Static task
static1
Behavioral task
behavioral1
Sample
e64e111a77694630d738c629658859eb12356158aee7b3053d0e5b4f18809efb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e64e111a77694630d738c629658859eb12356158aee7b3053d0e5b4f18809efb.exe
Resource
win10v2004-20220812-en
General
-
Target
e64e111a77694630d738c629658859eb12356158aee7b3053d0e5b4f18809efb
-
Size
312KB
-
MD5
ba7003ea715829b7c047626badcdc4c0
-
SHA1
1e94196215266b1eed35cdaf9953518a1c0f3c1b
-
SHA256
e64e111a77694630d738c629658859eb12356158aee7b3053d0e5b4f18809efb
-
SHA512
42c3896ae568dd3251dedfcf0cb30a5f711cf3ef902290128b19fda07625c3ff68a4977957de4a56d1385c56e8944f19d3b838d21448f4ca592c1fa6db489e0f
-
SSDEEP
6144:MWLKOuPukEpbwGcZFgQ7LMY+WBHjdR1bFXAaOO6uKD3HlRMG3:MBHPwpMGcZFgQ/MaZxbJjIXM6
Malware Config
Signatures
Files
-
e64e111a77694630d738c629658859eb12356158aee7b3053d0e5b4f18809efb.exe windows x86
53ad3a7963ab0cbb673989c906631a33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ord155
DragQueryFileW
ShellExecuteExW
SHGetDesktopFolder
SHFileOperationW
SHChangeNotify
ShellExecuteW
SHGetMalloc
Shell_NotifyIconA
DragQueryFileA
Shell_NotifyIconW
SHGetFileInfoA
ShellExecuteA
DragFinish
SHCreateDirectoryExW
SHGetFolderPathW
SHGetPathFromIDListA
SHBrowseForFolderA
ExtractIconExA
comctl32
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetImageInfo
CreateStatusWindowW
ImageList_DragLeave
ImageList_Remove
ImageList_LoadImageA
ImageList_ReplaceIcon
ImageList_SetDragCursorImage
ImageList_Create
ImageList_Draw
ImageList_Destroy
ImageList_BeginDrag
ImageList_DragMove
DestroyPropertySheetPage
_TrackMouseEvent
ImageList_Duplicate
ImageList_GetIconSize
ImageList_Write
ord17
ImageList_SetImageCount
ImageList_Read
ImageList_SetBkColor
ImageList_GetIcon
ImageList_DragShowNolock
InitCommonControlsEx
PropertySheetA
CreatePropertySheetPageA
ImageList_AddMasked
ImageList_Add
ImageList_SetOverlayImage
ImageList_EndDrag
kernel32
LeaveCriticalSection
FatalAppExitA
GetCPInfo
FindNextFileA
LCMapStringW
LockFile
EnterCriticalSection
UnmapViewOfFile
IsBadWritePtr
lstrlenW
FreeLibrary
CompareStringA
FindResourceA
CopyFileA
GlobalLock
TerminateThread
GetLocaleInfoA
GetCurrentThread
GlobalFlags
ResumeThread
CreateDirectoryW
CreateDirectoryA
IsDebuggerPresent
SetLastError
GetComputerNameA
WritePrivateProfileStringA
WriteConsoleA
GetLastError
GetTempPathA
GetProfileStringA
lstrlenA
SetUnhandledExceptionFilter
VirtualQuery
GetPrivateProfileStringA
GlobalAlloc
GetExitCodeThread
CreateMutexA
OutputDebugStringA
SuspendThread
GetConsoleMode
GetCurrentProcess
GetOEMCP
UnlockFile
GetConsoleCP
FileTimeToLocalFileTime
GetDateFormatA
lstrcpynA
LCMapStringA
DeleteFileA
GlobalAddAtomA
ReadFile
GetStringTypeW
GetDiskFreeSpaceA
GetStringTypeA
lstrcmpiW
WideCharToMultiByte
SetEnvironmentVariableA
TlsSetValue
GlobalSize
FileTimeToSystemTime
GlobalFree
GetStartupInfoW
CreatePipe
_lwrite
IsBadReadPtr
lstrcatA
GetModuleHandleA
HeapDestroy
CreateMutexW
GlobalAddAtomW
IsValidLocale
GetModuleFileNameW
RtlUnwind
GetSystemInfo
lstrcpyW
FindClose
GetTimeZoneInformation
HeapReAlloc
HeapSize
GetDriveTypeA
MapViewOfFile
GetProcAddress
ReadProcessMemory
GetModuleHandleW
FindNextChangeNotification
ResetEvent
GetTimeFormatW
TerminateProcess
FreeResource
EnumSystemLocalesA
SleepEx
GetConsoleOutputCP
SystemTimeToFileTime
SetEnvironmentVariableW
ReleaseMutex
InterlockedCompareExchange
HeapCreate
GetLocalTime
CompareFileTime
GetFileInformationByHandle
SetEndOfFile
GetTempFileNameA
GetShortPathNameA
lstrcmpA
QueryPerformanceCounter
GetThreadLocale
LocalReAlloc
CompareStringW
MultiByteToWideChar
GetFileAttributesA
MulDiv
HeapFree
GetEnvironmentStrings
LockResource
FormatMessageA
lstrcmpiA
RaiseException
GetTickCount
Sleep
GetEnvironmentStringsW
LocalFree
GetSystemTimeAsFileTime
VirtualFree
VirtualFreeEx
FlushFileBuffers
FindFirstFileA
GetEnvironmentVariableA
TlsFree
InterlockedIncrement
OpenMutexA
GetFileType
GetStringTypeExW
IsValidCodePage
WriteFile
InterlockedDecrement
FindCloseChangeNotification
InterlockedExchange
lstrcpyA
SetStdHandle
GlobalFindAtomA
FindResourceW
CreateThread
CreateFileMappingW
InterlockedExchangeAdd
DeleteCriticalSection
GlobalReAlloc
CreateEventA
ExitProcess
CopyFileW
SetFilePointer
OpenProcess
IsBadCodePtr
GetLocaleInfoW
UnhandledExceptionFilter
GlobalGetAtomNameA
_lclose
FindNextFileW
GetCurrentDirectoryA
GetCommandLineA
WaitForSingleObject
GetTimeFormatA
LoadLibraryA
TlsAlloc
FreeEnvironmentStringsW
GetVersionExA
GetWindowsDirectoryW
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
GetModuleFileNameA
TlsGetValue
_lopen
GetStdHandle
ExitThread
SetErrorMode
GetFileAttributesW
GetPrivateProfileIntA
GlobalHandle
FreeEnvironmentStringsA
GetUserDefaultLCID
GetFileSize
HeapAlloc
GetFileTime
SetThreadPriority
VirtualProtect
MoveFileA
VirtualAlloc
RemoveDirectoryA
WriteConsoleW
GetStartupInfoA
LoadLibraryW
GetCommandLineW
SetFileTime
GetVersionExW
GetACP
SetHandleCount
CreateFileA
GetCurrentThreadId
CloseHandle
LoadResource
GetVolumeInformationA
GetCurrentProcessId
LocalAlloc
GlobalUnlock
gdi32
FillRgn
ExtFloodFill
GetMapMode
Arc
SetWindowExtEx
CreateFontA
GetObjectType
CloseFigure
AngleArc
GetTextExtentPointA
SetWindowOrgEx
CreateRoundRectRgn
GetStockObject
FrameRgn
EnumFontFamiliesExA
GetObjectW
CreateEnhMetaFileA
GdiComment
SaveDC
GetMiterLimit
SetBitmapDimensionEx
PtInRegion
LPtoDP
SetDIBColorTable
CreatePolygonRgn
GetCurrentPositionEx
SetBoundsRect
GetWindowExtEx
OffsetRgn
GetTextMetricsW
PtVisible
PolylineTo
Polygon
ScaleWindowExtEx
GetTextExtentPoint32W
SetMapMode
EqualRgn
RealizePalette
SetROP2
StartDocA
GetDeviceCaps
GetBitmapDimensionEx
ExtEscape
DeleteObject
GetGlyphOutlineA
GetTextColor
CreateRectRgn
PlayMetaFileRecord
SelectPalette
DrawEscape
ArcTo
RoundRect
CreateDiscardableBitmap
GetNearestColor
GetBoundsRect
Escape
SetRectRgn
OffsetViewportOrgEx
RestoreDC
ExtCreateRegion
CreateSolidBrush
GetCharWidthA
StrokeAndFillPath
GetBitmapBits
GetAspectRatioFilterEx
ScaleViewportExtEx
DeleteDC
InvertRgn
SetGraphicsMode
PatBlt
SetTextAlign
ResizePalette
CreateEllipticRgnIndirect
GetTextCharset
CreateFontW
CreateMetaFileA
CopyMetaFileA
SetPixel
GetTextExtentPoint32A
GetRegionData
CreateFontIndirectA
CreateBrushIndirect
GetBkColor
UnrealizeObject
GetObjectA
MaskBlt
MoveToEx
SetArcDirection
CreateICA
CombineRgn
TextOutA
ExtTextOutA
PlgBlt
RectInRegion
GetPolyFillMode
SetTextCharacterExtra
DeleteEnhMetaFile
SetBitmapBits
GetColorAdjustment
SetBkColor
AbortPath
FloodFill
SetPolyFillMode
OffsetWindowOrgEx
CreatePolyPolygonRgn
SetPaletteEntries
DPtoLP
SetMiterLimit
EnumObjects
ExtTextOutW
SetColorAdjustment
CreateCompatibleBitmap
PolyBezier
EndDoc
GetViewportExtEx
PolyPolygon
GetRgnBox
GetViewportOrgEx
StretchDIBits
LineTo
CreateDIBSection
GetTextMetricsA
CreatePen
SetTextJustification
TextOutW
GetTextAlign
FillPath
CreatePalette
SetPixelV
GetBrushOrgEx
IntersectClipRect
Pie
CreateHalftonePalette
AbortDoc
SetDIBits
SetViewportExtEx
PlayMetaFile
RectVisible
SelectClipRgn
Ellipse
GetClipRgn
GetCharABCWidthsFloatA
CreateCompatibleDC
StartDocW
CreateRectRgnIndirect
SetBrushOrgEx
SelectObject
ExtSelectClipRgn
PaintRgn
GetTextCharacterExtra
SetTextColor
CreateBitmapIndirect
CreatePatternBrush
PolyDraw
CreateDIBPatternBrushPt
GetROP2
GetNearestPaletteIndex
GetDIBits
CreateEllipticRgn
GetSystemPaletteEntries
SetViewportOrgEx
SetStretchBltMode
WidenPath
ExtCreatePen
CloseEnhMetaFile
GetTextFaceW
SetMapperFlags
CreateDCA
PlayEnhMetaFile
GetStretchBltMode
StretchBlt
SetBkMode
CreateHatchBrush
GetClipBox
BitBlt
GetPaletteEntries
GetPixel
GetTextFaceA
CloseMetaFile
GetCharWidthFloatA
GetBkMode
SetWorldTransform
GetWindowOrgEx
SetAbortProc
ResetDCA
GetKerningPairsA
EndPath
BeginPath
Rectangle
GetCurrentObject
CreatePenIndirect
EnumMetaFile
Polyline
Chord
CreateBitmap
ExcludeClipRect
AnimatePalette
user32
MessageBoxW
GetMenuState
ExitWindowsEx
PostThreadMessageW
FindWindowW
OffsetRect
LoadCursorA
GetDCEx
GetLastActivePopup
SetParent
ShowWindow
SetWindowContextHelpId
SetDlgItemInt
CreateWindowExW
CloseClipboard
SetRectEmpty
GetMessageW
DispatchMessageA
GetSystemMetrics
GetDesktopWindow
ReleaseCapture
SendMessageA
EqualRect
RegisterClassA
CallWindowProcA
LoadBitmapW
GetMenuDefaultItem
BeginDeferWindowPos
GetClassNameA
AttachThreadInput
GetWindowTextLengthW
DrawStateW
WindowFromPoint
GetWindowTextLengthA
SetWindowLongA
IsWindowEnabled
LoadStringW
CopyIcon
UpdateWindow
LoadStringA
SetWindowPos
ShowOwnedPopups
GetMessagePos
SetWindowPlacement
RegisterWindowMessageW
CheckRadioButton
CharUpperA
GetMenuStringA
GetWindow
DrawTextW
SetPropA
TranslateMessage
GetWindowLongW
GetWindowPlacement
ModifyMenuW
CharNextW
SetWindowRgn
UnhookWindowsHookEx
SetScrollPos
DestroyWindow
IsIconic
GetUpdateRect
SetWindowsHookExW
TrackPopupMenuEx
ScrollWindow
DeferWindowPos
SetDlgItemTextW
PostQuitMessage
SetCursor
GetClassLongA
IntersectRect
SetCapture
MapDialogRect
AdjustWindowRectEx
SetMenu
IsMenu
CreateDialogIndirectParamW
ShowScrollBar
ScreenToClient
GetClassNameW
LoadIconA
GetDlgItemTextA
SetForegroundWindow
InsertMenuA
BringWindowToTop
ShowCaret
SetScrollInfo
CheckMenuRadioItem
GetTopWindow
DrawIconEx
LoadMenuA
LoadIconW
IsClipboardFormatAvailable
SetMenuItemBitmaps
TabbedTextOutA
CreateWindowExA
ModifyMenuA
SystemParametersInfoW
InvalidateRgn
DestroyIcon
GetKeyState
DrawStateA
MapWindowPoints
IsDialogMessageA
IsWindowUnicode
RegisterWindowMessageA
CreateDialogIndirectParamA
SubtractRect
DefWindowProcA
ReleaseDC
PostMessageW
GrayStringA
SendDlgItemMessageA
UnregisterClassA
ChildWindowFromPoint
IsWindow
GetMessageA
CharNextA
GetOpenClipboardWindow
wsprintfA
DestroyMenu
KillTimer
TranslateMDISysAccel
GrayStringW
GetCursorPos
GetDlgCtrlID
TranslateAcceleratorA
GetUserObjectInformationW
ExcludeUpdateRgn
SetFocus
GetClipboardViewer
IsZoomed
InSendMessage
MessageBoxA
MsgWaitForMultipleObjects
WinHelpA
FrameRect
LoadImageA
TabbedTextOutW
RedrawWindow
SystemParametersInfoA
wsprintfW
GetMenuCheckMarkDimensions
RegisterClipboardFormatW
BeginPaint
GetKeyNameTextW
DrawFocusRect
RemovePropA
GetClassInfoW
GetMenu
GetMenuItemID
SetTimer
IsChild
GetActiveWindow
UnpackDDElParam
RegisterClassExA
AppendMenuA
ValidateRect
CreateAcceleratorTableW
GetWindowTextA
ToAsciiEx
DdePostAdvise
GetFocus
GetKeyboardLayout
IsRectEmpty
FindWindowA
CharUpperW
SendDlgItemMessageW
SetClipboardData
GetDlgItem
DrawTextExW
ClientToScreen
CreateMenu
GetAsyncKeyState
CreatePopupMenu
GetWindowDC
GetScrollRange
CopyRect
SetDlgItemTextA
LoadImageW
EnableMenuItem
DrawEdge
DeleteMenu
MessageBeep
GetClassInfoExA
LoadBitmapA
CheckMenuItem
RegisterClipboardFormatA
GetClassInfoA
SetWindowsHookExA
SetMenuDefaultItem
DrawFrameControl
EnumChildWindows
OpenClipboard
GetMenuItemCount
PtInRect
GetSysColorBrush
GetForegroundWindow
EndPaint
InvalidateRect
GetWindowTextW
MonitorFromPoint
PeekMessageW
DispatchMessageW
ScrollWindowEx
GetParent
GetSubMenu
AppendMenuW
EndDialog
EndDeferWindowPos
GetSystemMenu
DefMDIChildProcA
InflateRect
LockWindowUpdate
SetClipboardViewer
GetWindowThreadProcessId
SetWindowTextA
GetCapture
GetMessageTime
GetScrollPos
DestroyCursor
PostThreadMessageA
TrackPopupMenu
CallNextHookEx
EnumWindows
InvertRect
FillRect
GetClientRect
DrawTextA
GetSysColor
GetWindowRect
PostMessageA
GetDC
GetPropA
CallWindowProcW
GetScrollInfo
SetWindowLongW
PeekMessageA
IsWindowVisible
SetActiveWindow
IsDlgButtonChecked
GetNextDlgGroupItem
GetWindowLongA
GetNextDlgTabItem
advapi32
OpenSCManagerA
QueryServiceConfigW
RegDeleteKeyW
RegCreateKeyExW
InitializeAcl
SetFileSecurityA
RegOpenKeyA
RegQueryValueW
RegEnumKeyA
RegQueryValueA
OpenSCManagerW
RegEnumKeyExW
ReportEventW
IsValidSid
RegSetValueA
RegisterServiceCtrlHandlerA
AdjustTokenPrivileges
RegOpenKeyW
AllocateAndInitializeSid
RegDeleteValueA
StartServiceW
RegCreateKeyExA
GetFileSecurityW
RevertToSelf
InitializeSecurityDescriptor
RegCreateKeyA
RegCreateKeyW
SetSecurityDescriptorDacl
GetUserNameA
LookupPrivilegeValueA
CloseServiceHandle
RegQueryInfoKeyA
QueryServiceStatus
OpenServiceW
RegQueryInfoKeyW
FreeSid
StartServiceA
RegDeleteValueW
EqualSid
RegDeleteKeyA
DeregisterEventSource
GetTokenInformation
RegOpenKeyExW
GetFileSecurityA
RegQueryValueExA
ControlService
QueryServiceConfigA
RegEnumValueA
RegSetValueExW
RegSetValueExA
CreateServiceA
RegOpenKeyExA
LookupPrivilegeValueW
RegEnumKeyExA
OpenProcessToken
OpenThreadToken
ReportEventA
SetServiceStatus
OpenServiceA
CryptAcquireContextA
RegCloseKey
DeleteService
comdlg32
ChooseFontA
CommDlgExtendedError
GetFileTitleA
GetOpenFileNameA
PrintDlgA
PageSetupDlgA
ChooseColorA
ChooseColorW
ChooseFontW
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ