Static task
static1
Behavioral task
behavioral1
Sample
45ee0662ee5cf4782dbdf56e6f45ac10279ca30f19db0f7956e666c3750a8529.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
45ee0662ee5cf4782dbdf56e6f45ac10279ca30f19db0f7956e666c3750a8529.exe
Resource
win10v2004-20221111-en
General
-
Target
45ee0662ee5cf4782dbdf56e6f45ac10279ca30f19db0f7956e666c3750a8529
-
Size
1.2MB
-
MD5
20adbf5b55d66944ef1a00385c54578d
-
SHA1
50e52f093204fcac1ae34488a9441bc6c5f36b43
-
SHA256
45ee0662ee5cf4782dbdf56e6f45ac10279ca30f19db0f7956e666c3750a8529
-
SHA512
4adc679116c1d8acec9f90fc584d38126f71792975bd72aaadeeea788bdb872a6f459c68ef5c92ce7bf8bd1f0ad60766f7739a8af4c71b02d6092de2e2edca88
-
SSDEEP
24576:CdgWv0sYr9/g1tWm5bU4uMUXEXZi0JN3RVj0eAu:7wwh/gvhuxu7ffj0q
Malware Config
Signatures
Files
-
45ee0662ee5cf4782dbdf56e6f45ac10279ca30f19db0f7956e666c3750a8529.exe windows x86
7a640cd4a3d9780a03364749a31d4bcf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetFileAttributesA
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetACP
GetExitCodeProcess
CreateProcessA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
CreateFileA
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetFileType
SetStdHandle
HeapSize
ExitProcess
RtlUnwind
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetStartupInfoW
GetCurrentDirectoryW
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
GetFileTime
GetPrivateProfileIntW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
lstrcmpA
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
SuspendThread
GetVersion
GetCurrentProcessId
GlobalGetAtomNameW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetProfileIntW
GetModuleHandleA
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
GetVersionExA
GlobalSize
FormatMessageW
LocalFree
ResumeThread
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
RaiseException
SetUnhandledExceptionFilter
CreateEventW
ReadFile
WaitForSingleObject
CreateProcessW
GetStdHandle
CreatePipe
OpenThread
lstrcpyW
LoadLibraryA
VirtualProtect
GetExitCodeThread
TerminateThread
SetEvent
GetTickCount
GetPrivateProfileSectionW
WritePrivateProfileSectionW
GetModuleFileNameW
FileTimeToDosDateTime
MoveFileW
CopyFileW
OpenFile
InterlockedIncrement
MulDiv
FreeResource
lstrlenW
Sleep
FreeLibrary
lstrcmpW
WideCharToMultiByte
ExpandEnvironmentStringsW
CreateThread
GetCurrentThreadId
InterlockedDecrement
lstrlenA
MultiByteToWideChar
CloseHandle
WriteFile
SetFilePointer
GetFileSize
CreateFileW
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentProcess
GetVersionExW
FindClose
FindNextFileW
DeleteFileW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
FindFirstFileW
GetProcAddress
GetModuleHandleW
LoadLibraryW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetLastError
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
WritePrivateProfileStringW
GetPrivateProfileStringW
user32
WinHelpW
IsChild
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetRectEmpty
GetMenuState
GetMenuStringW
RedrawWindow
IsRectEmpty
EndDeferWindowPos
BeginDeferWindowPos
GetSysColorBrush
GetSysColor
SetRect
IsMenu
FillRect
MessageBoxW
EnumWindows
FindWindowW
GetWindowTextW
ShowWindow
GetLastActivePopup
GetCapture
SetClassLongW
GetClassLongW
GetClassInfoW
SetMenu
LockWindowUpdate
ReleaseCapture
WindowFromPoint
UnionRect
SetCapture
GetDesktopWindow
ClientToScreen
GetSubMenu
LoadIconW
SystemParametersInfoW
ModifyMenuW
DeleteMenu
MoveWindow
SendDlgItemMessageA
GetMenuItemCount
PostThreadMessageW
UnhookWindowsHookEx
ActivateKeyboardLayout
SetTimer
IsIconic
SetWindowRgn
IsZoomed
SetWindowsHookExW
InvalidateRect
UpdateWindow
ScreenToClient
GetAsyncKeyState
GetCursorPos
GetKeyState
CallNextHookEx
GetKeyboardLayout
EnumChildWindows
FindWindowExW
KillTimer
IsDialogMessageW
SetWindowTextW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
UnregisterClassA
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
GetActiveWindow
SetWindowLongW
GetWindowLongW
SetWindowPos
InsertMenuW
IsClipboardFormatAvailable
LoadBitmapW
OffsetRect
InvalidateRgn
GetWindowRect
SetCursor
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ReleaseDC
GetWindowDC
SetForegroundWindow
GetSystemMetrics
CopyRect
LoadCursorW
EnableWindow
SendMessageW
AppendMenuW
CreatePopupMenu
PtInRect
PostMessageW
GetForegroundWindow
GetFocus
GetParent
GetWindow
InflateRect
GetDC
GetClientRect
IsWindowEnabled
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
BeginPaint
EndPaint
GetMenuItemInfoW
DestroyMenu
CheckMenuItem
IsWindowVisible
IsWindow
LoadImageW
SendDlgItemMessageW
RegisterWindowMessageW
GetMenuItemID
GetDCEx
GetMessageW
CharUpperW
DefFrameProcW
DrawMenuBar
BringWindowToTop
TranslateMDISysAccel
TranslateAcceleratorW
InsertMenuItemW
LoadAcceleratorsW
GetWindowThreadProcessId
LoadMenuW
ReuseDDElParam
UnpackDDElParam
ValidateRect
EnableMenuItem
TranslateMessage
CharNextW
DrawIcon
CopyAcceleratorTableW
GetSystemMenu
SetParent
PostQuitMessage
RegisterClipboardFormatW
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
UnregisterClassW
GetNextDlgGroupItem
MessageBeep
gdi32
GetCharWidthW
StretchDIBits
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetROP2
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
CopyMetaFileW
ExtSelectClipRgn
CreateBitmap
CreatePen
GetBkColor
Rectangle
UnrealizeObject
SetRectRgn
GetMapMode
DPtoLP
LPtoDP
Ellipse
GetRgnBox
SetStretchBltMode
GetTextColor
ExtTextOutW
CreateFontIndirectW
EnumFontFamiliesW
SetDIBColorTable
GetDIBColorTable
CreateDIBSection
CreateEllipticRgn
RealizePalette
SelectPalette
GetStockObject
StretchBlt
DeleteDC
GetDeviceCaps
TextOutW
SelectObject
PatBlt
CreatePolygonRgn
CreatePatternBrush
GetDIBits
CombineRgn
CreateRectRgnIndirect
CreateRectRgn
GetTextExtentPoint32W
CreateCompatibleBitmap
CreateDCW
GetObjectW
BitBlt
CreateCompatibleDC
CreateSolidBrush
CreateFontW
ScaleWindowExtEx
GetTextMetricsW
DeleteObject
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegQueryInfoKeyW
GetTokenInformation
RegQueryValueW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegCreateKeyW
RegSetValueW
RegQueryValueExW
RegOpenKeyW
GetUserNameW
RegEnumKeyW
OpenProcessToken
RegSetKeySecurity
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAce
InitializeAcl
AllocateAndInitializeSid
RegCloseKey
RegGetKeySecurity
RegOpenKeyExW
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
CopySid
GetLengthSid
shell32
SHAppBarMessage
DragQueryFileW
SHGetDesktopFolder
Shell_NotifyIconW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteW
SHGetSpecialFolderPathW
DragFinish
comctl32
ImageList_AddMasked
InitCommonControlsEx
shlwapi
UrlUnescapeW
PathIsUNCW
PathStripToRootW
PathRemoveExtensionW
PathFindExtensionW
PathFileExistsW
SHDeleteKeyW
PathFindFileNameW
oledlg
OleUIBusyW
ole32
OleIsCurrentClipboard
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
CoFreeAllLibraries
CoUninitialize
CreateStreamOnHGlobal
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoTaskMemAlloc
CoRegisterClassObject
ReleaseStgMedium
OleDuplicateData
OleGetClipboard
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromString
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard
CoDisconnectObject
oleaut32
LoadTypeLi
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
VariantChangeType
SysAllocStringLen
SysAllocString
SysStringLen
SysAllocStringByteLen
SysFreeString
VariantClear
VariantInit
gdiplus
GdipFree
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageEncoders
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageI
GdipDeleteGraphics
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
ws2_32
WSAStartup
send
recv
WSAAsyncSelect
WSACleanup
setsockopt
connect
htons
inet_addr
WSASocketW
closesocket
wininet
InternetOpenUrlW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
FindFirstUrlCacheEntryW
HttpQueryInfoW
InternetQueryDataAvailable
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetCrackUrlW
FindCloseUrlCache
DeleteUrlCacheEntryW
FindNextUrlCacheEntryW
Sections
.text Size: 796KB - Virtual size: 795KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 192KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE