Static task
static1
Behavioral task
behavioral1
Sample
1373e2a87af5336d5a8399bd9de10da1eec6d0ec583323f7ac4e325bcfb334ca.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1373e2a87af5336d5a8399bd9de10da1eec6d0ec583323f7ac4e325bcfb334ca.exe
Resource
win10v2004-20221111-en
General
-
Target
1373e2a87af5336d5a8399bd9de10da1eec6d0ec583323f7ac4e325bcfb334ca
-
Size
2.0MB
-
MD5
afc1585636408f42c386818a31f3161b
-
SHA1
e73a76319bde738150b46ad87f47e66ef797014b
-
SHA256
1373e2a87af5336d5a8399bd9de10da1eec6d0ec583323f7ac4e325bcfb334ca
-
SHA512
a3f99c6c23532648947cedc00cda1944d3b9033f5decfcb34d005ea482b0429c56c24095caee17c8763e5af1d13db1bfe8be98b675ebb080adaf03e3a9af6459
-
SSDEEP
24576:uskSx0IXAkHF8fMDpWynOyPNz9UFr49VZiIvWey8FvB05BnKMBR1OxOWytTnOA:u/UJpWynU6aZBLOxOJTO
Malware Config
Signatures
Files
-
1373e2a87af5336d5a8399bd9de10da1eec6d0ec583323f7ac4e325bcfb334ca.exe windows x86
6412357968d0be4d6f4a76b17febf2d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathRemoveFileSpecA
SHAutoComplete
winmm
PlaySoundA
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInAddBuffer
waveInStart
waveOutWrite
waveInStop
waveInReset
waveInUnprepareHeader
waveInClose
waveOutReset
waveOutUnprepareHeader
waveOutClose
kernel32
GetCurrentDirectoryA
SetErrorMode
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetOEMCP
GetCPInfo
GetProcessVersion
GetProfileIntA
GetProfileStringA
SetEnvironmentVariableA
CompareStringW
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetDriveTypeA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
TlsGetValue
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
ExitThread
TerminateProcess
GetACP
GetSystemTime
GetTimeZoneInformation
HeapFree
HeapAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
CompareStringA
GetTempPathA
GetPrivateProfileSectionNamesA
GetExitCodeThread
ResetEvent
GetVersionExA
EnumResourceLanguagesA
EnumResourceTypesA
EnumResourceNamesA
GetLocalTime
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
MulDiv
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
SetThreadPriority
GetCurrentThread
lstrcmpA
SetLastError
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
LockResource
LocalSize
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetSystemDirectoryA
lstrcatA
CopyFileA
DeleteCriticalSection
CancelIo
GetTickCount
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
GetQueuedCompletionStatus
CreateIoCompletionPort
GetSystemInfo
EnterCriticalSection
PostQueuedCompletionStatus
LeaveCriticalSection
InitializeCriticalSection
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameA
SetUnhandledExceptionFilter
FindResourceA
LoadResource
SizeofResource
LoadLibraryA
GetProcAddress
lstrcpyA
CreateDirectoryA
GetLastError
MoveFileA
RemoveDirectoryA
ReadFile
DeleteFileA
SetFilePointer
WriteFile
CreateFileA
GetFileSize
FindFirstFileA
FindNextFileA
FindClose
lstrcpynA
LocalAlloc
LocalFree
GetLogicalDriveStringsA
lstrlenA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetFileAttributesA
VirtualAlloc
VirtualFree
CreateThread
ResumeThread
SetEvent
WaitForSingleObject
TerminateThread
CloseHandle
CreateEventA
Sleep
SetHandleCount
user32
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
ExcludeUpdateRgn
DefDlgProcA
PostThreadMessageA
FillRect
InvertRect
IsRectEmpty
SetParent
RegisterClipboardFormatA
LockWindowUpdate
GetDCEx
GetNextDlgGroupItem
CopyAcceleratorTableA
GetClipboardFormatNameA
GetTabbedTextExtentA
SendMessageTimeoutA
IsWindowUnicode
GetWindowLongW
SetWindowLongW
UnionRect
GetDoubleClickTime
SetCursorPos
GetWindowRgn
IsMenu
GetMenuDefaultItem
GetMenuItemInfoA
SetWindowRgn
DispatchMessageA
TranslateMessage
GetMessageA
LoadIconA
SendMessageA
EnableWindow
RegisterWindowMessageA
SetRect
GetWindow
GetClientRect
SetCapture
LoadCursorA
SetCursor
ScreenToClient
UpdateWindow
ClientToScreen
ReleaseCapture
GetParent
IsWindowVisible
SetWindowPos
GetDlgCtrlID
wsprintfA
DestroyIcon
GetMenuStringA
InsertMenuA
GetSysColorBrush
GetClassNameA
KillTimer
SetTimer
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
TranslateAcceleratorA
LoadAcceleratorsA
MapDialogRect
SetWindowContextHelpId
ValidateRect
ShowOwnedPopups
PostQuitMessage
DestroyMenu
LoadStringA
PtInRect
InvalidateRect
IsZoomed
SetRectEmpty
CharUpperA
wvsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
WindowFromPoint
IsWindow
MessageBoxA
GetFocus
GetCursorPos
EnableMenuItem
GetMenuItemCount
DeleteMenu
GetSubMenu
LoadMenuA
CharNextA
PostMessageA
OffsetRect
GetSystemMetrics
InflateRect
MessageBeep
AppendMenuA
GetSystemMenu
GetDesktopWindow
RedrawWindow
FindWindowA
DestroyCursor
SetClassLongA
ReleaseDC
GetDC
GetIconInfo
UnregisterClassA
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
SetFocus
AdjustWindowRectEx
EqualRect
GetCursor
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetScrollInfo
SetScrollRange
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
LoadImageA
GetKeyState
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawTextA
CheckMenuItem
GetMenuState
ShowScrollBar
DrawIconEx
IntersectRect
GetWindowRect
CheckMenuRadioItem
DrawFocusRect
DrawStateA
DrawFrameControl
DrawEdge
ShowCaret
HideCaret
SetMenuDefaultItem
EnumChildWindows
DrawAnimatedRects
CreatePopupMenu
MapVirtualKeyA
WaitMessage
IsCharLowerA
GetKeyNameTextA
MapVirtualKeyExA
GetKeyboardLayout
ToAsciiEx
GetKeyboardState
GetKeyboardLayoutList
IsClipboardFormatAvailable
CreateIconFromResourceEx
CreateIconIndirect
CopyIcon
LookupIconIdFromDirectoryEx
GetMenuStringW
gdi32
SetTextColor
ExtTextOutA
BitBlt
StretchDIBits
CreateCompatibleDC
CreateDIBSection
SelectObject
DeleteObject
SetBkColor
CreateSolidBrush
GetObjectA
TextOutA
SetBkMode
GetClipBox
CreateBitmap
PatBlt
CreateRectRgnIndirect
GetTextExtentPoint32A
GetTextMetricsA
DeleteDC
SetWindowExtEx
ScaleWindowExtEx
CreateCompatibleBitmap
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCharWidthA
GetCurrentPositionEx
PolyBezierTo
GetClipRgn
CreateRectRgn
ExtSelectClipRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreatePatternBrush
PtVisible
CreateFontA
SaveDC
RestoreDC
GetStockObject
RectVisible
Escape
GetMapMode
SetRectRgn
CombineRgn
CreateFontIndirectA
DPtoLP
CopyMetaFileA
GetTextColor
SetStretchBltMode
GetBkColor
LPtoDP
SetPixel
GetPixel
Polygon
GetWindowOrgEx
GetCurrentObject
StretchBlt
GetTextAlign
EnumFontFamiliesExA
GetDIBits
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SelectClipRgn
CreateDIBitmap
GetTextExtentPointA
ExtFloodFill
ExtTextOutW
GetTextExtentPoint32W
BeginPath
CloseFigure
EndPath
StrokeAndFillPath
FillPath
StrokePath
Ellipse
GetViewportOrgEx
Polyline
PtInRegion
RoundRect
CreatePolygonRgn
GetRgnBox
ExtCreateRegion
GetBitmapBits
comdlg32
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
ChooseColorA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegQueryValueExA
RegCreateKeyA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegSetValueA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
GetFileSecurityA
SetFileSecurityA
shell32
ord71
DragQueryFileA
SHGetMalloc
DragFinish
ExtractIconA
ShellExecuteA
Shell_NotifyIconA
SHAppBarMessage
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetFileInfoA
comctl32
ImageList_GetIcon
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_Remove
ImageList_GetImageCount
ImageList_Draw
ImageList_GetIconSize
ImageList_Add
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
oledlg
ord1
ord8
ole32
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleRun
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoInitialize
StgOpenStorageOnILockBytes
CoGetClassObject
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc
OleDuplicateData
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoUninitialize
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
olepro32
ord253
oleaut32
VariantChangeType
SysStringByteLen
VarDateFromStr
VarBstrFromDate
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
LoadTypeLi
SysAllocString
VariantCopy
VariantClear
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
OleLoadPicturePath
VariantChangeTypeEx
SafeArrayUnaccessData
skinh
SkinH_AttachRes
ws2_32
listen
getpeername
closesocket
WSAStartup
WSACleanup
bind
gethostname
gethostbyname
WSACloseEvent
WSASend
WSARecv
socket
accept
WSAGetLastError
setsockopt
WSAIoctl
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSASocketA
WSACreateEvent
WSAEventSelect
htons
inet_ntoa
pdh
PdhCloseQuery
PdhAddCounterA
PdhOpenQueryA
PdhGetFormattedCounterValue
PdhCollectQueryData
avifil32
AVIFileExit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamWrite
AVIFileRelease
AVIStreamRelease
AVIFileInit
msvfw32
DrawDibDraw
ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICOpen
ICSendMessage
ICSeqCompressFrameStart
ICDecompress
DrawDibOpen
DrawDibClose
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ