Static task
static1
Behavioral task
behavioral1
Sample
06649d80a9e360f2ff793b17b64d734da5f8d427f0eaf7404bc6161e2de71268.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06649d80a9e360f2ff793b17b64d734da5f8d427f0eaf7404bc6161e2de71268.exe
Resource
win10v2004-20220812-en
General
-
Target
06649d80a9e360f2ff793b17b64d734da5f8d427f0eaf7404bc6161e2de71268
-
Size
352KB
-
MD5
4933fe4874b3fdcf0c12494f600dcfb4
-
SHA1
b6f4b6f2f304fe4a8b744d39a887941a9c37ee08
-
SHA256
06649d80a9e360f2ff793b17b64d734da5f8d427f0eaf7404bc6161e2de71268
-
SHA512
6395fedf12d0058515175ce65a120596d3bc753abde6a5acc74a834dd9bd103edb0df22ba81628765384dbb4de0eff7c4ebe97943f60226358d6acda741240ca
-
SSDEEP
6144:dE+3MA2EyMZfbG+0SUBmXH1zxVb3/lPU9abCV4GRdzYG9Z:dESMjCZfS0XH1zbb35U4eDr7
Malware Config
Signatures
Files
-
06649d80a9e360f2ff793b17b64d734da5f8d427f0eaf7404bc6161e2de71268.exe windows x86
2451d9e07ee08a3e83233a733add3f49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetVersionExA
SetProcessWorkingSetSize
FindNextFileA
UnlockFile
CreateMutexA
GetFileTime
VirtualFree
HeapFree
GetSystemTime
GetConsoleMode
GetStringTypeW
WriteConsoleA
LockResource
FindResourceExA
GetProcAddress
WriteFile
GlobalLock
GetCurrentProcessId
lstrcmpW
FileTimeToSystemTime
VirtualProtect
PurgeComm
FindNextFileW
lstrcatA
GetDriveTypeA
VirtualAlloc
DeleteFileA
InitializeCriticalSection
LoadLibraryW
GetTickCount
GlobalHandle
LoadLibraryA
EnumSystemLocalesA
GetTempFileNameA
GetLocaleInfoA
GetPrivateProfileSectionA
InterlockedExchange
GetStringTypeA
QueryDosDeviceA
GlobalSize
lstrcpynW
FindFirstFileA
GetUserDefaultLangID
FatalAppExitA
lstrcmpiW
CreateThread
SetEndOfFile
GetStartupInfoW
UnhandledExceptionFilter
FormatMessageW
WaitForSingleObject
UnmapViewOfFile
OpenMutexA
MultiByteToWideChar
HeapCreate
DeleteCriticalSection
CreateMutexW
GetModuleFileNameW
LockFile
GetEnvironmentStringsW
RemoveDirectoryA
SetConsoleCtrlHandler
IsBadReadPtr
GetModuleFileNameA
GetVolumeInformationA
CreateEventW
DuplicateHandle
lstrcpynA
GlobalMemoryStatus
GlobalReAlloc
GetShortPathNameW
GetSystemDefaultLangID
CreateProcessW
GetTempPathW
IsBadWritePtr
GetThreadTimes
FormatMessageA
SetStdHandle
SetUnhandledExceptionFilter
TlsSetValue
CreateEventA
GetShortPathNameA
OutputDebugStringA
LocalAlloc
GetACP
GetVolumeInformationW
LoadResource
GetOverlappedResult
GlobalDeleteAtom
IsDBCSLeadByte
GetEnvironmentStrings
GetWindowsDirectoryA
SetThreadPriority
LeaveCriticalSection
TerminateThread
GetTimeFormatA
GetTimeZoneInformation
GetVersion
GetSystemTimeAsFileTime
HeapReAlloc
WideCharToMultiByte
LocalReAlloc
GetProfileStringA
GetSystemDirectoryA
IsProcessorFeaturePresent
GetCurrentProcess
MulDiv
GetLastError
TlsAlloc
SystemTimeToFileTime
GetLocaleInfoW
GlobalAlloc
CreateFileA
FileTimeToLocalFileTime
FindResourceW
SetLastError
SuspendThread
TlsFree
InterlockedIncrement
ExitThread
LoadLibraryExW
VirtualLock
SizeofResource
GetCommandLineW
GetFileAttributesW
GetProcessHeap
GetConsoleCP
SetHandleCount
FreeEnvironmentStringsW
CreateDirectoryA
GetFullPathNameA
RaiseException
RtlUnwind
FindResourceA
GetConsoleOutputCP
ConvertDefaultLocale
HeapAlloc
FindClose
InterlockedDecrement
MoveFileA
lstrcmpiA
QueryPerformanceCounter
CloseHandle
FreeLibrary
GetCurrentThreadId
GlobalFree
GlobalGetAtomNameA
WriteConsoleW
GetCPInfo
SetEvent
GlobalFlags
GetPrivateProfileIntA
SetErrorMode
MapViewOfFile
ExitProcess
TerminateProcess
GetDateFormatA
GetCurrentDirectoryA
GetFileAttributesA
ReadFile
GetFileSize
GetSystemInfo
VirtualQuery
GetLocalTime
SetFilePointer
GetFileType
SetEnvironmentVariableA
Sleep
MoveFileW
ExpandEnvironmentStringsA
lstrlenW
GetModuleHandleA
CopyFileA
CompareStringA
lstrcpyA
GlobalAddAtomW
GetModuleHandleW
GlobalUnlock
LocalFree
LCMapStringA
IsValidCodePage
IsBadCodePtr
IsDebuggerPresent
SetFileAttributesA
LCMapStringW
GetCommandLineA
ReleaseMutex
TlsGetValue
lstrlenA
HeapDestroy
GetStdHandle
EnterCriticalSection
GetStartupInfoA
EnumResourceLanguagesA
CompareStringW
HeapSize
SetCommMask
FreeEnvironmentStringsA
GetUserDefaultLCID
IsValidLocale
GetCurrentThread
FlushFileBuffers
comctl32
ImageList_Read
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Add
ord17
ImageList_SetImageCount
ImageList_LoadImageA
ImageList_GetBkColor
ImageList_AddMasked
ImageList_GetImageInfo
PropertySheetA
ImageList_GetIconSize
ImageList_DragLeave
DestroyPropertySheetPage
ImageList_GetDragImage
ImageList_SetBkColor
ImageList_DragEnter
ImageList_Remove
ImageList_Merge
ImageList_Destroy
ImageList_Write
ImageList_DragShowNolock
ImageList_EndDrag
_TrackMouseEvent
InitCommonControlsEx
ImageList_GetImageCount
ImageList_DragMove
ImageList_Create
ImageList_GetIcon
ImageList_BeginDrag
CreatePropertySheetPageA
ImageList_Draw
ImageList_Duplicate
ImageList_DrawEx
shlwapi
PathAppendA
PathQuoteSpacesA
SHDeleteKeyA
UrlUnescapeA
PathStripToRootA
PathFindFileNameA
PathIsRelativeA
PathIsUNCA
SHDeleteValueA
ole32
OleFlushClipboard
IsAccelerator
GetClassFile
CoUninitialize
CLSIDFromProgID
OleUninitialize
OleRun
CreateItemMoniker
CLSIDFromString
GetRunningObjectTable
OleDestroyMenuDescriptor
OleRegGetMiscStatus
StgIsStorageILockBytes
OleRegEnumVerbs
CreateFileMoniker
StgIsStorageFile
OleSetMenuDescriptor
CoTaskMemAlloc
CoLockObjectExternal
StgCreateDocfile
CoFreeUnusedLibraries
OleIsCurrentClipboard
CoInitialize
StgOpenStorage
CoUnmarshalInterface
OleQueryCreateFromData
DoDragDrop
OleGetClipboard
CoTreatAsClass
WriteClassStm
CreateGenericComposite
CoGetClassObject
OleCreateLinkFromData
RevokeDragDrop
StgCreateDocfileOnILockBytes
OleGetIconOfClass
CreateStreamOnHGlobal
CoDisconnectObject
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleLockRunning
ReadClassStg
StringFromGUID2
CreateBindCtx
RegisterDragDrop
OleCreateMenuDescriptor
OleCreateLinkToFile
OleCreateStaticFromData
OleIsRunning
OleDuplicateData
StgOpenStorageOnILockBytes
WriteClassStg
OleCreate
CoGetMalloc
CoCreateGuid
CoGetInterfaceAndReleaseStream
GetHGlobalFromILockBytes
ProgIDFromCLSID
OleRegGetUserType
OleSetContainedObject
OleLoad
OleCreateFromFile
CoRegisterClassObject
CreateDataAdviseHolder
OleInitialize
OleSave
OleQueryLinkFromData
CoCreateInstance
CreateOleAdviseHolder
ReleaseStgMedium
OleSetClipboard
OleSaveToStream
StringFromCLSID
CoMarshalInterThreadInterfaceInStream
CoRegisterMessageFilter
OleCreateFromData
OleTranslateAccelerator
CoTaskMemFree
gdi32
EnumFontFamiliesExA
ExtTextOutA
SetBkMode
SetWorldTransform
GetStockObject
GetStretchBltMode
GetTextMetricsA
SetTextColor
StrokePath
CloseEnhMetaFile
GetClipBox
SetRectRgn
PolylineTo
PtInRegion
PolyPolyline
CreateRectRgn
GetWindowExtEx
DeleteDC
SetPaletteEntries
GetDCOrgEx
Rectangle
GetObjectType
RoundRect
GetGlyphOutlineW
CreateFontIndirectA
CreatePatternBrush
CreateDCA
SetDIBits
Chord
DeleteObject
MoveToEx
OffsetWindowOrgEx
GetOutlineTextMetricsA
PolyBezier
StartPage
DeleteEnhMetaFile
GetBkMode
PatBlt
SetViewportOrgEx
CreateBitmapIndirect
Escape
GetPixel
SwapBuffers
GetCharABCWidthsFloatW
CreateBitmap
DPtoLP
OffsetViewportOrgEx
CreateEnhMetaFileA
GetNearestColor
GetCharWidthA
PtVisible
SetStretchBltMode
GetBoundsRect
CreateEllipticRgn
SetWindowOrgEx
GetEnhMetaFilePaletteEntries
OffsetRgn
SetArcDirection
GetViewportOrgEx
ChoosePixelFormat
Ellipse
GetRgnBox
EndPage
GetObjectA
GetTextExtentPointA
FillRgn
LPtoDP
FloodFill
GetMapMode
CreateHalftonePalette
SelectPalette
Polygon
CreateFontA
GetCurrentObject
EqualRgn
GetDIBits
CreateDIBitmap
GetWindowOrgEx
GetTextFaceA
Arc
CreatePolygonRgn
SetBrushOrgEx
StartDocW
SetEnhMetaFileBits
RestoreDC
CreatePenIndirect
GetROP2
LineTo
SetViewportExtEx
GetTextColor
SetROP2
RealizePalette
SetPolyFillMode
SelectClipPath
ResizePalette
ExtCreatePen
SetWinMetaFileBits
GetObjectW
EnumFontFamiliesExW
OffsetClipRgn
SetTextAlign
GetGlyphOutlineA
CreateRoundRectRgn
GetFontData
GetEnhMetaFileHeader
BitBlt
GetNearestPaletteIndex
PaintRgn
SetMapMode
InvertRgn
GetBkColor
CreateHatchBrush
CombineRgn
GetRegionData
UnrealizeObject
GetTextExtentPoint32A
CreateDIBSection
ExcludeClipRect
ExtCreateRegion
GetCurrentPositionEx
RectVisible
GetClipRgn
FrameRgn
GetTextFaceW
SelectClipRgn
SetWindowExtEx
StartDocA
Polyline
CreateCompatibleDC
SetAbortProc
MaskBlt
GetViewportExtEx
GetPaletteEntries
CreateBrushIndirect
GetTextCharacterExtra
PlayEnhMetaFile
CreateFontW
CreateEllipticRgnIndirect
StretchBlt
ExtSelectClipRgn
SetBkColor
RectInRegion
GdiFlush
SetDIBitsToDevice
GetDIBColorTable
EnumFontFamiliesA
FlattenPath
GetTextExtentPointW
CreatePen
GetArcDirection
StretchDIBits
ExtEscape
SetGraphicsMode
GetTextExtentPoint32W
CreatePalette
PolyBezierTo
ExtFloodFill
PlayMetaFile
GetPath
CreateCompatibleBitmap
GetSystemPaletteEntries
TextOutA
CreateSolidBrush
CreateMetaFileA
DeleteMetaFile
SelectObject
CreateICA
GetDeviceCaps
SaveDC
CloseMetaFile
ScaleWindowExtEx
SetPixelFormat
EndPath
ResetDCA
ModifyWorldTransform
IntersectClipRect
GetBitmapBits
GetTextAlign
FillPath
SetTextCharacterExtra
GetTextMetricsW
DescribePixelFormat
CopyEnhMetaFileA
SetPixelV
BeginPath
SetPixel
GetPolyFillMode
CreateRectRgnIndirect
GetEnhMetaFileA
PolyPolygon
CopyMetaFileA
Pie
ScaleViewportExtEx
AbortDoc
SetTextJustification
CreateFontIndirectW
EndDoc
user32
GrayStringW
SetParent
SetDlgItemInt
GetDlgItemInt
SetWindowsHookExW
RegisterClassA
IsChild
SetWindowRgn
AppendMenuA
CreateWindowExA
SetWindowPos
GetAsyncKeyState
WindowFromPoint
CreateWindowExW
GetClassNameW
OffsetRect
CharNextA
UnhookWindowsHookEx
RedrawWindow
IsWindowEnabled
EndDeferWindowPos
DispatchMessageA
DispatchMessageW
GetDCEx
InvalidateRgn
LoadImageW
GetSystemMetrics
ExcludeUpdateRgn
CreateDialogIndirectParamW
InsertMenuItemA
SetMenuItemBitmaps
DrawIconEx
GetDesktopWindow
SetWindowsHookExA
SendMessageA
EnableMenuItem
CallNextHookEx
RegisterClassExW
GetClassLongW
GetClassInfoW
MoveWindow
SetCursorPos
RegisterClipboardFormatA
SystemParametersInfoA
CreateDialogIndirectParamA
CallWindowProcA
GetMenuItemCount
DrawTextExA
DeferWindowPos
UpdateWindow
MessageBeep
SetMenuItemInfoW
SetScrollRange
SystemParametersInfoW
AppendMenuW
DefWindowProcW
SetLayeredWindowAttributes
EndDialog
GetWindowTextW
wsprintfW
AdjustWindowRectEx
SetWindowTextW
SetMenuInfo
DeleteMenu
InsertMenuW
LoadBitmapW
GetSystemMenu
CharToOemBuffA
SetMenu
GetFocus
KillTimer
GetWindowTextA
EqualRect
GrayStringA
IsRectEmpty
IsDlgButtonChecked
GetWindowThreadProcessId
LoadStringW
InsertMenuItemW
CopyAcceleratorTableA
TabbedTextOutW
GetClassInfoA
IntersectRect
PostMessageA
MapVirtualKeyA
SetMenuDefaultItem
DestroyMenu
IsWindowUnicode
IsMenu
BringWindowToTop
ValidateRgn
PeekMessageW
IsIconic
GetMessageA
ReuseDDElParam
LockWindowUpdate
SetDoubleClickTime
MapDialogRect
GetMenuState
DrawMenuBar
RegisterWindowMessageA
GetSysColorBrush
EmptyClipboard
GetClassLongA
IsDialogMessageA
GetCursor
GetClientRect
PtInRect
SetDlgItemTextA
DefDlgProcA
BeginDeferWindowPos
GetSubMenu
SetMenuContextHelpId
GetWindowRect
IsWindowVisible
TrackPopupMenu
ShowScrollBar
ShowWindow
SetCapture
GetDC
GetMessageTime
ChildWindowFromPointEx
TranslateMessage
GetUserObjectInformationW
DestroyWindow
CreateIconIndirect
CharLowerW
DrawStateW
ModifyMenuA
RegisterWindowMessageW
CloseClipboard
GetMenu
GetScrollInfo
CreateMenu
GetCursorPos
ReleaseDC
DrawIcon
GetWindowLongW
MessageBoxW
GetMessageW
GetParent
FrameRect
SetScrollPos
DrawFocusRect
OpenClipboard
GetKeyState
GetWindow
RegisterClassExA
ReleaseCapture
PeekMessageA
GetLastActivePopup
SetCursor
GetTabbedTextExtentA
GetActiveWindow
GetMenuStringA
PostMessageW
LoadStringA
GetClassNameA
CheckDlgButton
EndPaint
SendDlgItemMessageA
EnableWindow
wsprintfA
InflateRect
SendMessageW
GetKeyNameTextA
SetRect
RegisterClipboardFormatW
FillRect
WinHelpA
MapWindowPoints
GetWindowRgn
CallWindowProcW
GetClipboardData
LoadCursorW
GetMenuCheckMarkDimensions
GetMenuItemInfoA
SetWindowLongW
RemovePropW
DestroyAcceleratorTable
GetScrollPos
DestroyIcon
MapVirtualKeyW
SetScrollInfo
LoadBitmapA
SetRectEmpty
GetClassInfoExW
TabbedTextOutA
DrawFrameControl
ScreenToClient
ClientToScreen
keybd_event
GetKeyboardLayout
LoadMenuW
FindWindowA
MessageBoxA
AdjustWindowRect
GetNextDlgGroupItem
SetActiveWindow
UnregisterClassA
GetClipboardOwner
GetMenuStringW
ValidateRect
SetForegroundWindow
DrawStateA
RemovePropA
InvalidateRect
IsDialogMessageW
GetPropA
SetClipboardData
LoadIconA
CharNextW
LoadCursorA
DefMDIChildProcA
GetUpdateRect
GetForegroundWindow
GetDlgItem
GetWindowDC
GetWindowPlacement
DialogBoxParamA
SetFocus
UnionRect
GetWindowLongA
SetPropA
CreateCaret
PostQuitMessage
CreatePopupMenu
GetDlgCtrlID
CharUpperA
IsCharAlphaNumericA
LoadImageA
DrawTextA
DestroyCursor
CopyRect
SetTimer
GetSysColor
GetNextDlgTabItem
IsWindow
LoadAcceleratorsA
SetWindowTextA
IsZoomed
BeginPaint
DdeFreeStringHandle
GetMessagePos
shell32
SHGetSpecialFolderLocation
SHGetFolderPathA
SHGetFileInfoA
SHAppBarMessage
DragAcceptFiles
ShellExecuteExA
SHFileOperationA
DragFinish
SHBrowseForFolderW
DragQueryPoint
CommandLineToArgvW
DragQueryFileW
Shell_NotifyIconA
SHGetMalloc
SHGetDesktopFolder
ord155
Shell_NotifyIconW
ShellExecuteA
ShellExecuteW
advapi32
RegCreateKeyExW
RegDeleteKeyA
RegSetValueExW
RegCreateKeyW
LookupPrivilegeValueA
RegCreateKeyExA
RegEnumValueW
OpenSCManagerA
RegOpenCurrentUser
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
InitiateSystemShutdownA
RegCloseKey
CryptAcquireContextA
CloseServiceHandle
DeleteService
RegEnumKeyA
RegQueryInfoKeyW
RegOpenKeyExW
RegConnectRegistryA
OpenThreadToken
RegEnumKeyExA
InitializeSecurityDescriptor
CryptHashData
RegQueryValueW
ControlService
CryptCreateHash
RegDeleteValueA
RegQueryValueA
DuplicateToken
FreeSid
CopySid
RegCreateKeyA
SetFileSecurityA
RegOpenKeyA
SetSecurityDescriptorDacl
CreateServiceA
GetSecurityInfo
ImpersonateSelf
RegQueryValueExW
RegOpenKeyExA
AddAccessAllowedAce
RegEnumValueA
AdjustTokenPrivileges
RegFlushKey
GetFileSecurityA
OpenServiceA
AccessCheck
GetLengthSid
GetSecurityDescriptorDacl
OpenProcessToken
DeleteAce
RegSetValueA
RegDeleteValueW
GetUserNameA
AllocateAndInitializeSid
RegSetValueExA
RegQueryValueExA
GetTokenInformation
RegQueryInfoKeyA
GetAclInformation
LookupPrivilegeValueW
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ