Static task
static1
Behavioral task
behavioral1
Sample
5829ddbd626ae27fccb2f88962226a7be6023fa5effaf5737b82882311a50057.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5829ddbd626ae27fccb2f88962226a7be6023fa5effaf5737b82882311a50057.exe
Resource
win10v2004-20221111-en
General
-
Target
5829ddbd626ae27fccb2f88962226a7be6023fa5effaf5737b82882311a50057
-
Size
2.5MB
-
MD5
01fdc16be236a71c72b6f573d5cb5eb9
-
SHA1
3d8efbaacaa9fa71d9b5930f0dae50c293cdc854
-
SHA256
5829ddbd626ae27fccb2f88962226a7be6023fa5effaf5737b82882311a50057
-
SHA512
35517e1f9376dbef60a1045c07fe2457670440f6c8cd76e361846631ed9585f7c348c7b51a15c0d42239e5f49625d9b213d123ab12da39337c95816e1b1389fa
-
SSDEEP
49152:yDaq4oxkv5ZBERa0djM/OM6kgUMZNe0Ffmk:y94Fv5bERNdj+6kgFe0F
Malware Config
Signatures
Files
-
5829ddbd626ae27fccb2f88962226a7be6023fa5effaf5737b82882311a50057.exe windows x86
852eb711b3f62e74b6793e2906dfecb1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
powrprof
ReadPwrScheme
CanUserWritePwrScheme
SetActivePwrScheme
GetActivePwrScheme
kernel32
GlobalFlags
GetCPInfo
GetOEMCP
SystemTimeToFileTime
SetErrorMode
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileTime
GetCurrentDirectoryA
LocalUnlock
LocalLock
GetTempFileNameA
GetDiskFreeSpaceA
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
TlsFree
CreateThread
TerminateProcess
HeapSize
FatalAppExitA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetCurrentDirectoryA
IsBadCodePtr
SetConsoleCtrlHandler
GetLocaleInfoW
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
FindResourceExA
WaitForMultipleObjects
ReleaseMutex
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DeleteFileA
MoveFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
SetLastError
VirtualProtect
LocalAlloc
FreeResource
GetSystemDefaultLangID
lstrcatA
WinExec
GetFileAttributesA
GetUserDefaultLangID
GetWindowsDirectoryA
lstrcpyA
IsBadReadPtr
FormatMessageA
LocalFree
GetLongPathNameA
LeaveCriticalSection
EnterCriticalSection
SetThreadLocale
lstrcpynA
SetProcessWorkingSetSize
VirtualLock
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiW
GetVersion
DeleteCriticalSection
InitializeCriticalSection
RaiseException
MultiByteToWideChar
GlobalMemoryStatus
OpenProcess
GetLocalTime
GetModuleFileNameA
GetCurrentProcessId
InterlockedDecrement
InterlockedIncrement
GetFileSize
ReadFile
SetFilePointer
QueryPerformanceFrequency
QueryPerformanceCounter
WriteFile
GetSystemDirectoryA
QueryDosDeviceA
CreateEventA
ResetEvent
WaitForSingleObject
lstrcmpiA
GetModuleHandleA
GetProcAddress
GetLastError
GetLogicalDrives
GetDriveTypeA
DeviceIoControl
CreateFileA
CloseHandle
lstrlenW
GetCurrentProcess
SetPriorityClass
HeapAlloc
GetProcessHeap
HeapFree
Sleep
GlobalSize
GlobalReAlloc
GlobalFree
LoadLibraryA
FreeLibrary
GetTickCount
GetSystemTime
GetTempPathA
CopyFileA
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
ExitThread
user32
LockWindowUpdate
SetParent
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
DestroyMenu
GetMenuItemInfoA
GetMessageA
ValidateRect
MapVirtualKeyA
GetKeyNameTextA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
CheckMenuItem
GetMenuCheckMarkDimensions
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
RemovePropA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
SetWindowPlacement
DefWindowProcA
IntersectRect
EndPaint
BeginPaint
UnhookWindowsHookEx
GetMenuState
InsertMenuA
GetWindowTextLengthA
ScrollWindowEx
MoveWindow
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
ShowWindow
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
SetFocus
GetDlgItem
LoadStringA
SetWindowTextA
WaitForInputIdle
GetDesktopWindow
GetDlgCtrlID
GetWindowTextA
IsDialogMessageA
GetDCEx
MapDialogRect
MessageBeep
CopyIcon
DestroyCursor
DrawFocusRect
SetRectEmpty
WinHelpA
DestroyIcon
PostMessageA
AdjustWindowRect
SystemParametersInfoA
IsWindow
DestroyWindow
SetRect
GetSysColorBrush
CopyRect
IsMenu
GetClassNameA
GetWindow
RegisterWindowMessageA
GetFocus
ScreenToClient
DrawEdge
FillRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnregisterClassA
CharUpperW
CharUpperA
CharLowerW
CharLowerA
RemoveMenu
SetCursor
RedrawWindow
UpdateWindow
GetDialogBaseUnits
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
TranslateMessage
MessageBoxA
wsprintfA
DrawStateA
LoadImageA
GetKeyState
LoadCursorA
IsIconic
GetSystemMenu
GetMenu
ModifyMenuA
GetMenuStringA
GetMenuItemID
GetMenuItemCount
EnableMenuItem
AppendMenuA
DrawIcon
LoadBitmapA
SetPropA
PostThreadMessageA
UnionRect
RegisterClipboardFormatA
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
SetMenu
TranslateAcceleratorA
ClientToScreen
ReleaseCapture
SetCapture
SetWindowLongA
GetWindowDC
DrawFrameControl
DrawIconEx
CallWindowProcA
InflateRect
PtInRect
OffsetRect
GetWindowLongA
GetSystemMetrics
SetWindowPos
GetPropA
ReleaseDC
GetDC
IsRectEmpty
GetCursorPos
TrackPopupMenu
KillTimer
GetTabbedTextExtentA
IsClipboardFormatAvailable
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
IsWindowVisible
CharNextA
SetTimer
LoadMenuA
GetSubMenu
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetSysColor
GetClientRect
LoadIconA
EnableWindow
GetParent
InvalidateRect
GetWindowRect
SendMessageA
DeleteMenu
WaitMessage
GetWindowThreadProcessId
IsChild
WindowFromPoint
IsWindowEnabled
GetWindowPlacement
gdi32
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
GetTextFaceA
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
CreateBitmap
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
GetDCOrgEx
PatBlt
SetRectRgn
GetMapMode
DPtoLP
SetWindowOrgEx
EnumFontFamiliesExA
GetTextColor
GetRgnBox
GetCharWidthA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
StretchDIBits
CreateFontA
CreateRectRgn
Escape
ExtTextOutA
RectVisible
PtVisible
GetCurrentObject
GetBkColor
DeleteDC
GetStockObject
MoveToEx
LineTo
Polygon
SetTextColor
SetPixel
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetStretchBltMode
SetROP2
SetTextJustification
SetPolyFillMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
SetBkMode
GetTextExtentPoint32A
SetTextAlign
TextOutA
Rectangle
SelectObject
CreateFontIndirectA
GetTextMetricsA
CreateSolidBrush
Ellipse
SetBkColor
CreatePen
CreateRectRgnIndirect
CombineRgn
GetSystemPaletteEntries
GetDIBits
GetBitmapBits
DeleteObject
BitBlt
RealizePalette
CreateCompatibleDC
CreatePalette
GetObjectA
CreateCompatibleBitmap
GetTextExtentPointA
comdlg32
PrintDlgA
ChooseColorA
PageSetupDlgA
FindTextA
ReplaceTextA
GetFileTitleA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
ClosePrinter
GetJobA
OpenPrinterA
DocumentPropertiesA
advapi32
RegQueryValueExA
RegCloseKey
RegEnumKeyA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyExA
RegSetValueA
RegOpenKeyA
RegCreateKeyA
SetFileSecurityA
GetFileSecurityA
RegOpenKeyExA
shell32
DragFinish
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetMalloc
ShellExecuteA
SHGetFileInfoA
DragQueryFileA
SHGetPathFromIDListA
ExtractIconA
ShellExecuteExA
comctl32
ImageList_Draw
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_GetBkColor
ImageList_GetImageInfo
ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord13
ImageList_Read
ImageList_Write
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Duplicate
ImageList_AddMasked
ImageList_DrawIndirect
shlwapi
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathIsUNCA
PathFileExistsA
PathFindFileNameA
oledlg
ord8
ole32
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CreateBindCtx
CoTreatAsClass
StringFromCLSID
StringFromGUID2
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
ReadClassStg
OleRun
oleaut32
VariantInit
SysStringLen
LoadTypeLi
OleCreateFontIndirect
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarDateFromStr
SysReAllocStringLen
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
wininet
InternetCanonicalizeUrlA
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 220KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.drdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE