDimensions
SetRect
ChildWindowFromPoint
ClientToScreen
LoadIconA
LoadMenuW
UnregisterClassA
GetMonitorInfoW
GetNextDlgGroupItem
SetMenuItemBitmaps
UnhookWindowsHookEx
LoadIconW
CallWindowProcW
DdeClientTransaction
DdeUninitialize
InsertMenuA
CreateWindowExA
GetScrollInfo
EmptyClipboard
IsMenu
FindWindowExW
CheckMenuItem
DrawTextExW
TranslateAcceleratorW
GetSubMenu
mouse_event
SendMessageTimeoutW
GetClassInfoExW
AppendMenuA
SetActiveWindow
ModifyMenuW
IsDialogMessageA
GetMenuItemCount
GetMessageA
SetMenuDefaultItem
SetWindowLongW
SetWindowPos
CopyIcon
WindowFromPoint
HiliteMenuItem
GrayStringA
CreateIconFromResourceEx
GetDlgCtrlID
DestroyCursor
SetParent
GetCursorPos
TranslateAcceleratorA
DrawMenuBar
GetClassNameA
PeekMessageA
UpdateWindow
ShowWindow
CopyAcceleratorTableA
GetSystemMenu
DialogBoxParamA
CreateDialogIndirectParamA
SendMessageW
RegisterClassExA
GetCapture
WinHelpA
GetDlgItemInt
CharUpperA
FillRect
SetWindowsHookExW
IsDlgButtonChecked
AdjustWindowRectEx
UnionRect
DispatchMessageA
IsWindowEnabled
CharNextA
ExcludeUpdateRgn
GetKeyboardState
GetWindowLongW
PostMessageA
SetTimer
DefWindowProcA
PtInRect
GetTabbedTextExtentA
ModifyMenuA
SetPropW
SetWindowTextA
GetMenu
IsClipboardFormatAvailable
wvsprintfA
GetCaretPos
DdeDisconnect
DrawIconEx
ShowCaret
SetWindowLongA
CloseClipboard
IntersectRect
TabbedTextOutW
SetDlgItemInt
GetWindowThreadProcessId
RemoveMenu
MsgWaitForMultipleObjects
GetDlgItem
RemovePropW
DrawTextA
SetWindowRgn
EndPaint
EndDeferWindowPos
IsIconic
GetPropA
GetUpdateRect
CheckRadioButton
GetForegroundWindow
CopyRect
InvalidateRect
EnableWindow
TabbedTextOutA
SetCursorPos
MessageBeep
GetLastActivePopup
GetOpenClipboardWindow
DrawFocusRect
SetFocus
MapDialogRect
ValidateRect
GetClipboardViewer
GetDoubleClickTime
SetPropA
SendMessageA
GetSystemMetrics
GetSysColor
SetDlgItemTextW
OffsetRect
GetMenuDefaultItem
IsWindow
TranslateMessage
RegisterClipboardFormatA
RemovePropA
GetDesktopWindow
SetCapture
GetClassNameW
SetCaretPos
DeleteMenu
PeekMessageW
GetClassInfoA
InflateRect
LoadCursorW
BringWindowToTop
FrameRect
SystemParametersInfoW
DestroyIcon
GetWindowDC
advapi32
QueryServiceConfigA
RevertToSelf
MapGenericMask
RegOpenCurrentUser
RegFlushKey
RegQueryInfoKeyW
RegQueryValueExA
CryptGetHashParam
CreateServiceA
StartServiceA
ControlService
GetUserNameA
OpenThreadToken
InitiateSystemShutdownA
SetServiceStatus
GetFileSecurityW
RegOpenKeyExW
RegSetValueA
CopySid
RegDeleteValueA
RegEnumKeyA
RegCloseKey
AddAce
DuplicateToken
RegSetValueExW
StartServiceCtrlDispatcherA
RegQueryValueA
GetLengthSid
RegCreateKeyA
AddAccessAllowedAce
RegQueryInfoKeyA
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExA
OpenProcessToken
RegQueryValueExW
ReportEventA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueW
RegEnumKeyExW
DeregisterEventSource
RegEnumValueA
AccessCheck
CreateProcessAsUserA
CloseServiceHandle
GetSecurityDescriptorDacl
GetFileSecurityA
DeleteAce
SetSecurityDescriptorDacl
RegOpenKeyW
RegQueryValueW
RegCreateKeyW
InitializeAcl
InitializeSecurityDescriptor
RegEnumKeyExA
AdjustTokenPrivileges
OpenSCManagerA
DuplicateTokenEx
GetTokenInformation
RegEnumValueW
RegDeleteKeyA
comdlg32
GetOpenFileNameW
CommDlgExtendedError
GetFileTitleW
FindTextW
GetSaveFileNameW
ChooseColorW
ChooseFontA
PageSetupDlgW
GetSaveFileNameA
version
GetFileVersionInfoA
VerLanguageNameA
VerQueryValueA
GetFileVersionInfoSizeA
comctl32
ImageList_SetDragCursorImage
_TrackMouseEvent
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_Draw
ImageList_Read
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_GetBkColor
ImageList_GetImageCount
PropertySheetA
ImageList_LoadImageW
ImageList_DragMove
CreateStatusWindowW
ImageList_Destroy
ImageList_GetDragImage
ImageList_Replace
ImageList_AddMasked
ord17
ImageList_Create
ImageList_DragEnter
ImageList_DragLeave
ImageList_GetIconSize
ImageList_DragShowNolock
ImageList_LoadImageA
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Write
ImageList_Merge
InitCommonControlsEx
DestroyPropertySheetPage
ImageList_Add
CreatePropertySheetPageA
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 456KB - Virtual size: 453KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ