Static task
static1
Behavioral task
behavioral1
Sample
be99d1289e43af0dd0ce7b1da2b2c7eeed1233d208ec61f5dd4253fd827169fa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
be99d1289e43af0dd0ce7b1da2b2c7eeed1233d208ec61f5dd4253fd827169fa.exe
Resource
win10v2004-20221111-en
General
-
Target
be99d1289e43af0dd0ce7b1da2b2c7eeed1233d208ec61f5dd4253fd827169fa
-
Size
3.8MB
-
MD5
d8042bfc2f1ab310a79e333f9ef4aa22
-
SHA1
2118494e2f5eedcea93c6c396d31813c35b2bd28
-
SHA256
be99d1289e43af0dd0ce7b1da2b2c7eeed1233d208ec61f5dd4253fd827169fa
-
SHA512
925f80f08e9320316ddacebede265614aa0d59313589f24ef35f1426d531fd5444d555d761e6efbaff302e086532fa975e13114a98281cb8912b9c94618d7c88
-
SSDEEP
49152:7yniKVNCVxurlHEvq7adDmJVGqz3Mf32ZaG1sBXXcLB5x:ulExiHEv8DrwfIZ
Malware Config
Signatures
Files
-
be99d1289e43af0dd0ce7b1da2b2c7eeed1233d208ec61f5dd4253fd827169fa.exe windows x86
6289cde148f45a4482bf0a9d2cfc8b9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalDeleteAtom
GlobalFindAtomA
GlobalHandle
GlobalSize
GetProfileStringA
FreeResource
ExpandEnvironmentStringsA
WriteFile
_lread
CreateFileA
GetVersion
SetErrorMode
CopyFileA
GetDiskFreeSpaceExA
WritePrivateProfileStringA
LocalAlloc
GetTempPathA
CreateDirectoryA
GetSystemDefaultLangID
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
lstrcatA
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
CreateEventA
CreateThread
InterlockedDecrement
SetEvent
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetModuleFileNameA
GetShortPathNameA
lstrlenA
GetPrivateProfileIntA
GetProfileIntA
WriteProfileStringA
GetCurrentThreadId
GetTempFileNameA
CloseHandle
WaitForSingleObject
GetExitCodeProcess
SetThreadLocale
FindNextFileA
CreateProcessA
GlobalReAlloc
MultiByteToWideChar
SizeofResource
GlobalAlloc
MulDiv
lstrcpyA
LocalFree
GlobalLock
GlobalUnlock
Sleep
GetLastError
GetModuleHandleA
OutputDebugStringA
GetTickCount
WideCharToMultiByte
GlobalGetAtomNameA
SetThreadPriority
GetThreadPriority
ResumeThread
SuspendThread
IsBadStringPtrW
IsBadStringPtrA
IsBadWritePtr
IsBadReadPtr
SetLastError
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCurrentThread
lstrcmpA
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
TlsAlloc
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
VirtualProtect
GetCurrentDirectoryA
DuplicateHandle
GetCurrentProcess
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
DeleteFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetFileAttributesA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
GetFileSize
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileAttributesA
lstrlenW
FindResourceA
LoadResource
GlobalFree
FreeLibrary
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
GetPrivateProfileStringA
LockResource
FormatMessageA
HeapValidate
ExitProcess
TerminateProcess
DebugBreak
GetStdHandle
SetEnvironmentVariableA
GetLocaleInfoW
IsBadCodePtr
GetVersionExA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetStringTypeW
GetStringTypeA
CompareStringW
CompareStringA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
GetDriveTypeA
SetConsoleCtrlHandler
VirtualAlloc
VirtualFree
HeapCreate
HeapFree
HeapReAlloc
HeapAlloc
FatalAppExitA
GetACP
ExitThread
RaiseException
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
GetFileType
GlobalAddAtomA
user32
GetParent
GetKeyState
IsWindowEnabled
GetMenuState
GetPropA
SetScrollRange
SetWindowPos
DestroyMenu
TrackPopupMenu
CreatePopupMenu
CallNextHookEx
RemovePropA
UnhookWindowsHookEx
GetDlgCtrlID
SetWindowsHookExA
SetPropA
ReleaseDC
GetDC
EndDialog
SetCursor
LoadCursorA
PtInRect
GetClientRect
SystemParametersInfoA
SetFocus
DestroyWindow
GetDlgItem
ScreenToClient
GetWindowRect
EnableMenuItem
CheckMenuItem
SendMessageA
GetMenu
DrawMenuBar
SetDlgItemTextA
SetWindowTextA
EnableWindow
IsDlgButtonChecked
CheckDlgButton
wsprintfA
MessageBeep
GetFocus
ShowWindow
PostMessageA
BringWindowToTop
GetSysColorBrush
SetClassLongA
DdeNameService
DdeCreateStringHandleA
DdeInitializeA
DdeUninitialize
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
ValidateRect
GetMessageA
EnumChildWindows
GetMenuItemRect
GetDlgItemInt
CheckRadioButton
PeekMessageA
CharUpperA
DdeCreateDataHandle
DdeGetData
DdeQueryStringA
IsWindow
DdeClientTransaction
DdeConnect
DdeDisconnect
UpdateWindow
FrameRect
InflateRect
InvalidateRect
IsDialogMessageA
DialogBoxIndirectParamA
GetSystemMetrics
CreateDialogParamA
CreateDialogIndirectParamA
GetDialogBaseUnits
CreateWindowExA
DefWindowProcA
GetSysColor
IsChild
WindowFromPoint
GetWindowPlacement
IntersectRect
RegisterWindowMessageA
GetMessagePos
GetMessageTime
GetClassNameA
GetWindowTextLengthA
SetWindowPlacement
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
GetScrollRange
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
GetScrollPos
ScrollWindowEx
HiliteMenuItem
IsZoomed
ArrangeIconicWindows
SetWindowRgn
GetWindowRgn
GetWindowDC
GetUpdateRect
GetUpdateRgn
InvalidateRgn
ValidateRgn
ShowOwnedPopups
GetDCEx
LockWindowUpdate
RedrawWindow
EnableScrollBar
DlgDirListA
DlgDirListComboBoxA
DlgDirSelectExA
DlgDirSelectComboBoxExA
GetNextDlgGroupItem
GetNextDlgTabItem
ShowScrollBar
ChildWindowFromPoint
ChildWindowFromPointEx
GetLastActivePopup
SetParent
FlashWindow
ChangeClipboardChain
SetClipboardViewer
GetOpenClipboardWindow
GetClipboardOwner
SetTimer
CreateCaret
GetCaretPos
SetCaretPos
HideCaret
ShowCaret
GetForegroundWindow
SendNotifyMessageA
SetWindowContextHelpId
GetWindowContextHelpId
MapDialogRect
CloseWindow
OpenIcon
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
TabbedTextOutA
OemToCharA
IsRectEmpty
SetRect
SetRectEmpty
UnionRect
SubtractRect
WindowFromDC
ExcludeUpdateRgn
InvertRect
DrawIcon
DrawStateA
DrawEdge
DrawFrameControl
GetTabbedTextExtentA
GrayStringA
IsMenu
DeleteMenu
SetMenuDefaultItem
GetMenuDefaultItem
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetSubMenu
InsertMenuA
RemoveMenu
LoadMenuA
LoadMenuIndirectA
SetMenuContextHelpId
GetMenuContextHelpId
CheckMenuRadioItem
wvsprintfA
GetClipboardFormatNameA
UnpackDDElParam
GetAsyncKeyState
DestroyCursor
ReuseDDElParam
GetCursorPos
SetForegroundWindow
MessageBoxA
CharToOemA
FillRect
SendDlgItemMessageA
LoadBitmapA
DrawFocusRect
SetCursorPos
DialogBoxParamA
GetDesktopWindow
SetWindowLongA
GetWindowLongA
LoadStringA
AppendMenuA
OffsetRect
MoveWindow
ClientToScreen
GetWindow
ReleaseCapture
SetCapture
GetClassLongA
EndPaint
BeginPaint
SetScrollPos
ScrollDC
KillTimer
IsWindowVisible
IsIconic
GetDoubleClickTime
MapWindowPoints
GetClipboardViewer
GetActiveWindow
SetDlgItemInt
PostQuitMessage
CallWindowProcA
CharNextA
DestroyIcon
LoadImageA
DrawTextA
GetMenuStringA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetDlgItemTextA
GetWindowTextA
GetSystemMenu
ChangeMenuA
SetActiveWindow
LoadIconA
RegisterClassA
SetMenu
CreateMenu
ModifyMenuA
FindWindowA
LoadAcceleratorsA
PostThreadMessageA
gdi32
GetObjectType
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreatePenIndirect
SelectClipRgn
Rectangle
GetPixel
PatBlt
CreateBrushIndirect
CreatePalette
StretchBlt
GetBkColor
CreatePolygonRgn
FrameRgn
SetBitmapBits
DPtoLP
CreateBitmap
CreateCompatibleBitmap
GetMapMode
SetMapMode
CreateSolidBrush
ExtCreatePen
CreatePatternBrush
CreateDIBPatternBrushPt
SetRectRgn
GetRegionData
ExtCreateRegion
PathToRegion
CreateRoundRectRgn
CreatePolyPolygonRgn
CreateEllipticRgnIndirect
CreateEllipticRgn
CreateRectRgnIndirect
ResizePalette
GetNearestPaletteIndex
AnimatePalette
SetPaletteEntries
GetPaletteEntries
CreateHalftonePalette
CreateDiscardableBitmap
GetBitmapDimensionEx
SetBitmapDimensionEx
GetBitmapBits
CreateBitmapIndirect
UnrealizeObject
CloseEnhMetaFile
CreateEnhMetaFileA
CloseMetaFile
CreateMetaFileA
GetClipBox
CreateFontA
CopyMetaFileA
StretchDIBits
PlayMetaFile
EnumMetaFile
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetStretchBltMode
SetPolyFillMode
RestoreDC
SaveDC
PlayEnhMetaFile
GdiComment
WidenPath
StrokePath
StrokeAndFillPath
SetMiterLimit
GetPath
GetMiterLimit
FlattenPath
FillPath
EndPath
CloseFigure
BeginPath
AbortPath
GetCharWidthFloatA
GetCharABCWidthsFloatA
ExtEscape
DrawEscape
PolyBezier
GetCurrentObject
GetColorAdjustment
PolyPolyline
GetArcDirection
AngleArc
SetPixelV
PlgBlt
MaskBlt
SetAbortProc
GetGlyphOutlineA
GetKerningPairsA
GetFontData
GetCharABCWidthsA
GetOutlineTextMetricsA
ResetDCA
GetBoundsRect
SetBoundsRect
Escape
GetAspectRatioFilterEx
GetCharWidthA
GetTextCharacterExtra
GetTextFaceA
GetTextAlign
ExtFloodFill
FloodFill
SetPixel
RoundRect
PolyPolygon
Polygon
Pie
Ellipse
Chord
Polyline
Arc
GetCurrentPositionEx
RectVisible
PtVisible
InvertRgn
LPtoDP
GetWindowExtEx
GetWindowOrgEx
GetViewportExtEx
GetViewportOrgEx
GetTextColor
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
UpdateColors
GetNearestColor
EnumObjects
SetBrushOrgEx
GetBrushOrgEx
CreateICA
CreateDCA
GetTextExtentPoint32A
DeleteObject
CreateDIBitmap
RealizePalette
SelectPalette
GetStockObject
SetBkColor
GetObjectA
TextOutA
SelectObject
CreateFontIndirectA
SetTextColor
SetBkMode
PaintRgn
CreateRectRgn
FillRgn
CombineRgn
SetROP2
CreateHatchBrush
ExtTextOutA
GetTextMetricsA
GetDeviceCaps
DeleteDC
EndDoc
AbortDoc
EndPage
LineTo
MoveToEx
StartPage
StartDocA
CreatePen
BitBlt
CreateCompatibleDC
GetDCOrgEx
comdlg32
CommDlgExtendedError
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
GetFileTitleA
advapi32
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
shell32
ShellExecuteA
SHGetSpecialFolderLocation
SHGetMalloc
DragFinish
DragQueryFileA
DragAcceptFiles
SHGetPathFromIDListA
SHGetFileInfoA
ExtractIconA
ole32
CoTaskMemRealloc
CLSIDFromString
OleRun
CoDisconnectObject
OleDuplicateData
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
CLSIDFromProgID
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoUninitialize
CoRegisterMessageFilter
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
oleaut32
SysReAllocStringLen
SysStringLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocString
VariantClear
VariantInit
GetActiveObject
SysFreeString
VariantChangeType
DosDateTimeToVariantTime
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantCopy
SysAllocStringByteLen
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysAllocStringLen
ltdis14n
ord136
ord115
ord107
ord116
ord186
ord204
ord205
ord199
ord185
ord132
ord122
ord127
ltkrn14n
ord213
ord134
ord101
ord311
ord143
ord133
ord151
ord217
ord219
ord115
ord123
ord128
ord129
ord116
ord100
ord221
ord141
ord108
ord112
ord145
ord241
ord125
ord148
ord197
ord196
ord236
ord234
ord232
ord132
ord139
ord110
ord136
ord135
ord137
ltfil14n
ord116
ord133
ord106
ord159
ord104
ord109
ord100
ord105
ord101
ord157
ord103
ltimg14n
ord117
ord101
ord106
ord125
regstr
RegisterDlg4
fmtcp8
Format_FmtmsmCheck
format5
FMT_SetTextOverImageFlag
FMT_SetTextColorFlag
FMT_SetParagColorFlag
FMT_SetFormatOptions
FMT_SetOutputFormat
FMT_SetPdfEmbededFontsFlag
FMT_SetColumnBreakFlag
FMT_SetOutFile
FMT_SetNumberOfFiles
FMT_SetOutputImage_JpegQ
FMT_Set_Callback_ImgTools_InitImageHandle
FMT_Set_Callback_ImgTools_GetWidth
FMT_Set_Callback_ImgTools_GetHeight
FMT_Set_Callback_ImgTools_GetResolution
FMT_Set_Callback_ImgTools_GetBitsPerPixel
FMT_Set_Callback_ImgTools_PutPixelColor
FMT_Set_Callback_ImgTools_CreateBitmap
FMT_Set_Callback_ImgTools_FillBitmap
FMT_Set_Callback_ImgTools_SaveBitmapMemory
FMT_Set_Callback_ImgTools_SaveFile
FMT_SetOutputImage_Resolution
FMT_SetTypeColorText
FMT_Set_Callback_ImgTools_DeleteImageHandle
FMT_Set_Callback_ImgTools_GetPixelColor
FMT_Close
FMT_Write
FMT_Init
FMT_API_SetParamNew
FMT_Callback_MemoryTools_GlobalFree
FMT_Callback_MemoryTools_GlobalUnLock
FMT_Callback_MemoryTools_GlobalLock
FMT_Set_PreferredDocumentSize
FMT_Callback_ImageFileNameW
FMT_Callback_ImageFileName
FMT_Set_Callback_ImgTools_CopyBitmapPolygon
FMT_Set_Callback_BinarizedImageHandle
FMT_Set_Callback_ImageHandle
FMT_SetNextInFile
FMT_Set_Callback_ImgTools_IsGrayScale
FMT_Set_Callback_ImgTools_GrayScaleBitmap
FMT_Set_Callback_ImgTools_SizeBitmap
FMT_Set_Callback_ImgTools_SetResolution
FMT_Set_Callback_ImgTools_CopyBitmap
FMT_Set_Callback_ImgTools_FreeBitmap
FMT_Set_Callback_ImgTools_InvertBitmap
FMT_SetOutputImage_Color
prepro
bi_set_satur
despeckl
skrotimg
skrotdim
sk_color
skrotbmp
skbitmap
bi_upset
bi_gradl_do
bi_set_sigma
bi_set_smooth
bi_set_delta2
bi_set_delta1
bi_set_black2
bi_set_black1
bi_setup
drs832
drs_set_format_color
do_zones_rect
do_zones
drs7_free_coords
drs7_prep_coords
drs6_read_coordinates
drs6_read_one
drs_reset_language
ord2
do_xml_output
do_format
drs_set_image_add_color
drs_set_image_add_grey
drs_new_shapes
drs_rotate_zones
ord14
drs_set_underscore
ord1
ord63
ord4
drs_save_shapes
do_ocr_separ
drs_load_shapes
drs_use_handprint_env
drs_set_gr_filter
set_drs_language
comctl32
ImageList_Merge
ImageList_Read
ImageList_Write
ord14
ImageList_GetImageCount
ImageList_Add
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Draw
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_SetOverlayImage
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_DragEnter
ImageList_DragLeave
ImageList_SetImageCount
ImageList_Copy
PropertySheetA
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord13
ord8
ord17
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_AddMasked
imagehlp
MakeSureDirectoryPathExists
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 840KB - Virtual size: 866KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE