Static task
static1
Behavioral task
behavioral1
Sample
9eb2540908080e85a2989179abc6399bee4f7e5534388d9bd183c05fabf6f60d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9eb2540908080e85a2989179abc6399bee4f7e5534388d9bd183c05fabf6f60d.exe
Resource
win10v2004-20220812-en
General
-
Target
9eb2540908080e85a2989179abc6399bee4f7e5534388d9bd183c05fabf6f60d
-
Size
256KB
-
MD5
6a98fdc5e119e929648806a08635c113
-
SHA1
cc48ac3acbc045a610d2d0f5098f31b3cc0ada15
-
SHA256
9eb2540908080e85a2989179abc6399bee4f7e5534388d9bd183c05fabf6f60d
-
SHA512
e3b2ceb61e927901e86ba01b602158056a2893a2da754f761b40c6923f9885e4a396d4f86100e3a74dc13099c50d7f5c3abce1c9be492e1eeb18dec6b5a57aab
-
SSDEEP
3072:hNOG5b/rZB1MRwdZLXcuOQAVA2h7F9GY0zTTr1cFYMXzEaMhJq4bfMrF9oyB8:ht5bn1JX3OfNWnTr1cFUJqEE
Malware Config
Signatures
Files
-
9eb2540908080e85a2989179abc6399bee4f7e5534388d9bd183c05fabf6f60d.exe windows x86
5602b2ddeb50a5f01b58805891adb20d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlCombineW
PathCompactPathW
PathFindFileNameW
PathCanonicalizeW
PathRemoveExtensionW
PathAddBackslashW
StrFormatByteSizeW
PathAppendW
PathFileExistsW
PathIsRootW
PathIsRelativeW
PathMatchSpecW
PathIsURLW
PathIsDirectoryW
PathIsFileSpecW
PathRemoveBlanksW
PathRemoveFileSpecW
PathMakePrettyW
PathRemoveBackslashW
PathFindExtensionW
ole32
CLSIDFromProgID
OleQueryLinkFromData
OleFlushClipboard
CLSIDFromString
OleCreate
OleInitialize
CoRegisterClassObject
CoLockObjectExternal
StgOpenStorage
CreateOleAdviseHolder
OleIsCurrentClipboard
OleGetClipboard
OleCreateFromData
OleGetIconOfClass
CreateStreamOnHGlobal
PropVariantClear
StringFromGUID2
OleSetMenuDescriptor
CoCreateInstance
CoInitializeSecurity
CoGetInterfaceAndReleaseStream
StringFromCLSID
CoTaskMemAlloc
CoFreeUnusedLibraries
CoGetClassObject
OleCreateLinkFromData
CoMarshalInterThreadInterfaceInStream
OleUninitialize
DoDragDrop
CoUninitialize
CoCreateGuid
RegisterDragDrop
RevokeDragDrop
CreateFileMoniker
CoTaskMemFree
WriteClassStm
CreateBindCtx
ProgIDFromCLSID
StgIsStorageFile
CoRegisterMessageFilter
OleCreateFromFile
CoDisconnectObject
CoGetMalloc
GetRunningObjectTable
OleDuplicateData
CreateGenericComposite
OleRegEnumVerbs
CoTaskMemRealloc
OleSave
CoInitialize
OleSetContainedObject
CreateItemMoniker
OleRun
OleSaveToStream
CoRevokeClassObject
OleCreateLinkToFile
CoInitializeEx
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleQueryCreateFromData
OleRegGetUserType
CoUnmarshalInterface
OleRegGetMiscStatus
ReleaseStgMedium
StgCreateDocfile
IIDFromString
OleLockRunning
StgCreateDocfileOnILockBytes
shell32
Shell_NotifyIconW
DragQueryFileA
ExtractIconExA
ShellExecuteExA
SHGetDesktopFolder
ShellExecuteA
ord155
SHGetMalloc
SHGetSpecialFolderPathA
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetFileInfoA
DragAcceptFiles
ExtractIconA
SHBrowseForFolderW
SHGetPathFromIDListA
SHAppBarMessage
DragFinish
SHBrowseForFolderA
gdi32
CreateFontW
RestoreDC
GetROP2
EqualRgn
GetTextFaceA
SetWindowExtEx
StretchDIBits
GetObjectA
CreatePatternBrush
SetBitmapBits
ScaleViewportExtEx
MaskBlt
AnimatePalette
CreateFontIndirectA
CreateRectRgnIndirect
GetTextMetricsW
StartPage
DrawEscape
SetTextAlign
SetViewportOrgEx
CreateDIBitmap
GetMapMode
DeleteDC
Polyline
GetClipBox
RectVisible
GetCharWidthFloatA
GetEnhMetaFileHeader
SetBkColor
CombineRgn
CreatePalette
Rectangle
SetROP2
FloodFill
BitBlt
EnumFontFamiliesExW
CreateDCA
SetTextJustification
GetCharABCWidthsA
GetArcDirection
SetArcDirection
AbortDoc
PlayEnhMetaFile
DeleteEnhMetaFile
GetDeviceCaps
GetBkColor
GetTextMetricsA
GetViewportOrgEx
SetPixel
ExcludeClipRect
SetAbortProc
ResizePalette
UnrealizeObject
GetClipRgn
SetBitmapDimensionEx
RectInRegion
TextOutA
SelectObject
GetTextColor
GetPaletteEntries
GetObjectW
CreateEllipticRgnIndirect
CreateFontA
GetWindowExtEx
PatBlt
GetWindowOrgEx
ExtCreatePen
CreatePolygonRgn
CreateHatchBrush
SetPolyFillMode
PolyPolygon
OffsetViewportOrgEx
EndPath
PtVisible
GetTextExtentPoint32W
Ellipse
OffsetClipRgn
StrokePath
CloseEnhMetaFile
SetWorldTransform
GetCurrentObject
CreateEnhMetaFileA
BeginPath
ExtSelectClipRgn
DeleteMetaFile
GetTextAlign
GetStockObject
SaveDC
EndPage
UpdateColors
GetCurrentPositionEx
SelectClipRgn
GdiComment
GetCharWidthA
IntersectClipRect
CloseMetaFile
SetPixelV
FillPath
ExtTextOutA
GetRgnBox
SetBkMode
GetStretchBltMode
Chord
GetTextCharsetInfo
CreateHalftonePalette
CreateCompatibleDC
GetOutlineTextMetricsA
SetWindowOrgEx
GetGlyphOutlineA
SetViewportExtEx
OffsetRgn
RoundRect
SetDIBitsToDevice
PathToRegion
GetNearestColor
GetBitmapBits
CreatePen
CreateSolidBrush
MoveToEx
PolyBezierTo
CreateBrushIndirect
ExtEscape
SetTextColor
CreateBitmap
GetTextFaceW
ModifyWorldTransform
EnumFontFamiliesExA
SetTextCharacterExtra
SetMiterLimit
GetBitmapDimensionEx
CreateRectRgn
GetPixel
GetTextExtentPointA
GetObjectType
GetDCOrgEx
CreateDiscardableBitmap
EnumObjects
CreateMetaFileA
CreateFontIndirectW
SetDIBits
GetBrushOrgEx
ExtTextOutW
GetTextCharacterExtra
GetViewportExtEx
SetBrushOrgEx
GetAspectRatioFilterEx
SelectPalette
GetTextExtentPoint32A
CreateEllipticRgn
GetRegionData
AngleArc
RealizePalette
FillRgn
SetMapMode
GetMiterLimit
CreateRoundRectRgn
EndDoc
GetBkMode
GetPolyFillMode
GetBoundsRect
ExtFloodFill
OffsetWindowOrgEx
Arc
LPtoDP
SetBoundsRect
WidenPath
DPtoLP
Pie
ScaleWindowExtEx
LineTo
GetNearestPaletteIndex
FrameRgn
StretchBlt
SetRectRgn
GetFontData
ExtCreateRegion
DeleteObject
CreateCompatibleBitmap
Escape
GetTextExtentExPointA
SetStretchBltMode
PtInRegion
CopyMetaFileW
PlgBlt
CreateICA
StartDocA
CreateDCW
PlayMetaFile
TextOutW
GetKerningPairsA
AbortPath
Polygon
PolylineTo
CreateDIBSection
GetColorAdjustment
GetCharABCWidthsFloatA
SelectClipPath
advapi32
DeleteService
QueryServiceStatus
SetFileSecurityA
RegOpenKeyExW
GetSecurityDescriptorDacl
RegSetValueExW
DeregisterEventSource
AllocateAndInitializeSid
GetTokenInformation
RegisterServiceCtrlHandlerA
RegCloseKey
CryptHashData
CryptDecrypt
RegEnumKeyExW
CryptCreateHash
RevertToSelf
CryptExportKey
RegEnumValueA
ImpersonateSelf
InitializeAcl
RegOpenKeyExA
ControlService
RegCreateKeyA
AdjustTokenPrivileges
CryptEncrypt
IsValidSecurityDescriptor
RegQueryValueExA
RegEnumKeyA
RegDeleteKeyW
RegDeleteValueA
CryptAcquireContextA
RegEnumKeyExA
CryptDestroyHash
SetSecurityDescriptorDacl
GetFileSecurityA
RegCreateKeyExA
RegDeleteKeyA
CryptReleaseContext
OpenProcessToken
RegQueryInfoKeyA
EqualSid
RegOpenKeyA
RegCreateKeyExW
InitializeSecurityDescriptor
ChangeServiceConfigA
MapGenericMask
CloseServiceHandle
SetServiceStatus
CreateServiceA
DeleteAce
RegDeleteValueW
GetUserNameA
CryptGenKey
OpenSCManagerA
RegSetValueExA
DuplicateToken
RegSetValueA
RegQueryValueExW
OpenThreadToken
OpenServiceA
RegQueryValueA
CryptDeriveKey
kernel32
DeviceIoControl
LockResource
GetVersionExW
SetFilePointer
lstrcatA
FormatMessageA
SetEnvironmentVariableW
GetConsoleMode
SetHandleCount
TerminateProcess
SetFileAttributesA
SetEvent
CreateFileW
GetShortPathNameA
GetCurrentProcessId
DeleteFileA
GetUserDefaultLCID
LocalReAlloc
IsValidLocale
InterlockedDecrement
SetEnvironmentVariableA
GetCurrentProcess
SetLastError
SetThreadPriority
GlobalAlloc
GetLastError
ResetEvent
ResumeThread
InitializeCriticalSectionAndSpinCount
GetEnvironmentStrings
ExitThread
GetProfileStringA
GetVersion
UnlockFile
ExitProcess
GetLogicalDrives
FindFirstFileA
lstrcpynA
SuspendThread
FindResourceA
SystemTimeToFileTime
LoadLibraryA
GetProcessVersion
GlobalGetAtomNameA
RaiseException
CreateMutexA
ReadFile
GlobalLock
GetFullPathNameW
CreateFileA
GetEnvironmentStringsW
lstrcmpiA
GetLocalTime
HeapDestroy
GetFileSize
GetOverlappedResult
GetWindowsDirectoryA
GetCurrentDirectoryA
GetOEMCP
OpenFile
LockFile
SetStdHandle
InterlockedIncrement
ExpandEnvironmentStringsA
GetFileAttributesW
HeapAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetDriveTypeA
GetExitCodeProcess
FreeLibrary
LocalFree
GetFullPathNameA
FindResourceW
GetDateFormatA
CreateSemaphoreA
GetThreadLocale
GetCurrentThreadId
SetEndOfFile
FileTimeToSystemTime
LocalFileTimeToFileTime
GetSystemDefaultLangID
GetCurrentThread
FreeEnvironmentStringsA
RemoveDirectoryA
DeleteCriticalSection
IsBadWritePtr
GetACP
TlsGetValue
FreeResource
WaitForSingleObject
GetVersionExA
GetTimeFormatA
GetModuleFileNameW
LCMapStringW
InitializeCriticalSection
GetStartupInfoA
WriteConsoleW
ReleaseMutex
GetTickCount
MultiByteToWideChar
GlobalHandle
GetStdHandle
CompareStringW
GetVolumeInformationW
MapViewOfFile
SetErrorMode
GetCommandLineA
IsBadCodePtr
GetTempPathA
FlushFileBuffers
GetPrivateProfileStringA
GetModuleHandleW
OpenMutexA
MulDiv
GetPrivateProfileStringW
GlobalFlags
ConvertDefaultLocale
CompareStringA
GlobalFree
GetPrivateProfileIntA
EnumSystemLocalesA
GetLogicalDriveStringsW
LoadLibraryExA
GlobalSize
WritePrivateProfileStringA
InterlockedExchange
HeapSize
HeapReAlloc
ReleaseSemaphore
CancelIo
lstrcmpW
SizeofResource
GetStringTypeA
VirtualQuery
WideCharToMultiByte
RtlUnwind
GetCommandLineW
HeapFree
GetSystemTime
TlsSetValue
GlobalUnlock
GetCPInfo
QueryPerformanceCounter
SetFileTime
GetFileType
GetEnvironmentVariableW
LCMapStringA
GetPrivateProfileSectionNamesA
DuplicateHandle
TlsAlloc
GetFileAttributesExW
GetExitCodeThread
GetStringTypeW
CreateEventA
OutputDebugStringW
GlobalFindAtomW
lstrcmpA
_lclose
GetModuleFileNameA
WriteFile
CreateMutexW
FindClose
CreateDirectoryA
GetProcAddress
SetUnhandledExceptionFilter
Sleep
FindFirstFileW
IsDebuggerPresent
GlobalFindAtomA
MoveFileExA
GetFileAttributesA
CreateProcessA
VirtualAlloc
WinExec
GetEnvironmentVariableA
LeaveCriticalSection
EnterCriticalSection
MoveFileA
VirtualProtect
lstrlenA
TlsFree
GetProcessHeap
lstrcpyA
GetModuleHandleA
IsValidCodePage
FreeEnvironmentStringsW
FatalAppExitA
LocalAlloc
GetSystemDirectoryA
GlobalDeleteAtom
IsBadReadPtr
HeapCreate
FileTimeToLocalFileTime
FindNextFileA
CreateThread
UnhandledExceptionFilter
CopyFileA
GlobalAddAtomA
VirtualFree
GlobalAddAtomW
CloseHandle
LoadResource
comctl32
ImageList_Draw
CreatePropertySheetPageW
ImageList_Merge
ImageList_DragLeave
ImageList_Read
ord17
ImageList_DragEnter
ImageList_Remove
ImageList_DragMove
ImageList_GetDragImage
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_SetDragCursorImage
ImageList_Write
PropertySheetW
ImageList_GetImageCount
ImageList_LoadImageA
CreateStatusWindowW
ImageList_Create
ImageList_GetIconSize
ImageList_DragShowNolock
InitCommonControlsEx
ImageList_SetBkColor
PropertySheetA
CreateToolbarEx
ImageList_DrawEx
ImageList_SetOverlayImage
ImageList_EndDrag
ImageList_Replace
ImageList_AddMasked
ImageList_GetIcon
_TrackMouseEvent
user32
BringWindowToTop
CharToOemA
DefDlgProcA
CreateWindowExA
EnableWindow
GetTopWindow
SetWindowPos
MessageBeep
GetClassInfoA
GetMenuItemInfoA
SetWindowContextHelpId
InvalidateRect
CreatePopupMenu
PostThreadMessageA
IsWindow
GetWindowDC
OpenIcon
EnumChildWindows
LoadMenuA
wvsprintfA
GetWindowLongW
MapWindowPoints
SetParent
DrawIconEx
IsClipboardFormatAvailable
BeginDeferWindowPos
SetWindowsHookExA
DestroyWindow
CreateMenu
GetClassNameW
CallWindowProcA
RegisterClassExA
UpdateWindow
SetDlgItemInt
InflateRect
AllowSetForegroundWindow
OpenClipboard
GetActiveWindow
ClientToScreen
TabbedTextOutA
IsZoomed
GetSubMenu
ReleaseDC
PeekMessageW
LoadCursorW
keybd_event
DefFrameProcA
GetFocus
LoadBitmapA
GetClientRect
FindWindowA
IsRectEmpty
SetScrollInfo
TranslateMDISysAccel
DdeQueryStringA
SetClipboardData
DestroyCursor
InsertMenuA
RegisterClassA
GrayStringA
CharUpperW
RegisterClipboardFormatA
GetSystemMenu
MessageBoxW
GetNextDlgTabItem
LockWindowUpdate
TranslateAcceleratorW
IsDialogMessageA
IsWindowVisible
ExcludeUpdateRgn
MessageBoxA
PostMessageA
DrawTextExA
MapDialogRect
GetMessageA
SendDlgItemMessageW
IsDlgButtonChecked
GetDCEx
EnableScrollBar
WindowFromPoint
PeekMessageA
LoadCursorA
CopyRect
GetWindowThreadProcessId
GetScrollPos
LoadStringA
GetSysColorBrush
DdeConnect
PtInRect
GetDlgCtrlID
GetSystemMetrics
WinHelpA
GetMenuDefaultItem
ValidateRect
PostQuitMessage
GetPropA
DeferWindowPos
DestroyMenu
GetClassNameA
UnpackDDElParam
InvertRect
GetAsyncKeyState
wsprintfW
RedrawWindow
CallNextHookEx
RegisterWindowMessageW
OemToCharA
DrawFrameControl
GetNextDlgGroupItem
MapVirtualKeyExA
FrameRect
OffsetRect
SetCaretPos
GetMenu
GetWindowTextW
InvalidateRgn
GetDlgItem
DefWindowProcA
DrawStateA
CreateIconIndirect
GetWindowTextLengthW
SetActiveWindow
GetCapture
GetMenuItemCount
GetWindowTextLengthA
CreateWindowExW
KillTimer
SendMessageA
CreateDialogIndirectParamA
SendDlgItemMessageA
SetPropA
DeleteMenu
TranslateMessage
GetMenuCheckMarkDimensions
SystemParametersInfoA
RemoveMenu
SetFocus
CharUpperA
SendMessageW
SetForegroundWindow
CheckMenuRadioItem
SetTimer
EndDialog
IsWindowEnabled
TrackPopupMenuEx
GetClassLongA
UnregisterClassW
GetKeyState
GetForegroundWindow
SetWindowTextA
RegisterClassW
GetWindow
CheckDlgButton
EndDeferWindowPos
SystemParametersInfoW
SetDlgItemTextW
IntersectRect
GetWindowLongA
EnableMenuItem
SetWindowLongW
GetKeyboardLayout
DialogBoxParamA
SetWindowLongA
ShowScrollBar
GetClassInfoExA
GetScrollInfo
SetScrollPos
SetCapture
ShowWindow
MsgWaitForMultipleObjects
EmptyClipboard
ScrollWindow
FillRect
SetCursor
EnumWindows
GetUpdateRect
GetSysColor
ShowOwnedPopups
SendMessageTimeoutA
GetParent
AdjustWindowRectEx
DispatchMessageW
EqualRect
DdeNameService
IsChild
SetRect
SetRectEmpty
WinHelpW
GetDesktopWindow
SetWindowRgn
ReleaseCapture
InsertMenuW
GetMessagePos
ShowCaret
GetLastActivePopup
LoadImageW
ScreenToClient
DrawEdge
HiliteMenuItem
CharLowerW
GetClipboardFormatNameA
CreateCaret
wsprintfA
LoadAcceleratorsA
GetDlgItemTextA
DispatchMessageA
CheckMenuItem
MoveWindow
IsIconic
RemovePropA
DrawMenuBar
LoadIconA
LoadImageA
WaitForInputIdle
GetWindowRgn
LoadStringW
GetIconInfo
GetMessageW
AppendMenuW
ModifyMenuA
RegisterWindowMessageA
AppendMenuA
GetWindowPlacement
SetMenuItemBitmaps
CallWindowProcW
GetMenuItemID
FindWindowW
InsertMenuItemA
CreateDialogIndirectParamW
DefWindowProcW
DrawTextA
GetMenuState
GetWindowRect
DestroyIcon
GetCursorPos
GetMenuStringA
DrawFocusRect
ScrollWindowEx
TranslateAcceleratorA
SetMenuDefaultItem
UnhookWindowsHookEx
TrackPopupMenu
GetWindowTextA
SetMenuInfo
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ