Static task
static1
Behavioral task
behavioral1
Sample
2350028ee3de4d184700cd6759f321ef09f158721c67cd61455bc21759b7a70e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2350028ee3de4d184700cd6759f321ef09f158721c67cd61455bc21759b7a70e.exe
Resource
win10v2004-20221111-en
General
-
Target
2350028ee3de4d184700cd6759f321ef09f158721c67cd61455bc21759b7a70e
-
Size
488KB
-
MD5
cbcab18f4f49797c4b26cb143551fb97
-
SHA1
38ef877383d521b5d2aacd9c491732539c8e51d1
-
SHA256
2350028ee3de4d184700cd6759f321ef09f158721c67cd61455bc21759b7a70e
-
SHA512
c4461df7f4a5ca449e4a778735d65be5cd43b61b22162a8765d6be4fc7ea2e79913f996905807c62a3bf3c7975f0f8759cc52c60136e8056c1f6db424b0ef7c3
-
SSDEEP
12288:EAhK/8SYyrUFuO9PnI5OEmaO4RzTv/n2x6WJ:EAJZy+y5I6TI6
Malware Config
Signatures
Files
-
2350028ee3de4d184700cd6759f321ef09f158721c67cd61455bc21759b7a70e.exe windows x86
44c9e67d248e64c11c775d293c8dc4b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetOpenFileNameW
FindTextW
PageSetupDlgW
ChooseColorW
PrintDlgW
GetFileTitleW
CommDlgExtendedError
GetSaveFileNameW
PageSetupDlgA
advapi32
GetAclInformation
SetSecurityDescriptorGroup
GetAce
RegDeleteKeyA
AllocateAndInitializeSid
AccessCheck
LookupPrivilegeValueA
CreateServiceA
CryptImportKey
CryptEncrypt
RevertToSelf
RegDeleteKeyW
RegDeleteValueA
RegCreateKeyExW
DeleteService
CryptAcquireContextA
OpenProcessToken
RegQueryInfoKeyA
SetSecurityDescriptorOwner
CryptDestroyHash
EqualSid
GetLengthSid
InitializeSecurityDescriptor
SetFileSecurityA
RegQueryValueExW
RegQueryValueExA
CryptExportKey
CryptDestroyKey
ChangeServiceConfigA
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyW
CryptHashData
OpenThreadToken
CryptCreateHash
RegOpenKeyExW
RegEnumValueA
RegQueryValueA
SetServiceStatus
RegOpenKeyW
RegCloseKey
DeleteAce
AdjustTokenPrivileges
DuplicateTokenEx
AddAccessAllowedAce
CopySid
ControlService
GetFileSecurityW
DuplicateToken
SetSecurityDescriptorDacl
RegSetValueExA
ReportEventA
RegOpenKeyA
StartServiceA
AddAce
GetUserNameA
RegEnumKeyA
CryptGenKey
RegisterEventSourceW
RegEnumKeyExA
CreateProcessAsUserA
GetTokenInformation
kernel32
DeleteFileA
lstrcmpW
DeleteCriticalSection
SetFileTime
FreeEnvironmentStringsA
InterlockedDecrement
GlobalUnlock
GetSystemInfo
FindResourceA
TerminateProcess
VirtualProtect
WaitForSingleObject
WriteFile
GetProcessHeap
GetConsoleOutputCP
IsBadWritePtr
CreateEventA
GlobalGetAtomNameA
InitializeCriticalSection
LCMapStringW
OpenEventA
FileTimeToSystemTime
RtlUnwind
CopyFileW
FindResourceW
HeapAlloc
SetEnvironmentVariableA
GetCurrentThreadId
TerminateThread
GetCPInfo
VirtualAlloc
FatalAppExitA
GetSystemDefaultLangID
HeapReAlloc
LocalFree
LoadLibraryA
LCMapStringA
GetSystemDirectoryA
LocalReAlloc
GetVersionExA
FileTimeToDosDateTime
UnhandledExceptionFilter
GlobalLock
Sleep
lstrcpynA
GetSystemTime
GetExitCodeThread
GetTimeFormatA
CreateMutexW
RaiseException
GetDiskFreeSpaceExA
GetFileType
ExitThread
SuspendThread
LockFile
GetProfileIntA
FindFirstFileW
GetLastError
SetHandleCount
SetFilePointer
LockResource
VirtualFree
CreateDirectoryA
GlobalSize
GetExitCodeProcess
CopyFileA
GetCommandLineA
GetUserDefaultLCID
GlobalFree
SetUnhandledExceptionFilter
LeaveCriticalSection
GlobalHandle
ExitProcess
SetErrorMode
GetSystemTimeAsFileTime
HeapDestroy
GetModuleHandleA
IsValidCodePage
GetVersionExW
CompareStringW
GetVolumeInformationW
FreeResource
RemoveDirectoryA
GetFileTime
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentStringsW
GetTickCount
FlushFileBuffers
lstrcpyW
GetTempPathA
SleepEx
GetCurrentProcess
GetFileAttributesA
FreeLibrary
UnmapViewOfFile
GetCurrentDirectoryA
CreateThread
GetStringTypeA
TlsSetValue
EnterCriticalSection
GetACP
VirtualQuery
CloseHandle
GetStartupInfoW
GlobalFindAtomA
IsBadStringPtrA
GetDateFormatA
WriteConsoleA
CreateFileW
GetDriveTypeW
ResetEvent
GetWindowsDirectoryA
UnlockFile
InterlockedExchange
OpenMutexA
WideCharToMultiByte
GetFullPathNameA
FreeEnvironmentStringsW
QueryPerformanceFrequency
TlsAlloc
GetModuleFileNameA
MoveFileA
GetTempFileNameA
GetLocalTime
EnumSystemLocalesA
HeapCreate
HeapSize
lstrcpyA
WriteConsoleW
GlobalAddAtomA
IsBadCodePtr
GetConsoleCP
FindFirstFileA
IsValidLocale
GetVersion
SetStdHandle
CompareStringA
EnumResourceLanguagesW
GetNumberFormatW
SystemTimeToFileTime
DeviceIoControl
FindClose
FileTimeToLocalFileTime
GetProfileStringA
TlsFree
SizeofResource
GetEnvironmentStrings
SetLastError
GetAtomNameA
HeapFree
GetVolumeInformationA
FlushInstructionCache
GetProcessVersion
GetEnvironmentVariableW
GetShortPathNameA
GetDriveTypeA
SetThreadPriority
GetTimeZoneInformation
GlobalFlags
lstrcmpiA
GetStdHandle
WaitForMultipleObjects
GlobalReAlloc
MulDiv
QueryPerformanceCounter
LoadResource
GetPrivateProfileStringA
OutputDebugStringA
GetFileSize
CreateMutexA
FormatMessageA
_lread
GetLocaleInfoW
LoadLibraryW
GetLocaleInfoA
GetModuleHandleW
ResumeThread
GetCurrentProcessId
CreateFileA
GetCommandLineW
ReadFile
OpenProcess
GetStartupInfoA
GetOEMCP
InterlockedIncrement
lstrlenA
GetCurrentThread
IsBadReadPtr
lstrcmpA
FormatMessageW
TlsGetValue
GetProfileIntW
GetWindowsDirectoryW
WinExec
MultiByteToWideChar
ExpandEnvironmentStringsA
LocalFileTimeToFileTime
InterlockedCompareExchange
GetEnvironmentVariableA
AllocConsole
GetProcAddress
GetStringTypeW
gdi32
PaintRgn
CreatePolygonRgn
GetMapMode
CloseMetaFile
SetTextJustification
SetBrushOrgEx
GetTextFaceW
StretchBlt
RoundRect
MoveToEx
StretchDIBits
GetFontData
CreateMetaFileA
CreateFontA
SetBitmapDimensionEx
SelectPalette
SetTextCharacterExtra
GetCharWidthW
SetPixel
PolyPolygon
ExtFloodFill
DPtoLP
PtVisible
EnumMetaFile
FlattenPath
GetDeviceCaps
CreateBrushIndirect
Polygon
OffsetWindowOrgEx
EnumFontFamiliesExA
SetViewportExtEx
RectInRegion
GetNearestPaletteIndex
SetViewportOrgEx
CreateEllipticRgn
GetTextMetricsW
CreateDCA
CreateFontIndirectW
PolyPolyline
DeleteMetaFile
SetAbortProc
PlayMetaFile
GetCharABCWidthsW
Pie
PolylineTo
SetBitmapBits
TextOutW
CreateRoundRectRgn
Arc
Ellipse
GetRegionData
BeginPath
ResizePalette
DeleteDC
BitBlt
SetGraphicsMode
RealizePalette
GetTextExtentPoint32W
GetPixel
ExtEscape
SetDIBitsToDevice
CreateHalftonePalette
GetBkColor
SetPaletteEntries
PlayMetaFileRecord
StartPage
Chord
StartDocA
CreateCompatibleBitmap
OffsetViewportOrgEx
FillPath
CreateDIBitmap
SetDIBits
GetObjectW
SetArcDirection
SelectObject
GetTextAlign
CreateHatchBrush
GetWindowOrgEx
GetClipRgn
EndPage
AbortDoc
CreateFontIndirectA
GetDCOrgEx
CreateRectRgn
CreateDIBPatternBrushPt
ExtSelectClipRgn
EqualRgn
ScaleWindowExtEx
EndPath
CreateEnhMetaFileA
FrameRgn
ModifyWorldTransform
ExtTextOutW
GetDIBits
CopyMetaFileA
CreateBitmap
GetCharWidthA
GetObjectType
GetCharABCWidthsA
ExtCreatePen
GetBkMode
GetTextColor
CreateCompatibleDC
FillRgn
CreatePen
CreateEllipticRgnIndirect
GetObjectA
SetStretchBltMode
SaveDC
SetBkMode
SetPolyFillMode
GetPolyFillMode
SetMapMode
SetBoundsRect
GetTextExtentPointW
IntersectClipRect
UnrealizeObject
SetRectRgn
SetColorAdjustment
Polyline
ExtCreateRegion
SetWindowOrgEx
PolyBezier
ArcTo
GetGraphicsMode
RectVisible
StrokeAndFillPath
GetClipBox
SetPixelV
GetOutlineTextMetricsA
Rectangle
CreatePenIndirect
GetTextFaceA
CreateRectRgnIndirect
SetBkColor
PlayEnhMetaFile
GetTextMetricsA
TextOutA
ExtTextOutA
SetTextAlign
GetCurrentObject
UpdateColors
GetViewportOrgEx
GetPath
PatBlt
DeleteObject
MaskBlt
GetGlyphOutlineA
LPtoDP
FloodFill
CreateSolidBrush
GetWindowExtEx
CloseFigure
OffsetRgn
Escape
CreateDIBSection
PathToRegion
ScaleViewportExtEx
GetBitmapDimensionEx
EndDoc
InvertRgn
SetWindowExtEx
GetSystemPaletteEntries
CombineRgn
ExcludeClipRect
GetBitmapBits
DeleteEnhMetaFile
GetROP2
PolyBezierTo
GetViewportExtEx
CreateBitmapIndirect
RestoreDC
CreatePatternBrush
GetNearestColor
SetROP2
GetRgnBox
PolyDraw
GetBoundsRect
OffsetClipRgn
GetTextExtentPointA
GetTextExtentPoint32A
CloseEnhMetaFile
GetTextCharacterExtra
GetCurrentPositionEx
GetStretchBltMode
PtInRegion
SetMapperFlags
SelectClipRgn
GetStockObject
LineTo
SelectClipPath
SetTextColor
CreateICA
CreatePalette
GetPaletteEntries
GetEnhMetaFileHeader
user32
SetRect
GetSubMenu
EmptyClipboard
GetDCEx
wsprintfA
SetTimer
GetMenuStringA
GetNextDlgTabItem
ClientToScreen
IsRectEmpty
ValidateRect
CallWindowProcA
MoveWindow
MessageBeep
SystemParametersInfoA
SetMenu
EndDialog
CreateDialogIndirectParamA
UnregisterHotKey
DlgDirListA
GetWindowPlacement
SetScrollInfo
FillRect
GetMenuItemID
keybd_event
ReleaseCapture
MapVirtualKeyExA
DispatchMessageA
SetClipboardData
RegisterClassA
CharNextA
AppendMenuA
TrackPopupMenu
SetMenuContextHelpId
CreateCaret
GetWindowTextLengthW
RegisterClassW
SetWindowLongA
ReleaseDC
TranslateMessage
IsChild
GetIconInfo
WaitMessage
GetUpdateRect
SetForegroundWindow
SubtractRect
GetClipboardData
EnableWindow
DestroyIcon
GetClassNameW
PeekMessageA
RegisterClipboardFormatA
SendMessageA
GetWindowRect
ReuseDDElParam
GetNextDlgGroupItem
GetMenuItemInfoA
GetWindowLongA
UnionRect
SetRectEmpty
SendDlgItemMessageW
SetWindowTextA
GetPropW
LoadIconA
SendDlgItemMessageA
TabbedTextOutA
InsertMenuA
DrawTextExA
GetSysColor
GetMessageTime
PostQuitMessage
CharNextW
DrawIconEx
CharLowerW
InsertMenuItemA
GetAsyncKeyState
BringWindowToTop
GetMenuItemCount
DestroyMenu
PtInRect
LoadBitmapA
CopyImage
RedrawWindow
GrayStringW
DrawTextA
GetPropA
GetMenu
GetClassNameA
ShowOwnedPopups
KillTimer
GetClipboardFormatNameA
RegisterClassExA
DefFrameProcA
GetTabbedTextExtentA
ShowCaret
UpdateWindow
LoadCursorA
HideCaret
ShowScrollBar
GetClassInfoW
PostMessageA
SetWindowRgn
DestroyAcceleratorTable
EnableScrollBar
CharUpperW
SetMenuItemBitmaps
GrayStringA
GetMenuCheckMarkDimensions
SetPropA
LoadMenuA
CopyIcon
ScrollWindowEx
IsWindow
GetDesktopWindow
IsZoomed
EndDeferWindowPos
InsertMenuW
GetScrollRange
GetMessagePos
SetScrollPos
WaitForInputIdle
SetWindowPos
GetClassInfoExW
ClipCursor
GetMenuStringW
CloseClipboard
GetActiveWindow
CallNextHookEx
EndPaint
GetClassInfoA
BeginPaint
DrawStateA
RegisterWindowMessageA
WinHelpA
DrawEdge
UnregisterClassW
MessageBoxW
SetClassLongW
CreateAcceleratorTableA
LoadStringA
CopyAcceleratorTableA
RemoveMenu
MessageBoxA
ModifyMenuA
ExcludeUpdateRgn
LoadStringW
InvertRect
GetDlgItem
GetWindowContextHelpId
TabbedTextOutW
SendInput
CharUpperA
IsIconic
InflateRect
GetWindowLongW
CheckMenuItem
GetDlgCtrlID
TranslateAcceleratorA
GetMenuContextHelpId
GetCursorPos
GetWindowDC
OpenClipboard
IsDialogMessageA
SetScrollRange
AdjustWindowRectEx
GetWindow
GetParent
GetClassLongW
DlgDirSelectComboBoxExA
UnhookWindowsHookEx
GetForegroundWindow
PeekMessageW
GetAncestor
GetWindowTextA
DefWindowProcA
LoadMenuW
MapDialogRect
GetKeyState
ScreenToClient
GetSystemMetrics
GetClassLongA
DdeCreateStringHandleA
InvalidateRect
ArrangeIconicWindows
ToAsciiEx
GetDC
IsDlgButtonChecked
GetWindowThreadProcessId
DlgDirSelectExA
EnumChildWindows
BeginDeferWindowPos
GetFocus
GetMenuState
RemovePropA
SetDlgItemTextA
DialogBoxParamA
IsWindowVisible
SetWindowTextW
IntersectRect
DdeInitializeW
CopyRect
SetCapture
LoadBitmapW
SetParent
GetLastActivePopup
DestroyCursor
SetWindowsHookExA
PostMessageW
EnumWindows
GetWindowTextLengthA
LoadMenuIndirectA
UnregisterClassA
DrawFocusRect
GetMessageA
SetWindowContextHelpId
LockWindowUpdate
OffsetRect
DrawIcon
DispatchMessageW
DrawFrameControl
GetTopWindow
IsClipboardFormatAvailable
ScrollWindow
SetActiveWindow
FlashWindow
DlgDirListComboBoxA
EqualRect
SetCursor
MapWindowPoints
GetClientRect
GetDlgItemInt
DestroyWindow
CreatePopupMenu
FindWindowW
DdeCreateStringHandleW
PostThreadMessageW
EnableMenuItem
GetCapture
SetFocus
IsWindowEnabled
ShowWindow
AppendMenuW
GetScrollInfo
GetSysColorBrush
comctl32
ImageList_Draw
ImageList_BeginDrag
ImageList_DragLeave
ImageList_SetDragCursorImage
ImageList_Copy
PropertySheetW
ImageList_DragShowNolock
ImageList_GetIcon
CreateStatusWindowW
ImageList_LoadImageA
ImageList_Create
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_Duplicate
ImageList_DrawEx
ImageList_SetBkColor
ImageList_SetOverlayImage
ImageList_EndDrag
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_Remove
PropertySheetA
ImageList_DrawIndirect
InitCommonControlsEx
ImageList_DragEnter
ImageList_Destroy
ImageList_SetImageCount
ord17
ImageList_AddMasked
ImageList_GetImageCount
ImageList_DragMove
ImageList_Add
ImageList_ReplaceIcon
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 268KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ