Static task
static1
Behavioral task
behavioral1
Sample
18267614b8469241e5720dedcedef4b2451cb7ce589b66c22dd167f2c58b1c99.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
18267614b8469241e5720dedcedef4b2451cb7ce589b66c22dd167f2c58b1c99.exe
Resource
win10v2004-20220812-en
General
-
Target
18267614b8469241e5720dedcedef4b2451cb7ce589b66c22dd167f2c58b1c99
-
Size
769KB
-
MD5
4776e97668de77cf6ff18a28b0892bf0
-
SHA1
2fe79678f4270b3779b2b79efea53ec4d4631b73
-
SHA256
18267614b8469241e5720dedcedef4b2451cb7ce589b66c22dd167f2c58b1c99
-
SHA512
4982384ba4f67ef5eea22de8941e9815f3ed888c4e18f29cc47aedeb6430781b711370acaf2d41b2979cb8d833746b33cae66252e791a9c69691a5ebef9453f7
-
SSDEEP
12288:xTeg8q8px9iD9hCC5bc3lMnInzyaMJ3ap2LfZJaKr6ebQRS:wg8q8bAZhHdc3lOaMRaOfZJDGqQR
Malware Config
Signatures
Files
-
18267614b8469241e5720dedcedef4b2451cb7ce589b66c22dd167f2c58b1c99.exe windows x86
f456b6fb3695298f91bdfcfedff9c4fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
FloodFill
ScaleViewportExtEx
StrokePath
DPtoLP
FillRgn
EndPage
CopyMetaFileW
GetFontData
PolyPolygon
GetPolyFillMode
CreateICA
StretchDIBits
GetStretchBltMode
CopyMetaFileA
PlayMetaFile
CreateBitmapIndirect
FillPath
CreateFontA
ExtCreatePen
PolyPolyline
GetEnhMetaFileA
SetPixel
GetTextExtentPointA
GetCurrentPositionEx
Polygon
SetAbortProc
InvertRgn
CreatePen
TextOutA
SetPixelV
SetTextJustification
LineTo
GetViewportExtEx
OffsetViewportOrgEx
CreateFontIndirectW
CreateBitmap
PtVisible
CreateRectRgn
EnumMetaFile
SetPaletteEntries
ExtSelectClipRgn
PolyBezierTo
Rectangle
TextOutW
RoundRect
CreateCompatibleBitmap
StartDocA
SetWindowOrgEx
SelectPalette
DeleteDC
GetCharWidth32A
GetBkMode
SetArcDirection
FlattenPath
PaintRgn
EqualRgn
GetDeviceCaps
GetClipBox
CreatePatternBrush
Escape
GetObjectType
OffsetWindowOrgEx
CreateDCA
Pie
CreatePolygonRgn
ExtFloodFill
SetTextAlign
SetROP2
CreateDIBPatternBrushPt
RectVisible
SetBoundsRect
EnumFontFamiliesExW
CombineRgn
CreateEllipticRgn
SetTextColor
GetStockObject
GetViewportOrgEx
ExtTextOutA
GetTextMetricsA
AbortDoc
ExtTextOutW
Arc
SetPolyFillMode
GdiFlush
ExtCreateRegion
LPtoDP
CreateFontIndirectA
SelectClipPath
CreateHalftonePalette
DeleteObject
GetTextColor
SetViewportOrgEx
MoveToEx
CreatePenIndirect
IntersectClipRect
GetOutlineTextMetricsA
GetCharABCWidthsW
ScaleWindowExtEx
GetPath
CreateRectRgnIndirect
CreateEllipticRgnIndirect
CreateDIBSection
DeleteEnhMetaFile
GetWindowExtEx
CreateHatchBrush
GetObjectW
ExcludeClipRect
GetTextAlign
CreateRoundRectRgn
GetPixel
GetTextCharacterExtra
SelectObject
SetWindowExtEx
OffsetClipRgn
CreateEnhMetaFileA
CloseMetaFile
SetMapMode
OffsetRgn
StrokeAndFillPath
GetTextFaceA
GetDCOrgEx
GetNearestPaletteIndex
GetRgnBox
SelectClipRgn
FrameRgn
StretchBlt
CloseFigure
GetBitmapBits
GetTextCharsetInfo
SetTextCharacterExtra
RestoreDC
ArcTo
PolylineTo
GetGlyphOutlineA
SetBkColor
Ellipse
CloseEnhMetaFile
GetObjectA
SetViewportExtEx
CreatePalette
CreateCompatibleDC
CreateBrushIndirect
CreatePolyPolygonRgn
CreateDCW
MaskBlt
SetRectRgn
GetMapMode
SetColorAdjustment
RealizePalette
PathToRegion
GetPaletteEntries
GetNearestColor
SaveDC
GetRegionData
GetWindowOrgEx
EndDoc
RectInRegion
GetClipRgn
CreateMetaFileA
GetBkColor
SetBrushOrgEx
SetStretchBltMode
PtInRegion
GetTextExtentPoint32A
CreateSolidBrush
SetDIBitsToDevice
PolyBezier
GetArcDirection
GetCharWidth32W
GetROP2
EnumFontFamiliesExA
Polyline
GetDIBits
SetDIBits
CreateFontW
PlayMetaFileRecord
ResizePalette
CreateDIBitmap
GetBoundsRect
GetTextExtentExPointA
GetTextExtentPointW
PatBlt
PolyDraw
Chord
StartPage
GetCharABCWidthsA
GetCurrentObject
ResetDCA
GetCharWidthA
ExtEscape
UnrealizeObject
BitBlt
UpdateColors
SetMapperFlags
GetTextExtentPoint32W
PlayEnhMetaFile
SetBkMode
shell32
SHGetMalloc
ShellExecuteA
DragFinish
SHGetSpecialFolderLocation
SHAppBarMessage
ExtractIconExA
ExtractIconA
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetFileInfoW
ord155
DragQueryFileW
SHGetFileInfoA
SHBrowseForFolderA
ShellExecuteW
Shell_NotifyIconA
DragAcceptFiles
Shell_NotifyIconW
DragQueryFileA
ole32
OleQueryLinkFromData
StgCreateDocfile
OleRun
ReadClassStg
CoTaskMemFree
OleQueryCreateFromData
CoRevokeClassObject
CoCopyProxy
WriteClassStm
CLSIDFromString
GetClassFile
WriteClassStg
SetConvertStg
OleDuplicateData
CoMarshalInterThreadInterfaceInStream
StringFromGUID2
CoInitializeSecurity
CreateDataAdviseHolder
StgIsStorageILockBytes
OleRegGetMiscStatus
WriteFmtUserTypeStg
DoDragDrop
CoTreatAsClass
CoCreateInstance
OleFlushClipboard
CoGetMalloc
CoFreeUnusedLibraries
ReleaseStgMedium
CoDisconnectObject
CreateOleAdviseHolder
CoUninitialize
CoLockObjectExternal
CoRegisterMessageFilter
CoTaskMemAlloc
CoUnmarshalInterface
CoInitializeEx
OleRegEnumVerbs
OleInitialize
CoInitialize
CoSuspendClassObjects
CoRegisterClassObject
CoGetClassObject
CreateStreamOnHGlobal
CoResumeClassObjects
OleSetContainedObject
CoSetProxyBlanket
CoTaskMemRealloc
OleLoadFromStream
ReadFmtUserTypeStg
CreateBindCtx
CreateItemMoniker
OleRegGetUserType
StgOpenStorage
CreateILockBytesOnHGlobal
CoGetInterfaceAndReleaseStream
OleCreateStaticFromData
CreateFileMoniker
StgOpenStorageOnILockBytes
GetRunningObjectTable
OleIsRunning
OleUninitialize
OleSetClipboard
GetHGlobalFromILockBytes
OleCreateFromData
StgCreateDocfileOnILockBytes
OleLoad
OleGetClipboard
StringFromCLSID
CLSIDFromProgID
OleLockRunning
RegisterDragDrop
OleIsCurrentClipboard
advapi32
CryptGetHashParam
QueryServiceStatus
InitializeSecurityDescriptor
RegCloseKey
ControlService
DeleteService
RegDeleteKeyA
CryptReleaseContext
CryptCreateHash
CryptGenRandom
OpenThreadToken
RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
CreateServiceW
CryptAcquireContextA
GetTokenInformation
RegQueryValueW
StartServiceCtrlDispatcherW
LookupPrivilegeValueW
StartServiceW
RegCreateKeyW
RegisterEventSourceA
SetSecurityDescriptorDacl
StartServiceA
RegOpenKeyExW
LookupAccountSidA
RegEnumKeyExA
AllocateAndInitializeSid
RegDeleteValueW
CloseServiceHandle
DeregisterEventSource
RegQueryInfoKeyA
RegCreateKeyA
RegDeleteValueA
CryptHashData
RegCreateKeyExW
OpenProcessToken
FreeSid
RegEnumKeyW
SetFileSecurityA
GetFileSecurityW
RegEnumValueW
RegSetValueExA
RegQueryValueExW
SetFileSecurityW
RegOpenKeyExA
RegSetValueExW
AdjustTokenPrivileges
RegQueryValueA
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExA
RegFlushKey
OpenServiceA
RegEnumKeyExW
RegisterServiceCtrlHandlerW
RegOpenKeyW
LookupPrivilegeValueA
GetUserNameW
comctl32
ImageList_GetImageCount
ImageList_SetOverlayImage
ImageList_Merge
ImageList_Read
ord17
_TrackMouseEvent
ImageList_EndDrag
ImageList_Create
ImageList_Remove
ImageList_DragLeave
ImageList_Duplicate
DestroyPropertySheetPage
ImageList_ReplaceIcon
ImageList_DragEnter
ImageList_GetIconSize
ImageList_Draw
ImageList_Write
InitCommonControlsEx
ImageList_Replace
ImageList_GetIcon
ImageList_GetBkColor
ImageList_SetImageCount
ImageList_DragMove
CreateStatusWindowW
PropertySheetW
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_SetBkColor
PropertySheetA
ImageList_Add
ImageList_GetDragImage
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_Destroy
winmm
mixerSetControlDetails
waveOutClose
waveOutPrepareHeader
timeEndPeriod
timeSetEvent
waveOutGetVolume
waveOutGetNumDevs
waveOutSetPlaybackRate
timeGetTime
waveInGetDevCapsW
waveOutRestart
PlaySoundA
mixerGetDevCapsW
waveInStop
waveOutWrite
waveOutGetErrorTextA
mixerClose
mixerGetLineInfoA
mciSendStringA
mixerGetControlDetailsA
mixerGetNumDevs
timeBeginPeriod
waveOutPause
mixerOpen
waveOutUnprepareHeader
waveOutGetDevCapsA
mixerGetLineControlsA
waveInGetNumDevs
timeKillEvent
waveOutSetVolume
waveInGetDevCapsA
midiOutOpen
midiOutClose
kernel32
FindClose
GetModuleFileNameW
VirtualQuery
InterlockedCompareExchange
GetModuleFileNameA
LoadResource
lstrcmpW
LoadLibraryW
WideCharToMultiByte
GetTempFileNameW
SetEnvironmentVariableA
GetSystemInfo
HeapAlloc
LCMapStringW
lstrcmpA
LeaveCriticalSection
SetFileAttributesA
TlsAlloc
UnhandledExceptionFilter
FindNextFileA
FormatMessageA
SystemTimeToFileTime
GetStringTypeW
SetStdHandle
SetLocalTime
lstrcatA
GetTimeFormatA
OpenMutexA
GetVersion
VirtualProtect
FindFirstFileA
GlobalDeleteAtom
GetCurrentProcess
GetVersionExW
GlobalFlags
HeapValidate
HeapReAlloc
DuplicateHandle
RemoveDirectoryA
CreateFileA
GetLocaleInfoW
CreateEventA
lstrlenA
GetConsoleMode
GetExitCodeThread
SetLastError
IsDBCSLeadByte
GetCurrentThreadId
_lread
CreateFileMappingA
GetCurrentThread
SetUnhandledExceptionFilter
EnumSystemLocalesA
LocalFree
IsValidCodePage
CopyFileW
HeapDestroy
InitializeCriticalSection
VirtualAlloc
SetHandleCount
TlsFree
GetEnvironmentStringsW
TerminateProcess
InterlockedIncrement
FatalAppExitA
MoveFileW
GetVolumeInformationA
GetDiskFreeSpaceExA
LoadLibraryExW
InterlockedExchange
SetFilePointer
FlushFileBuffers
lstrcpynA
GlobalGetAtomNameA
GetUserDefaultLCID
GetLocaleInfoA
GlobalLock
IsDebuggerPresent
EnterCriticalSection
IsBadCodePtr
MultiByteToWideChar
SetEndOfFile
GetProcessVersion
LoadLibraryExA
GetStartupInfoA
GetFileAttributesW
GetProcAddress
ExitProcess
GetDateFormatA
GetLastError
GetFileTime
Sleep
CreateEventW
WritePrivateProfileStringA
IsValidLocale
HeapFree
LocalReAlloc
SuspendThread
GetStringTypeA
RtlUnwind
ConvertDefaultLocale
SetErrorMode
EnumResourceLanguagesA
GetFullPathNameA
TlsGetValue
OutputDebugStringA
HeapCreate
GlobalHandle
CreateDirectoryA
GetLocalTime
GetFileType
GetConsoleOutputCP
GlobalAlloc
GlobalUnlock
GetProcessHeap
OpenEventA
GetDiskFreeSpaceA
GetCommandLineA
CompareStringW
InterlockedDecrement
GetConsoleCP
CreateMutexW
FreeEnvironmentStringsW
GetPrivateProfileStringA
CloseHandle
GetTimeZoneInformation
GetThreadContext
lstrcmpiA
LCMapStringA
GetCurrentDirectoryW
ReadFile
GetTickCount
GetSystemDirectoryA
DeleteFileA
GetVersionExA
LockResource
FreeLibrary
CreateMutexA
GetProfileIntA
GetOEMCP
GetSystemTime
GetPrivateProfileIntA
FileTimeToLocalFileTime
VirtualFree
ReleaseMutex
lstrcpyA
CreateThread
TlsSetValue
GetThreadLocale
GetModuleHandleA
OpenFileMappingA
WriteProfileStringA
WaitForMultipleObjects
GlobalFindAtomA
SetEvent
FreeEnvironmentStringsA
GetStartupInfoW
SizeofResource
GlobalFree
SetConsoleCtrlHandler
SetThreadPriority
WaitForSingleObject
DebugBreak
FindNextFileW
QueryPerformanceFrequency
HeapSize
CompareStringA
GetACP
GetFileInformationByHandle
GetExitCodeProcess
WinExec
IsBadReadPtr
GetEnvironmentStrings
DeleteCriticalSection
GlobalAddAtomA
ResumeThread
QueryPerformanceCounter
lstrcpyW
GetCurrentProcessId
GlobalReAlloc
GetFileSize
GetFileAttributesA
GetSystemTimeAsFileTime
FindFirstFileW
FindResourceW
GetVolumeInformationW
WriteFile
GetDateFormatW
SetupComm
SetPriorityClass
SetFileTime
GetStdHandle
lstrcatW
CreateProcessA
FileTimeToSystemTime
GetCPInfo
GetPrivateProfileStringW
UnmapViewOfFile
GlobalAddAtomW
LoadLibraryA
ExitThread
IsBadWritePtr
CreateProcessW
user32
GetClassNameW
GetMenuState
SetClassLongW
MessageBoxA
GetParent
GetDlgItemInt
GetClassNameA
InsertMenuItemA
DestroyAcceleratorTable
PostQuitMessage
IsWindowVisible
SetMenu
DrawTextW
SetCapture
GetForegroundWindow
GrayStringA
IsWindowEnabled
IsMenu
GetMenu
WaitMessage
GetWindowLongA
BeginPaint
GetWindowTextW
CreateIconIndirect
EmptyClipboard
GetPropA
OemToCharBuffA
SetScrollPos
ReleaseDC
EndDeferWindowPos
RegisterClipboardFormatA
ShowOwnedPopups
SetWindowRgn
PtInRect
GetCapture
UnregisterClassA
EndPaint
SetParent
GetClassInfoExA
SetPropA
GetMessageTime
IsIconic
GetWindowLongW
CloseClipboard
CreatePopupMenu
SetWindowsHookExA
PostThreadMessageA
SetWindowPos
AdjustWindowRectEx
DefDlgProcA
BringWindowToTop
RegisterClassW
LoadMenuW
CharNextW
GetKeyState
GetMessageW
GetNextDlgTabItem
GetScrollRange
GetClassInfoW
ExcludeUpdateRgn
CreateDialogParamA
SetRect
CreateWindowExA
DeleteMenu
SendNotifyMessageA
SetWindowLongA
SetScrollRange
ToAscii
SetCursorPos
DrawFrameControl
LockWindowUpdate
CopyAcceleratorTableA
CheckMenuRadioItem
MapVirtualKeyA
LoadBitmapA
GetMenuItemCount
SetWindowTextA
ShowScrollBar
GetWindowTextLengthA
RegisterWindowMessageA
ExitWindowsEx
ScreenToClient
SetFocus
RegisterWindowMessageW
LoadImageW
GetMessageA
LoadAcceleratorsA
DrawTextA
FrameRect
TranslateMDISysAccel
EqualRect
GetAsyncKeyState
InSendMessage
RemoveMenu
GetScrollPos
WindowFromPoint
CallNextHookEx
ShowWindow
DrawFocusRect
EnableMenuItem
LoadStringA
ScrollWindow
wvsprintfA
PostMessageA
ValidateRect
SetDlgItemInt
WinHelpA
SendMessageA
DrawIconEx
DestroyWindow
RegisterClassA
ModifyMenuA
IntersectRect
SendMessageW
TrackPopupMenuEx
SetWindowTextW
OffsetRect
RegisterClassExA
SetDlgItemTextA
GetPropW
GetWindowPlacement
RegisterClipboardFormatW
GetKeyboardLayoutList
InvalidateRect
MessageBeep
SetClipboardData
CreateDialogParamW
ReuseDDElParam
GetIconInfo
FillRect
GetThreadDesktop
FlashWindow
UpdateWindow
GetSysColor
IsDialogMessageA
GetDlgItemTextW
GetWindowDC
SendDlgItemMessageA
SetWindowContextHelpId
GetClassInfoExW
DefWindowProcA
InflateRect
SetTimer
LoadImageA
DdeConnect
ClientToScreen
GetLastActivePopup
MessageBoxW
LoadIconA
GetMenuStringA
GetClientRect
GetDlgCtrlID
CreateMenu
GrayStringW
GetWindowTextA
DrawEdge
SetMenuItemInfoW
IsRectEmpty
SystemParametersInfoA
GetWindow
GetDCEx
GetSystemMetrics
GetMenuDefaultItem
DispatchMessageA
GetFocus
SetForegroundWindow
InvalidateRgn
TabbedTextOutW
EndDialog
GetUpdateRgn
GetKeyboardState
IsDlgButtonChecked
RemovePropW
TranslateMessage
UnhookWindowsHookEx
MapDialogRect
CreateDialogIndirectParamA
HideCaret
UnpackDDElParam
ShowCaret
SetMenuItemBitmaps
GetKeyNameTextA
CharUpperA
GetScrollInfo
LoadMenuA
GetMessagePos
DestroyCursor
CreateAcceleratorTableW
TrackPopupMenu
GetTopWindow
SetScrollInfo
AppendMenuA
GetDC
CallWindowProcW
IsZoomed
RedrawWindow
GetClassLongA
GetSubMenu
DeferWindowPos
GetCursor
ReleaseCapture
GetMenuItemInfoW
TranslateAcceleratorA
SetWindowLongW
SetPropW
GetClipboardData
GetDesktopWindow
WinHelpW
TabbedTextOutA
FindWindowA
GetDlgItem
PeekMessageA
DrawStateA
wsprintfA
SetDlgItemTextW
IsWindow
CreateDialogIndirectParamW
CreateWindowExW
SetCursor
GetWindowRect
GetClassInfoA
SetActiveWindow
IsChild
PostMessageW
CharNextA
CallWindowProcA
MoveWindow
CopyRect
EnableWindow
GetMenuItemInfoA
DrawTextExA
GetMenuItemID
GetActiveWindow
PeekMessageW
SetRectEmpty
DrawMenuBar
KillTimer
CheckMenuItem
CharLowerW
BeginDeferWindowPos
LoadCursorA
DestroyMenu
GetCursorPos
CopyIcon
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 477KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ