Static task
static1
Behavioral task
behavioral1
Sample
a852848f3db1781c365901641fe6778a1743ff265498615d4acfcf1b5a7e216a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a852848f3db1781c365901641fe6778a1743ff265498615d4acfcf1b5a7e216a.exe
Resource
win10v2004-20220812-en
General
-
Target
a852848f3db1781c365901641fe6778a1743ff265498615d4acfcf1b5a7e216a
-
Size
892KB
-
MD5
68b31f9227f8fa3997bca219b736f52a
-
SHA1
afdba5197d06832be47dd55aac618b43c2f15601
-
SHA256
a852848f3db1781c365901641fe6778a1743ff265498615d4acfcf1b5a7e216a
-
SHA512
17036be4eaca1622e182c461829c88e7ef3563b5e0e99d1eccae67421d29587daea49d35ef676b0a245424433481c0ce33ec34caf03a56347fe6cc9c8ddcd2ea
-
SSDEEP
12288:UPnlXmizNrmDKxORZnGFrzFL6bDpf4eTTBqC5jkOUzK9Y2rsn0NVXm5uYhr53P:YIRZGRJLaVf4AFh5Yz9m20Tm5uYrP
Malware Config
Signatures
Files
-
a852848f3db1781c365901641fe6778a1743ff265498615d4acfcf1b5a7e216a.exe windows x86
63ff6f8bdc0b0162f1a6dbd9ea39489a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord1576
shlwapi
StrCpyW
PathIsUNCW
PathFindExtensionW
UrlCreateFromPathW
StrStrIW
PathFileExistsW
StrCmpW
PathRemoveBackslashW
UrlCanonicalizeW
StrCmpIW
PathIsFileSpecW
PathIsDirectoryW
PathRemoveFileSpecW
PathAddBackslashW
PathStripToRootW
PathCreateFromUrlW
PathIsURLW
PathCanonicalizeW
UrlIsW
PathFindFileNameW
oleaut32
LoadTypeLi
comdlg32
GetFileTitleA
FindTextA
CommDlgExtendedError
ChooseColorA
PrintDlgA
GetOpenFileNameA
ReplaceTextA
ChooseFontA
GetSaveFileNameA
ole32
GetClassFile
StringFromGUID2
OleTranslateAccelerator
OleCreateLinkToFile
CoGetClassObject
IsAccelerator
CoLockObjectExternal
CreateBindCtx
CoSetProxyBlanket
StgCreateDocfile
OleCreateFromData
WriteClassStm
StgCreateDocfileOnILockBytes
OleFlushClipboard
GetRunningObjectTable
RevokeDragDrop
StgOpenStorageOnILockBytes
OleSave
OleGetClipboard
StringFromCLSID
OleIsRunning
CoTaskMemAlloc
OleInitialize
OleCreateFromFile
CoMarshalInterThreadInterfaceInStream
GetHGlobalFromILockBytes
CreateOleAdviseHolder
OleGetIconOfClass
CoQueryProxyBlanket
CoCreateInstance
WriteClassStg
CoRevokeClassObject
ReleaseStgMedium
CoRegisterMessageFilter
RegisterDragDrop
OleCreateMenuDescriptor
OleLockRunning
CLSIDFromString
StgOpenStorage
CoTaskMemFree
OleDestroyMenuDescriptor
StgIsStorageILockBytes
CreateStreamOnHGlobal
CLSIDFromProgID
CoUninitialize
OleSetContainedObject
OleSetMenuDescriptor
CoInitialize
CreateFileMoniker
OleRun
OleUninitialize
CoRegisterClassObject
OleCreateLinkFromData
CreateDataAdviseHolder
ReadClassStg
CoFreeUnusedLibraries
OleDuplicateData
CoInitializeEx
DoDragDrop
OleCreate
CoGetMalloc
CoDisconnectObject
OleRegGetUserType
CoTaskMemRealloc
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
OleSetClipboard
user32
DestroyAcceleratorTable
InsertMenuItemA
SetMenu
CreateMenu
OpenClipboard
RegisterClassW
SetCursorPos
TranslateMessage
WaitForInputIdle
SetPropA
GetMenuItemID
GetParent
FrameRect
EndPaint
GetQueueStatus
RegisterClipboardFormatA
MapDialogRect
GetMenu
GetKeyState
GetMenuState
GetMessagePos
SetForegroundWindow
CheckMenuItem
HideCaret
GetSystemMenu
GetWindowThreadProcessId
GetCapture
IsWindow
RegisterClassA
SetRectEmpty
GetIconInfo
DrawTextA
DefWindowProcA
CopyAcceleratorTableW
GetSystemMetrics
BeginDeferWindowPos
DrawMenuBar
MapVirtualKeyA
RegisterClassExA
CharUpperW
GetClientRect
SetDlgItemTextW
CloseWindow
LoadCursorA
SendNotifyMessageA
CallNextHookEx
EndDialog
IsWindowVisible
ScreenToClient
SendMessageW
DrawIcon
UnregisterClassA
GetMessageTime
EnableMenuItem
GetCursorPos
GetKeyNameTextA
UnhookWindowsHookEx
DestroyCaret
LoadIconW
GetTopWindow
CopyIcon
SetWindowRgn
MessageBoxW
GetNextDlgTabItem
GetDC
GetKeyboardState
LoadBitmapA
LoadStringA
GetClipboardFormatNameA
FindWindowExA
SetParent
ValidateRect
IsChild
LoadIconA
RemoveMenu
GetClassInfoExA
SetMenuItemBitmaps
SetActiveWindow
SendDlgItemMessageA
FlashWindow
AppendMenuW
SetWindowsHookExW
KillTimer
TrackPopupMenu
LoadImageA
ShowScrollBar
GetMessageW
GetClassNameW
SetScrollPos
ChildWindowFromPoint
GetScrollInfo
CharLowerW
WinHelpA
SetClipboardViewer
GetUpdateRgn
BringWindowToTop
DrawStateA
InsertMenuItemW
ClipCursor
WindowFromPoint
TabbedTextOutA
GetWindowTextW
MoveWindow
GetDlgItem
LoadBitmapW
SetWindowLongW
GetWindowTextA
SetWindowPlacement
SetWindowPos
EnableWindow
CreateDialogParamA
InflateRect
CopyAcceleratorTableA
IsWindowUnicode
GetPropW
GetSysColorBrush
GetActiveWindow
BeginPaint
IsRectEmpty
IsZoomed
SetWindowContextHelpId
SendMessageA
AdjustWindowRectEx
SetScrollInfo
ShowOwnedPopups
DispatchMessageA
CopyRect
wsprintfA
MapWindowPoints
InvertRect
AppendMenuA
GetWindowPlacement
GetWindowLongW
DeleteMenu
ReplyMessage
SetFocus
LockWindowUpdate
CreatePopupMenu
ReleaseDC
DrawIconEx
SetDlgItemTextA
GetNextDlgGroupItem
IsMenu
DestroyCursor
PostMessageA
SetWindowLongA
GetMenuCheckMarkDimensions
DestroyIcon
ShowCaret
GetMessageA
RemovePropA
CreateIconFromResourceEx
wvsprintfA
ToAscii
IntersectRect
IsCharLowerA
UpdateWindow
GetWindowDC
EmptyClipboard
GetFocus
DefWindowProcW
SetCapture
SetCursor
CreateWindowExA
GetWindow
SetMenuDefaultItem
SetWindowTextA
CheckMenuRadioItem
DrawFocusRect
GrayStringA
OffsetRect
CreateWindowExW
UnregisterClassW
FillRect
IsDlgButtonChecked
GetClassLongA
ScrollWindowEx
DeferWindowPos
GetWindowTextLengthA
EndDeferWindowPos
GetClassLongW
ReleaseCapture
CheckDlgButton
LoadCursorW
GetMenuStringA
SetTimer
InvalidateRect
GetWindowLongA
CreateDialogIndirectParamA
IsDialogMessageW
GetForegroundWindow
GetLastActivePopup
UnpackDDElParam
CallWindowProcA
RegisterWindowMessageA
GetSysColor
CloseClipboard
IsWindowEnabled
ReuseDDElParam
GetDesktopWindow
SetWindowsHookExA
GetClassInfoA
SetScrollRange
LoadAcceleratorsA
SendMessageTimeoutW
GetScrollPos
ClientToScreen
ExitWindowsEx
MessageBeep
GetDlgCtrlID
GetClassNameA
PtInRect
RedrawWindow
SetRect
CharNextW
TranslateAcceleratorW
GetScrollRange
ModifyMenuA
DestroyMenu
GetSubMenu
GetWindowRgn
GetMenuItemRect
ShowWindow
PostThreadMessageW
SystemParametersInfoA
GetTabbedTextExtentA
UnionRect
GetDlgItemInt
GetWindowTextLengthW
IsIconic
CharNextA
wsprintfW
GetMenuItemCount
RemovePropW
CharUpperA
SetWindowTextW
GetPropA
DestroyWindow
MessageBoxA
GetWindowRect
PeekMessageA
MsgWaitForMultipleObjects
InsertMenuW
AdjustWindowRect
comctl32
ImageList_Remove
ImageList_SetBkColor
ImageList_Destroy
ImageList_DragLeave
CreateStatusWindowW
PropertySheetW
InitCommonControlsEx
ImageList_GetDragImage
ImageList_AddMasked
ImageList_Merge
ImageList_Write
ImageList_GetImageCount
ImageList_EndDrag
ord17
ImageList_DragMove
ImageList_Create
DestroyPropertySheetPage
ImageList_Add
ImageList_ReplaceIcon
PropertySheetA
ImageList_LoadImageA
ImageList_DrawEx
ImageList_GetBkColor
CreatePropertySheetPageA
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_Draw
_TrackMouseEvent
ImageList_GetIcon
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_Read
ImageList_SetImageCount
kernel32
MoveFileA
GetModuleFileNameW
WaitForMultipleObjects
GetPrivateProfileStringA
GetCurrentThreadId
GetEnvironmentStrings
GetTempPathA
GetDateFormatA
GetDriveTypeA
GetTickCount
OutputDebugStringW
HeapSize
IsBadWritePtr
HeapDestroy
GetOEMCP
TlsSetValue
Sleep
FreeEnvironmentStringsA
FileTimeToSystemTime
OutputDebugStringA
SetStdHandle
CloseHandle
MulDiv
SetFileAttributesA
CopyFileA
GlobalHandle
GetFileType
GetPrivateProfileIntA
TlsGetValue
DeleteFileW
SetErrorMode
SetEvent
DebugBreak
ResumeThread
GlobalDeleteAtom
WaitForSingleObject
LoadLibraryA
GetProcessHeap
GetEnvironmentStringsW
CreateMutexA
_lclose
DuplicateHandle
IsBadReadPtr
WriteFile
GlobalAlloc
GetDateFormatW
CreateDirectoryW
GetLastError
SystemTimeToFileTime
SetFilePointer
CreateEventA
GetFileTime
DeleteFileA
GetLocaleInfoA
GetProcessVersion
FreeConsole
lstrlenA
GetCurrentProcessId
SetHandleCount
SetEndOfFile
GetSystemTime
IsValidLocale
FindResourceW
_lread
GetWindowsDirectoryW
GetStartupInfoA
GetCurrentThread
HeapFree
CreateFileW
TlsAlloc
GetACP
FindFirstFileW
SetEnvironmentVariableA
IsDebuggerPresent
FindResourceA
CreateEventW
LocalReAlloc
RemoveDirectoryA
FindNextFileW
GetModuleHandleA
MultiByteToWideChar
EnumSystemLocalesA
GlobalMemoryStatus
ConvertDefaultLocale
GetTimeZoneInformation
FindFirstFileA
UnhandledExceptionFilter
InterlockedExchange
HeapCreate
GetVersionExW
GetFileSize
ResetEvent
lstrcatW
FindClose
QueryPerformanceCounter
ReadProcessMemory
GetCPInfo
RaiseException
ReleaseSemaphore
FindNextFileA
FreeLibrary
CreateToolhelp32Snapshot
LoadLibraryExW
GetSystemInfo
GlobalFlags
LCMapStringW
GetVolumeInformationW
lstrcmpW
CreateProcessW
LeaveCriticalSection
FileTimeToLocalFileTime
ExitProcess
RtlUnwind
CreateProcessA
WriteConsoleW
LoadLibraryW
FlushFileBuffers
EnumResourceLanguagesA
HeapValidate
SetConsoleCtrlHandler
GetVolumeInformationA
GetUserDefaultLCID
GetStringTypeA
FreeResource
InterlockedDecrement
LockResource
GetDiskFreeSpaceW
VirtualProtect
SetThreadPriority
InterlockedCompareExchange
FatalAppExitA
SizeofResource
GetSystemTimeAsFileTime
GetShortPathNameA
GetConsoleMode
SetLastError
CompareStringA
GlobalFindAtomA
GetVersionExA
FreeEnvironmentStringsW
TlsFree
LocalAlloc
WritePrivateProfileStringA
SetFileTime
InitializeCriticalSection
GlobalLock
InterlockedIncrement
LCMapStringA
GetFullPathNameA
EnterCriticalSection
GetLogicalDrives
GlobalUnlock
ReadFile
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TerminateProcess
OpenMutexA
GetThreadLocale
WriteConsoleA
GetCurrentProcess
WideCharToMultiByte
LocalFree
GetModuleHandleW
GetCommandLineW
CreateFileMappingA
LoadResource
GetProfileStringA
GetFileAttributesW
IsValidCodePage
VirtualAlloc
CreateFileA
CompareStringW
GetStdHandle
GetProcAddress
GetModuleFileNameA
ExitThread
GetCurrentDirectoryA
GetTimeFormatA
HeapReAlloc
lstrcmpiW
CreateThread
GetLocaleInfoW
GlobalGetAtomNameA
GlobalAddAtomA
VirtualFree
GetCommandLineA
VirtualQuery
FormatMessageA
SetUnhandledExceptionFilter
OpenEventW
CreateSemaphoreA
GetConsoleOutputCP
lstrcatA
GetStartupInfoW
lstrcmpiA
lstrcpynA
GetStringTypeW
HeapAlloc
GetVersion
GetFileAttributesA
GlobalFree
GetConsoleCP
GlobalReAlloc
Sections
.text Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 496KB - Virtual size: 495KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ