Static task
static1
Behavioral task
behavioral1
Sample
9fe0e44219f6743ef47ae9eacdd89533c1444686c24d29a0a912d3ff2271cde7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9fe0e44219f6743ef47ae9eacdd89533c1444686c24d29a0a912d3ff2271cde7.exe
Resource
win10v2004-20220812-en
General
-
Target
9fe0e44219f6743ef47ae9eacdd89533c1444686c24d29a0a912d3ff2271cde7
-
Size
276KB
-
MD5
76f92b928c5276dcd793d354fcd5e6d2
-
SHA1
5c3891aabf96156eb7b833cd682cb3114c7a657a
-
SHA256
9fe0e44219f6743ef47ae9eacdd89533c1444686c24d29a0a912d3ff2271cde7
-
SHA512
1c5f107c1a9ff13fd7598023f1ad2862c4fa358194883f745804a3b220a14e6c2bf276df54c026aa316338a07062e41d1087990860a2101900da2158e593e6f5
-
SSDEEP
3072:EkAHu1dNGxqRaswb5nE8bOBNlK7n3pvjOhmk91DVIdMNIK6YtZHRhyJ9bTBhGFQ5:EknzNNsZd65KzpChmU1BpxQhH+NMdU
Malware Config
Signatures
Files
-
9fe0e44219f6743ef47ae9eacdd89533c1444686c24d29a0a912d3ff2271cde7.exe windows x86
58aad4ec092cad4c062a8411bd4ab19e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutWrite
mmioRead
mixerGetLineInfoW
mixerGetLineControlsW
mixerOpen
mmioDescend
mixerGetNumDevs
waveInAddBuffer
waveOutGetNumDevs
mixerGetControlDetailsA
PlaySoundA
mixerGetControlDetailsW
waveOutPrepareHeader
PlaySoundW
waveInReset
waveOutClose
waveInUnprepareHeader
waveInStart
waveInClose
mixerGetLineControlsA
mixerClose
waveInOpen
waveOutGetPosition
mixerGetDevCapsW
waveInPrepareHeader
mciSendCommandW
waveOutReset
mixerGetLineInfoA
waveInStop
waveInGetNumDevs
mixerSetControlDetails
wininet
InternetGetLastResponseInfoW
InternetGoOnline
HttpOpenRequestA
InternetOpenUrlA
InternetConnectA
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenW
HttpSendRequestExA
InternetReadFile
InternetOpenUrlW
HttpSendRequestA
InternetGetConnectedState
InternetCloseHandle
HttpAddRequestHeadersA
HttpQueryInfoA
InternetTimeToSystemTime
InternetErrorDlg
InternetTimeFromSystemTime
InternetOpenA
InternetAutodialHangup
InternetCanonicalizeUrlA
InternetWriteFile
InternetCrackUrlW
InternetCrackUrlA
InternetQueryDataAvailable
user32
DrawFocusRect
SetWindowPos
RegisterWindowMessageA
SetPropA
MessageBeep
SetForegroundWindow
GetWindowRect
IsDialogMessageW
EndDeferWindowPos
wsprintfA
CreateWindowExW
EnableScrollBar
GetClipboardOwner
GetDCEx
IsWindow
DeleteMenu
DefWindowProcA
ShowScrollBar
WindowFromDC
PeekMessageW
SystemParametersInfoA
EnableMenuItem
EnableWindow
SetDlgItemTextA
IsIconic
SetScrollInfo
DefDlgProcA
DeferWindowPos
UnregisterClassA
InvalidateRect
GetMonitorInfoW
DestroyWindow
CloseClipboard
FillRect
SetFocus
MsgWaitForMultipleObjects
SetParent
GetClassInfoExA
EndDialog
UnpackDDElParam
UnionRect
wsprintfW
GetClientRect
CharNextA
ClientToScreen
LoadAcceleratorsA
TrackPopupMenuEx
SetWindowPlacement
SendMessageA
TabbedTextOutA
GetWindowDC
GetWindowTextLengthA
SetRectEmpty
DrawIcon
DrawMenuBar
TranslateMessage
GetSystemMenu
GetKeyState
CreateDialogIndirectParamA
IsRectEmpty
GetClassLongA
SendMessageW
GetAncestor
SetScrollPos
CopyRect
SendNotifyMessageA
WinHelpA
GrayStringA
DestroyMenu
GetMenuItemCount
GetDlgCtrlID
IsWindowEnabled
GetDC
SetCursor
DestroyCursor
LoadIconW
EmptyClipboard
GetDlgItemTextA
DefFrameProcA
GetMenuItemID
RemoveMenu
AdjustWindowRect
GetMenuState
GetSysColorBrush
SetMenuItemInfoW
GetMenu
LoadMenuW
GetClipboardData
GetSystemMetrics
MonitorFromPoint
GetWindowLongA
GetTopWindow
CopyAcceleratorTableA
RegisterClassA
GetDesktopWindow
BeginDeferWindowPos
GetCursor
RegisterClassExA
DispatchMessageW
GetForegroundWindow
UnhookWindowsHookEx
SetActiveWindow
GetNextDlgTabItem
IsWindowUnicode
GetWindowPlacement
PostMessageA
ReleaseCapture
BringWindowToTop
CallNextHookEx
RegisterClipboardFormatA
GetMessageW
GetScrollPos
PostThreadMessageA
WaitForInputIdle
WindowFromPoint
GetMessageTime
MapVirtualKeyA
LoadStringA
InsertMenuA
IntersectRect
LoadCursorW
RedrawWindow
IsWindowVisible
InsertMenuItemA
GetActiveWindow
GetPropA
SetWindowsHookExW
GetWindowTextA
GetIconInfo
EndPaint
SetMenuDefaultItem
IsDialogMessageA
DrawIconEx
ValidateRgn
SetMenu
GetMessageA
DestroyIcon
CreateIconIndirect
MapWindowPoints
CheckMenuItem
GetNextDlgGroupItem
EnumChildWindows
DispatchMessageA
GetDialogBaseUnits
PostThreadMessageW
GetMenuCheckMarkDimensions
DrawTextW
RegisterClipboardFormatW
FindWindowA
SetWindowLongA
SetWindowsHookExA
GetDlgItem
CreatePopupMenu
SetRect
GetDlgItemInt
ShowCaret
SetScrollRange
DefWindowProcW
RegisterClassW
LoadImageA
LoadMenuA
LockWindowUpdate
CharUpperA
PeekMessageA
AttachThreadInput
LoadCursorA
IsMenu
ModifyMenuW
ToAsciiEx
CharNextW
ScrollWindowEx
SetWindowTextA
GetWindow
PostQuitMessage
CheckDlgButton
SetTimer
GetDoubleClickTime
CreateAcceleratorTableA
GetClassNameA
MessageBoxA
GetSubMenu
SetMenuItemInfoA
MapVirtualKeyExA
MessageBoxW
CreateWindowExA
DrawEdge
ValidateRect
GetSysColor
LoadBitmapA
GetMenuStringA
MapDialogRect
GetCursorPos
DestroyAcceleratorTable
CallWindowProcA
ScreenToClient
GetFocus
RemovePropA
SetMenuItemBitmaps
ShowWindow
TrackMouseEvent
CreateMenu
GetClassInfoA
GetCaretPos
GetMessagePos
GetUpdateRect
EqualRect
TrackPopupMenu
InflateRect
GetClipboardFormatNameA
WinHelpW
LoadStringW
PtInRect
LoadIconA
TranslateAcceleratorA
MoveWindow
DrawFrameControl
TranslateAcceleratorW
OffsetRect
HideCaret
FrameRect
GetAsyncKeyState
GetCapture
ReleaseDC
IsDlgButtonChecked
SetCapture
GetLastActivePopup
SetWindowTextW
SetWindowRgn
UpdateWindow
GetDlgItemTextW
CreateDialogIndirectParamW
PostMessageW
SendDlgItemMessageA
IsCharLowerW
InvalidateRgn
AppendMenuA
GetParent
MapVirtualKeyExW
GetPropW
GetWindowTextW
SetClipboardData
ModifyMenuA
BeginPaint
KillTimer
wsock32
WSACleanup
kernel32
GetWindowsDirectoryA
GetDiskFreeSpaceW
SizeofResource
FileTimeToDosDateTime
WritePrivateProfileStringA
CreateFileMappingA
GetCommandLineA
GetModuleHandleA
RaiseException
GlobalHandle
QueryPerformanceCounter
SetStdHandle
GetEnvironmentVariableA
GetEnvironmentStringsW
lstrcmpA
VirtualUnlock
LocalFree
LCMapStringA
GetSystemDirectoryA
WriteConsoleA
DosDateTimeToFileTime
DeleteFileA
GetFileAttributesA
InterlockedCompareExchange
DebugBreak
VirtualProtect
GetTimeFormatA
FatalAppExitA
GlobalAddAtomA
SetEnvironmentVariableA
lstrcmpW
GetFileAttributesW
SetUnhandledExceptionFilter
SetEvent
MoveFileA
HeapReAlloc
WaitForSingleObject
FreeEnvironmentStringsA
CreatePipe
CompareStringA
GetStringTypeA
GlobalGetAtomNameA
InitializeCriticalSection
GetTempFileNameA
IsValidCodePage
GetSystemInfo
LeaveCriticalSection
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
TlsGetValue
FindResourceW
CloseHandle
GlobalUnlock
CreateFileA
GetVersion
Beep
LocalReAlloc
SetCurrentDirectoryW
CreateEventA
HeapSize
GetUserDefaultLCID
GlobalDeleteAtom
LocalAlloc
GetConsoleCP
CreateMutexW
OpenMutexA
ConvertDefaultLocale
GetLocaleInfoA
WriteFile
CreateSemaphoreA
GlobalAddAtomW
EnumResourceLanguagesA
GetModuleFileNameW
CreateProcessW
SetHandleCount
GetSystemDefaultLangID
Sleep
GlobalAlloc
ExitProcess
TerminateThread
FormatMessageA
LoadLibraryA
GetEnvironmentStrings
GetTimeZoneInformation
lstrcmpiW
ReleaseSemaphore
CreateMutexA
GetSystemDirectoryW
GetStdHandle
CreateDirectoryA
MulDiv
HeapAlloc
GetDateFormatA
GetVersionExA
GetModuleFileNameA
GetModuleHandleW
RtlUnwind
IsBadReadPtr
GetProcessHeap
GetCurrentThreadId
ResetEvent
SystemTimeToFileTime
GetCurrentProcessId
VirtualQuery
SetFilePointer
GetStartupInfoA
VirtualAlloc
GetPrivateProfileIntW
LoadLibraryW
GetTempPathA
GetProcAddress
GlobalFlags
CompareStringW
GetOEMCP
WaitForMultipleObjects
GetVolumeInformationW
DeviceIoControl
CopyFileA
GetACP
UnhandledExceptionFilter
FindNextFileA
FreeConsole
FreeResource
GetStringTypeW
GetTickCount
GetFileInformationByHandle
GetCPInfo
CreateThread
TerminateProcess
IsValidLocale
GetExitCodeProcess
SetFileTime
TlsFree
GetFileType
LoadResource
GlobalLock
GetLocaleInfoW
RemoveDirectoryW
IsProcessorFeaturePresent
HeapCreate
VirtualFree
EnterCriticalSection
MultiByteToWideChar
lstrcatA
GetSystemTimeAsFileTime
FlushFileBuffers
SetLastError
LockResource
SetErrorMode
GetConsoleMode
GetConsoleOutputCP
FindNextFileW
GetFileTime
lstrcpyA
FormatMessageW
GetStringTypeExW
RemoveDirectoryA
GetExitCodeThread
WinExec
FreeLibrary
InterlockedDecrement
SetCurrentDirectoryA
DeleteCriticalSection
GetShortPathNameW
GetThreadLocale
HeapDestroy
HeapFree
TlsAlloc
GetCurrentProcess
WriteConsoleW
LockFile
IsDBCSLeadByte
InterlockedIncrement
GetCurrentThread
CreateProcessA
lstrcpyW
GetUserDefaultLangID
MoveFileExA
TlsSetValue
WideCharToMultiByte
ReadFile
SetEndOfFile
GetFileSize
lstrcpynW
UnlockFile
GetCommandLineW
MoveFileW
GetPrivateProfileStringA
FindFirstFileA
EnumResourceLanguagesW
GetLastError
LCMapStringW
IsBadWritePtr
FreeEnvironmentStringsW
FindClose
GetLogicalDrives
InterlockedExchange
DuplicateHandle
GetStartupInfoW
EnumSystemLocalesA
GetProcessVersion
GetVersionExW
CreateDirectoryW
comdlg32
GetSaveFileNameW
PageSetupDlgA
GetFileTitleA
GetOpenFileNameA
GetOpenFileNameW
FindTextW
GetSaveFileNameA
ChooseColorW
ChooseFontA
advapi32
DuplicateToken
RegEnumValueA
RegDeleteValueW
RegCreateKeyW
SetSecurityDescriptorDacl
CryptReleaseContext
RegSetValueExA
InitializeAcl
RegQueryInfoKeyA
RegCreateKeyA
CryptAcquireContextA
OpenProcessToken
RegCreateKeyExA
RegOpenKeyW
CryptDecrypt
GetTokenInformation
RegEnumKeyExA
GetUserNameA
CloseServiceHandle
RegQueryInfoKeyW
RegQueryValueExW
GetFileSecurityA
FreeSid
RegCreateKeyExW
RegOpenKeyExA
AllocateAndInitializeSid
AdjustTokenPrivileges
CryptDestroyKey
RegQueryValueA
CryptExportKey
CryptDestroyHash
AddAce
CryptCreateHash
CryptHashData
RegOpenKeyA
CryptEncrypt
CryptGenKey
RegDeleteKeyW
OpenThreadToken
LookupPrivilegeValueW
RegQueryValueExA
GetSidSubAuthority
GetAclInformation
LookupAccountSidW
RegDeleteKeyA
RegCloseKey
LookupPrivilegeValueA
comctl32
ImageList_DragMove
ImageList_DragEnter
ImageList_GetIconSize
ImageList_DragLeave
ImageList_Replace
ImageList_AddMasked
ImageList_Create
ImageList_BeginDrag
ImageList_GetImageCount
PropertySheetW
ImageList_Destroy
ord17
ImageList_DragShowNolock
CreatePropertySheetPageW
ImageList_SetBkColor
ImageList_GetIcon
ImageList_SetDragCursorImage
ImageList_EndDrag
ImageList_Remove
ImageList_Write
ImageList_LoadImageA
ImageList_Read
DestroyPropertySheetPage
InitCommonControlsEx
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_SetOverlayImage
CreatePropertySheetPageA
ImageList_Draw
ImageList_Add
_TrackMouseEvent
PropertySheetA
ImageList_LoadImageW
shlwapi
PathIsURLA
PathCanonicalizeA
PathIsUNCA
PathUnquoteSpacesA
StrToIntA
PathIsRelativeA
PathSkipRootA
SHDeleteKeyA
PathRemoveArgsA
PathRemoveFileSpecA
PathStripToRootA
PathFindExtensionA
PathAddBackslashA
PathRelativePathToA
PathQuoteSpacesA
PathIsDirectoryA
PathMakePrettyA
PathFindFileNameA
PathAppendA
PathParseIconLocationA
ole32
CoInitialize
CreateILockBytesOnHGlobal
OleCreateLinkFromData
CoLockObjectExternal
OleCreateLinkToFile
ReadFmtUserTypeStg
CLSIDFromString
OleSaveToStream
CoDisconnectObject
CoGetMalloc
CoUninitialize
OleRegGetMiscStatus
ReadClassStg
CoGetClassObject
OleCreate
OleUninitialize
CoTaskMemFree
OleDuplicateData
OleIsRunning
CoRegisterMessageFilter
CoResumeClassObjects
OleRegGetUserType
OleCreateFromData
CoTaskMemRealloc
OleDestroyMenuDescriptor
StgOpenStorageOnILockBytes
StgCreateDocfile
CreateOleAdviseHolder
ReleaseStgMedium
OleTranslateAccelerator
OleInitialize
StringFromCLSID
CoRegisterClassObject
CoTreatAsClass
CreateGenericComposite
CoCreateInstance
GetRunningObjectTable
GetHGlobalFromILockBytes
RegisterDragDrop
CoRevokeClassObject
CoFreeUnusedLibraries
CoTaskMemAlloc
OleFlushClipboard
StgIsStorageFile
CreateFileMoniker
CreateItemMoniker
OleCreateMenuDescriptor
OleSetContainedObject
OleCreateFromFile
OleGetIconOfClass
CoMarshalInterThreadInterfaceInStream
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoCreateGuid
OleLockRunning
CoInitializeEx
OleSave
CoLoadLibrary
OleLoad
OleGetClipboard
CreateStreamOnHGlobal
CoSuspendClassObjects
OleSetMenuDescriptor
IsAccelerator
OleIsCurrentClipboard
OleRegEnumVerbs
StringFromGUID2
StgCreateDocfileOnILockBytes
StgOpenStorage
RevokeDragDrop
CLSIDFromProgID
Sections
.text Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ