Static task
static1
Behavioral task
behavioral1
Sample
a0d570199b585b66471dfb8246907d4619e04fc2afda5ddb4fbef74656c24bd1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a0d570199b585b66471dfb8246907d4619e04fc2afda5ddb4fbef74656c24bd1.exe
Resource
win10v2004-20221111-en
General
-
Target
a0d570199b585b66471dfb8246907d4619e04fc2afda5ddb4fbef74656c24bd1
-
Size
520KB
-
MD5
16d764525ddab915169c33ec2dc1eb7c
-
SHA1
d60aeb4234a7a4f253628d048afc320e2724b8cf
-
SHA256
a0d570199b585b66471dfb8246907d4619e04fc2afda5ddb4fbef74656c24bd1
-
SHA512
636ab33d2b94f57726788d4cb002bc38ba31e51ab3a99ec51fbf0551601d8a85c1db346d1a854441d768a67ac73e93f2dc25da05eb3a4c6805011e8201b7a282
-
SSDEEP
6144:CSWwiIU12y6PNfAczTAYnnDuVN6TgBtkV3FlfXeGaptUoW8rpDXtZptkBmiwb7oa:8hL6JAcww6M+tOVlEeoW8rRX7pWBmFX
Malware Config
Signatures
Files
-
a0d570199b585b66471dfb8246907d4619e04fc2afda5ddb4fbef74656c24bd1.exe windows x86
d5c3cfb383a459c0f03892d50742887f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
SetUnhandledExceptionFilter
GetModuleHandleW
IsValidCodePage
WriteConsoleA
GlobalAddAtomA
GlobalReAlloc
CreateToolhelp32Snapshot
lstrcmpA
CompareStringA
WideCharToMultiByte
HeapReAlloc
FatalAppExitA
EnumResourceLanguagesW
FindNextFileA
GetModuleHandleA
lstrcpyW
lstrcmpiW
GlobalSize
LCMapStringA
GetFileAttributesA
GlobalHandle
GetComputerNameA
GlobalAlloc
SetStdHandle
LoadLibraryExA
WriteConsoleW
DeleteFileA
HeapSize
GlobalDeleteAtom
OutputDebugStringW
LocalFree
GetCurrentDirectoryA
GetProcessHeap
CreateSemaphoreW
GetFileSize
GetCurrentProcess
SetHandleCount
GetVersionExA
LoadLibraryW
TlsSetValue
CreateThread
FindClose
SetFilePointer
FindNextFileW
InterlockedCompareExchange
lstrcmpW
LoadLibraryA
GlobalGetAtomNameA
FormatMessageW
GetModuleFileNameW
LeaveCriticalSection
GetSystemInfo
CreateFileA
Sleep
IsDBCSLeadByte
Process32First
lstrlenA
WritePrivateProfileStringA
SetLastError
QueryPerformanceFrequency
GetTickCount
GlobalLock
GetTempPathA
CreateEventA
CreateDirectoryA
FileTimeToSystemTime
VirtualAlloc
FreeEnvironmentStringsA
FreeResource
MoveFileW
OpenMutexA
CloseHandle
WinExec
lstrcmpiA
IsBadReadPtr
SetConsoleCtrlHandler
GetStartupInfoW
FindFirstFileA
GetStringTypeW
GetConsoleMode
FlushFileBuffers
CreatePipe
GetCommandLineA
CreateFileW
lstrcatA
SetEvent
SuspendThread
GetCPInfo
FreeEnvironmentStringsW
GetCurrentThread
GetFullPathNameA
GetShortPathNameA
IsBadWritePtr
HeapAlloc
FindResourceExA
GetACP
RtlUnwind
SetFileAttributesA
LocalAlloc
CreateMutexA
InitializeCriticalSectionAndSpinCount
ResetEvent
GetStartupInfoA
TlsFree
HeapFree
FindResourceA
FormatMessageA
OpenThread
GetLocaleInfoA
GetLocaleInfoW
GetExitCodeProcess
DuplicateHandle
ExitThread
ExitProcess
EnumResourceLanguagesA
GetPrivateProfileSectionA
GetWindowsDirectoryA
RaiseException
GetOEMCP
VirtualProtect
QueryPerformanceCounter
IsValidLocale
DeviceIoControl
GetConsoleCP
GetFileTime
SizeofResource
GetDiskFreeSpaceA
LCMapStringW
SetEndOfFile
TerminateThread
InterlockedExchangeAdd
GlobalFree
TerminateProcess
GetThreadLocale
GetSystemDirectoryA
GlobalFindAtomA
InterlockedExchange
CompareStringW
HeapDestroy
GetFileType
GetCurrentProcessId
GlobalUnlock
GetProfileStringA
lstrcpynA
WriteProfileStringW
GetLocalTime
LocalReAlloc
GetVolumeInformationA
GetTimeZoneInformation
CopyFileW
GetTimeFormatA
WaitForSingleObject
GetCommandLineW
MultiByteToWideChar
SetEnvironmentVariableA
lstrcpyA
GetEnvironmentStringsW
SetErrorMode
EnterCriticalSection
TlsAlloc
GetProcAddress
SetFileTime
lstrlenW
InterlockedIncrement
LocalFileTimeToFileTime
GetCurrentThreadId
WriteFile
TlsGetValue
GetSystemTimeAsFileTime
GetLongPathNameW
GetFullPathNameW
InterlockedDecrement
ConvertDefaultLocale
IsBadCodePtr
VirtualQuery
GetVolumeInformationW
GetStdHandle
EnumSystemLocalesA
GetEnvironmentStrings
FileTimeToLocalFileTime
IsDebuggerPresent
ReadFile
GetVersion
GetVersionExW
LockResource
GetFileAttributesW
GetDateFormatA
GetModuleFileNameA
GetSystemTime
GlobalFlags
VirtualFree
LoadResource
InitializeCriticalSection
FreeLibrary
UnhandledExceptionFilter
GetConsoleOutputCP
CopyFileA
DeleteCriticalSection
GetLastError
GetStringTypeA
HeapCreate
SetThreadPriority
ole32
CreateOleAdviseHolder
OleCreate
OleInitialize
OleSetContainedObject
CLSIDFromString
CoDisconnectObject
CoInitializeSecurity
IsAccelerator
CoGetInterfaceAndReleaseStream
OleGetClipboard
OleSave
CoGetClassObject
CoSuspendClassObjects
CoLockObjectExternal
CoResumeClassObjects
CoCreateGuid
CoFreeUnusedLibraries
CoUnmarshalInterface
DoDragDrop
StringFromCLSID
OleDuplicateData
WriteFmtUserTypeStg
OleIsRunning
CoUninitialize
ReadFmtUserTypeStg
SetConvertStg
OleSaveToStream
CoInitialize
GetHGlobalFromILockBytes
CoInitializeEx
OleLockRunning
WriteClassStg
CreateILockBytesOnHGlobal
CoTaskMemRealloc
GetRunningObjectTable
OleLoadFromStream
CoTaskMemFree
ReadClassStg
WriteClassStm
OleSetMenuDescriptor
CreateItemMoniker
OleFlushClipboard
OleIsCurrentClipboard
ReleaseStgMedium
CreateFileMoniker
CoTreatAsClass
CoGetMalloc
OleCreateLinkToFile
RevokeDragDrop
StgIsStorageFile
CreateBindCtx
CreateStreamOnHGlobal
CoTaskMemAlloc
CreateGenericComposite
OleTranslateAccelerator
OleGetIconOfClass
RegisterDragDrop
OleRun
CLSIDFromProgID
OleLoad
OleDestroyMenuDescriptor
CoCreateInstance
OleUninitialize
OleCreateStaticFromData
StringFromGUID2
OleCreateMenuDescriptor
OleSetClipboard
OleCreateFromFile
OleCreateLinkFromData
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoRegisterClassObject
shlwapi
PathRemoveExtensionA
PathIsRootA
PathIsRelativeA
PathStripToRootA
PathCanonicalizeA
PathRemoveBackslashA
PathIsUNCServerA
PathMakePrettyA
PathRemoveArgsA
PathIsUNCServerShareA
PathSkipRootA
PathAddBackslashA
PathFindFileNameA
PathRelativePathToA
PathGetDriveNumberA
PathBuildRootA
SHDeleteKeyA
PathRemoveFileSpecA
PathParseIconLocationA
PathFindExtensionA
shell32
SHGetSpecialFolderLocation
ExtractIconExA
FindExecutableA
SHGetSpecialFolderPathA
SHGetPathFromIDListW
ord155
ShellExecuteExA
SHGetFolderPathA
SHChangeNotify
SHGetMalloc
Shell_NotifyIconA
SHGetDesktopFolder
DragQueryFileA
SHGetFolderPathW
SHFileOperationA
Shell_NotifyIconW
ExtractIconExW
ShellExecuteA
DragFinish
oleaut32
LoadTypeLi
user32
CharUpperA
UpdateWindow
GetDlgCtrlID
GetWindowContextHelpId
GetKeyState
InflateRect
PostMessageA
TrackPopupMenu
EnableWindow
SetClipboardData
GetUpdateRect
ShowScrollBar
IsWindowUnicode
IsDialogMessageW
PeekMessageW
GetWindowDC
GetParent
GetWindowRect
GetAsyncKeyState
ChangeClipboardChain
UnhookWindowsHookEx
GetSubMenu
MoveWindow
SetMenuItemBitmaps
PeekMessageA
EqualRect
GetMenuContextHelpId
GetDlgItemTextW
GetWindowThreadProcessId
LoadCursorA
ToAsciiEx
SystemParametersInfoA
RegisterClassW
RegisterWindowMessageW
RemovePropA
GetForegroundWindow
KillTimer
CreateIconFromResourceEx
GetWindowRgn
DestroyCursor
CharNextA
ArrangeIconicWindows
InvalidateRect
AppendMenuW
SetCapture
ClientToScreen
LockWindowUpdate
EndDialog
SetMenuDefaultItem
DestroyWindow
SetCursor
CreateWindowExA
DrawTextExW
SetFocus
CallWindowProcA
SendMessageA
DestroyIcon
RegisterWindowMessageA
CloseClipboard
SetWindowsHookExA
CreateDialogIndirectParamA
GetDlgItem
SendInput
GetMenuItemCount
DrawFocusRect
GetMenuItemInfoW
IsDialogMessageA
LoadMenuW
ClipCursor
TranslateAcceleratorA
CheckMenuItem
EnableScrollBar
DlgDirListA
DialogBoxParamA
DrawStateA
GetWindowInfo
GetPropW
ScreenToClient
DdeConnect
RegisterClassExA
IsCharLowerA
GetDesktopWindow
GetMessageA
MessageBoxA
FindWindowA
GetMenuStringW
TranslateMessage
SetWindowContextHelpId
SetWindowPlacement
GetClipboardData
IsWindow
CopyAcceleratorTableW
WindowFromDC
FillRect
SetPropW
GetWindow
CheckRadioButton
GetClientRect
SubtractRect
IsIconic
DefMDIChildProcW
ToAscii
GetMenuState
SetWindowTextW
HideCaret
SetRectEmpty
FrameRect
EnumWindows
SendMessageW
LoadStringA
DeferWindowPos
RedrawWindow
SetCursorPos
PostThreadMessageW
LoadCursorW
DlgDirListComboBoxA
ScrollWindow
GetClassInfoA
SetPropA
LoadIconA
SetActiveWindow
SetWindowPos
DestroyAcceleratorTable
UnregisterHotKey
WindowFromPoint
RegisterClipboardFormatW
MapVirtualKeyA
GetMenu
ValidateRect
MsgWaitForMultipleObjects
ShowCaret
MessageBoxW
LoadIconW
LoadMenuIndirectA
SetWindowRgn
ReleaseCapture
GetSystemMetrics
MapDialogRect
CopyRect
IsWindowVisible
GetFocus
GetMenuCheckMarkDimensions
DrawMenuBar
OffsetRect
CheckDlgButton
SetScrollInfo
GetMessagePos
CopyIcon
GetIconInfo
GrayStringA
SendDlgItemMessageW
GetWindowTextLengthA
IsRectEmpty
EnableMenuItem
CopyAcceleratorTableA
SetScrollPos
CreatePopupMenu
HiliteMenuItem
GetDC
LoadMenuA
GetScrollPos
GetMessageW
SetParent
EmptyClipboard
GetKeyboardState
ShowWindow
LoadBitmapA
ShowOwnedPopups
DlgDirSelectExA
WinHelpW
GetClassNameA
GetScrollRange
UnpackDDElParam
GetSysColorBrush
ModifyMenuA
SetRect
GetMessageTime
PtInRect
GetMenuItemID
GetCursorPos
InSendMessage
BringWindowToTop
DispatchMessageA
CreateDialogParamA
GetScrollInfo
SetMenu
GetCapture
TranslateMDISysAccel
CreateDialogIndirectParamW
DrawTextA
GetWindowTextA
FindWindowW
DefDlgProcA
AdjustWindowRectEx
DeleteMenu
InsertMenuA
GetKeyNameTextA
DrawEdge
GetDlgItemInt
SetTimer
GetDCEx
DefWindowProcA
GetLastActivePopup
DestroyMenu
DrawFrameControl
GetClassNameW
GetWindowTextW
PostQuitMessage
SetDlgItemTextW
GetActiveWindow
DrawIconEx
GetNextDlgTabItem
ModifyMenuW
wsprintfA
GetSysColor
IsWindowEnabled
IsZoomed
GetWindowTextLengthW
GetSystemMenu
CallNextHookEx
WinHelpA
LoadImageA
MessageBeep
ReleaseDC
GetWindowPlacement
GetWindowLongW
SendDlgItemMessageA
OpenClipboard
SetWindowTextA
AppendMenuA
RegisterClipboardFormatA
GetWindowLongA
InsertMenuItemA
IntersectRect
SetWindowLongW
MapWindowPoints
SetWindowLongA
RegisterClassA
UnregisterClassA
InsertMenuW
PostThreadMessageA
SetForegroundWindow
DlgDirSelectComboBoxExA
GetPropA
winspool.drv
FindFirstPrinterChangeNotification
GetPrinterW
SetJobW
FindNextPrinterChangeNotification
FreePrinterNotifyInfo
SetPrinterDataW
GetJobW
EnumPrintersW
DocumentPropertiesW
OpenPrinterW
ord204
ClosePrinter
SetPrinterW
DeviceCapabilitiesW
EnumPortsW
comctl32
ImageList_Draw
ImageList_DragShowNolock
ImageList_Read
ImageList_GetImageCount
ImageList_Write
ImageList_Destroy
ImageList_SetDragCursorImage
ImageList_Replace
CreateToolbarEx
DestroyPropertySheetPage
ImageList_AddMasked
ImageList_DragMove
ImageList_GetImageInfo
ImageList_LoadImageA
_TrackMouseEvent
CreatePropertySheetPageW
ImageList_DragLeave
ImageList_Remove
ImageList_BeginDrag
ImageList_GetIconSize
ImageList_GetIcon
ImageList_Create
ord17
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_SetBkColor
CreateStatusWindowW
ImageList_GetBkColor
ImageList_DragEnter
ImageList_Add
PropertySheetW
ImageList_ReplaceIcon
ImageList_EndDrag
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 272KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ