Static task
static1
Behavioral task
behavioral1
Sample
a1e83d90157bc2cc5200f937184d7fc19aa1889a52005893366a4f25e5fb8d6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1e83d90157bc2cc5200f937184d7fc19aa1889a52005893366a4f25e5fb8d6c.exe
Resource
win10v2004-20220812-en
General
-
Target
a1e83d90157bc2cc5200f937184d7fc19aa1889a52005893366a4f25e5fb8d6c
-
Size
86KB
-
MD5
e850c27521430887a25efc605f910d7d
-
SHA1
4e7b93df60c4f7a43fbb89263d030837d6fd1e84
-
SHA256
a1e83d90157bc2cc5200f937184d7fc19aa1889a52005893366a4f25e5fb8d6c
-
SHA512
60ca044b8b3546aa9cc77501bf878b73464e87a8c740e29962a192420dd2441ea559dcd00429340f2426cf6521f7d02bcfabb8358c7a9b45071f677ea388c804
-
SSDEEP
1536:QMiK1TSjYBRq3ykyfIyjF1tMji3lmdYNb1NkCnEF/tAPmcmhbcl:Q+1TMdX61WjJdGb1eCnEFIQY
Malware Config
Signatures
Files
-
a1e83d90157bc2cc5200f937184d7fc19aa1889a52005893366a4f25e5fb8d6c.exe windows x86
e32a0a80d1e724491bcf2f727f9b2316
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassW
UnregisterHotKey
CharNextA
GetMessageW
SwitchDesktop
LoadMenuA
FrameRect
SetWindowsHookW
GetListBoxInfo
SetMenuInfo
UnpackDDElParam
ModifyMenuA
DefDlgProcA
GetClipboardData
DefWindowProcA
GetMenuItemID
GetClientRect
EnableScrollBar
DdeInitializeA
DdeAccessData
EditWndProc
SetProcessDefaultLayout
FlashWindow
GetScrollRange
DlgDirSelectExW
DrawFocusRect
GetMonitorInfoW
LoadCursorFromFileA
DlgDirListComboBoxW
CloseDesktop
GetSubMenu
CharUpperW
OpenClipboard
ChangeDisplaySettingsExA
RegisterClipboardFormatW
RegisterClassExA
DdeDisconnectList
DlgDirSelectExA
CharPrevExA
MonitorFromWindow
GetUserObjectSecurity
TrackPopupMenuEx
LoadBitmapA
CreateIconFromResource
EnumDisplayMonitors
DdeUnaccessData
GetMenuInfo
SetRect
AppendMenuA
SetCursorPos
RedrawWindow
GetCaretBlinkTime
ChangeDisplaySettingsW
GrayStringW
SendInput
CreateDialogParamW
GetLastActivePopup
GetMessageA
GetUpdateRect
DispatchMessageA
AnimateWindow
PeekMessageW
GetCapture
CallWindowProcW
DdeInitializeW
CreateIcon
SendMessageW
GetClipboardOwner
GetPropA
EnumDisplaySettingsW
ValidateRect
LoadMenuW
SetClipboardData
SetTimer
DdeQueryConvInfo
UnionRect
GetUserObjectInformationW
LoadImageW
FindWindowExA
DdeSetUserHandle
InsertMenuItemA
GetInputDesktop
RemovePropW
TileChildWindows
CharLowerA
InSendMessage
GetMenuItemCount
CharLowerW
CreateCaret
IsDialogMessageW
SetUserObjectInformationW
IsDialogMessageA
EnumPropsW
ToUnicodeEx
SetWindowWord
SetMessageQueue
SetShellWindow
WaitForInputIdle
ChangeMenuW
DrawTextA
GetProcessDefaultLayout
CreateDialogIndirectParamW
ChangeMenuA
ModifyMenuW
SetWinEventHook
TabbedTextOutW
CopyAcceleratorTableW
SetPropA
GetClipboardSequenceNumber
DdeImpersonateClient
FillRect
SetWindowsHookExW
MessageBeep
WindowFromPoint
DragObject
TranslateAcceleratorA
InternalGetWindowText
ExitWindowsEx
EndMenu
DdeClientTransaction
CreateAcceleratorTableA
CheckMenuRadioItem
SetMenuItemBitmaps
IsCharAlphaNumericW
GetQueueStatus
DlgDirListComboBoxA
shlwapi
PathParseIconLocationW
SHSetValueW
PathFindExtensionW
PathAppendA
UrlEscapeW
wvnsprintfA
SHCreateStreamOnFileA
PathCompactPathW
SHRegGetBoolUSValueW
StrRetToBufA
PathCompactPathA
SHRegGetUSValueA
PathIsURLW
SHCopyKeyA
SHGetValueW
PathIsDirectoryEmptyW
UrlApplySchemeA
SHRegQueryInfoUSKeyA
UrlIsNoHistoryA
ChrCmpIW
PathRemoveBlanksA
PathIsSameRootA
SHDeleteEmptyKeyA
PathGetDriveNumberW
StrStrIA
PathIsRootA
PathGetCharTypeW
HashData
PathAddBackslashW
StrDupA
StrCmpNW
wnsprintfW
PathMakeSystemFolderA
PathUnmakeSystemFolderA
SHEnumKeyExW
StrStrW
StrRChrW
StrTrimA
StrFromTimeIntervalA
SHGetValueA
UrlGetPartA
SHRegEnumUSValueW
PathStripPathA
SHSetThreadRef
SHRegQueryUSValueW
SHRegDeleteEmptyUSKeyA
AssocQueryStringByKeyW
UrlHashA
PathIsLFNFileSpecW
UrlCreateFromPathW
SHQueryValueExW
SHEnumValueW
PathStripToRootW
SHRegSetUSValueW
UrlCanonicalizeW
PathRemoveArgsA
PathIsFileSpecW
StrIsIntlEqualA
StrFormatKBSizeW
SHQueryValueExA
PathQuoteSpacesA
SHGetThreadRef
AssocQueryKeyA
PathMakePrettyW
wvnsprintfW
StrSpnA
PathMatchSpecW
PathBuildRootA
StrToIntA
StrCmpNIW
StrStrA
PathIsDirectoryA
SHAutoComplete
PathIsSystemFolderA
PathRemoveBackslashW
SHRegCreateUSKeyW
ColorAdjustLuma
SHEnumKeyExA
UrlCanonicalizeA
PathIsFileSpecA
StrCatBuffW
PathIsRelativeA
SHDeleteValueW
SHQueryInfoKeyW
UrlIsW
PathCommonPrefixA
SHQueryInfoKeyA
PathUnmakeSystemFolderW
PathRelativePathToW
SHRegOpenUSKeyA
SHOpenRegStreamW
PathFindFileNameA
StrCSpnIA
StrToIntExW
StrRetToStrA
StrFormatKBSizeA
PathRemoveExtensionA
PathCompactPathExA
StrRStrIA
PathStripToRootA
SHRegDeleteUSValueA
SHRegWriteUSValueA
StrChrW
PathIsUNCServerShareW
PathSkipRootA
SHDeleteKeyW
StrChrIA
UrlCompareW
PathCommonPrefixW
SHOpenRegStream2A
UrlCompareA
advapi32
SetThreadToken
ObjectCloseAuditAlarmW
RegCloseKey
GetNumberOfEventLogRecords
GetSecurityInfoExW
EqualSid
CryptDuplicateKey
SetFileSecurityW
GetNamedSecurityInfoW
LookupAccountNameW
AbortSystemShutdownW
CryptEnumProviderTypesA
GetMultipleTrusteeOperationW
AreAnyAccessesGranted
GetKernelObjectSecurity
RegQueryMultipleValuesW
DuplicateToken
SetEntriesInAuditListA
QueryServiceStatus
BuildImpersonateExplicitAccessWithNameW
InitializeAcl
SetServiceObjectSecurity
RegDeleteKeyA
SetSecurityInfoExW
RegQueryValueW
GetTrusteeTypeA
GetOverlappedAccessResults
GetUserNameW
UnlockServiceDatabase
GetTrusteeNameW
CryptEnumProviderTypesW
GetSidSubAuthorityCount
ReadEventLogW
PrivilegedServiceAuditAlarmW
CancelOverlappedAccess
ConvertSecurityDescriptorToAccessNamedW
OpenServiceA
SetNamedSecurityInfoExW
CryptVerifySignatureW
CryptDestroyKey
RegSaveKeyA
CryptSetProviderA
CryptHashData
SetNamedSecurityInfoExA
OpenThreadToken
AbortSystemShutdownA
CreatePrivateObjectSecurity
GetExplicitEntriesFromAclA
SetEntriesInAclA
GetNamedSecurityInfoExA
SetSecurityInfoExA
GetServiceKeyNameA
ObjectCloseAuditAlarmA
BuildImpersonateTrusteeW
RegisterEventSourceW
ConvertSecurityDescriptorToAccessNamedA
GetFileSecurityW
CreateServiceW
NotifyBootConfigStatus
GetFileSecurityA
AccessCheckAndAuditAlarmW
BuildImpersonateTrusteeA
RegOpenKeyA
InitializeSid
RegReplaceKeyW
ReadEventLogA
CryptExportKey
StartServiceCtrlDispatcherA
QueryServiceConfigW
SetTokenInformation
EnumDependentServicesA
MapGenericMask
PrivilegeCheck
GetUserNameA
RegFlushKey
RegLoadKeyW
CryptSignHashW
OpenProcessToken
RegGetKeySecurity
QueryServiceObjectSecurity
BuildExplicitAccessWithNameA
InitiateSystemShutdownW
DestroyPrivateObjectSecurity
CryptSetKeyParam
SetSecurityDescriptorOwner
CreateServiceA
RegEnumKeyW
GetEffectiveRightsFromAclW
CryptGetDefaultProviderA
LockServiceDatabase
AccessCheck
ChangeServiceConfigW
CryptAcquireContextA
ObjectPrivilegeAuditAlarmA
BuildImpersonateExplicitAccessWithNameA
ReportEventA
SetSecurityInfo
GetPrivateObjectSecurity
AddAccessAllowedAce
BuildExplicitAccessWithNameW
BackupEventLogA
SetSecurityDescriptorGroup
ObjectPrivilegeAuditAlarmW
QueryServiceLockStatusW
EqualPrefixSid
CryptAcquireContextW
DeleteService
CryptSetProvParam
StartServiceA
RegSetValueA
LookupPrivilegeDisplayNameW
CreateProcessAsUserW
ConvertSecurityDescriptorToAccessA
ole32
CoFileTimeToDosDateTime
CoCreateFreeThreadedMarshaler
OleRegEnumVerbs
UtConvertDvtd32toDvtd16
OleCreate
ReadFmtUserTypeStg
OleCreateLinkFromData
OleFlushClipboard
OleBuildVersion
OleCreateLinkToFile
StgGetIFillLockBytesOnFile
UtGetDvtd16Info
CoRegisterClassObject
CreateILockBytesOnHGlobal
StgOpenStorageEx
OleIsCurrentClipboard
StgCreateDocfile
WriteFmtUserTypeStg
EnableHookObject
OleSetContainedObject
OleGetAutoConvert
CoIsHandlerConnected
CoTreatAsClass
CoGetPSClsid
OleSave
OleCreateLinkToFileEx
OleDraw
CreateAntiMoniker
OleCreateLink
OleCreateEx
IsEqualGUID
OleLockRunning
DllDebugObjectRPCHook
OleSetClipboard
StringFromGUID2
ProgIDFromCLSID
CoGetCallerTID
IIDFromString
GetHookInterface
CoCreateInstanceEx
OleCreateMenuDescriptor
CoFreeAllLibraries
CreateFileMoniker
CreateOleAdviseHolder
OleQueryLinkFromData
CLSIDFromProgID
CreateBindCtx
UtGetDvtd32Info
CoMarshalInterface
CoSwitchCallContext
OleSetAutoConvert
DoDragDrop
CoCreateInstance
ReadClassStm
CoMarshalHresult
CoReleaseServerProcess
CoGetClassObject
GetHGlobalFromStream
GetConvertStg
OleDoAutoConvert
StgCreateStorageEx
CreateGenericComposite
RegisterDragDrop
OleGetClipboard
StgOpenAsyncDocfileOnIFillLockBytes
CoImpersonateClient
CoRegisterChannelHook
CoGetInstanceFromIStorage
OleCreateLinkEx
OleSaveToStream
OleLoadFromStream
ReleaseStgMedium
CoGetCurrentLogicalThreadId
CoRegisterSurrogate
CoBuildVersion
CreateDataAdviseHolder
CoMarshalInterThreadInterfaceInStream
CoQueryProxyBlanket
StgCreateDocfileOnILockBytes
FreePropVariantArray
CoGetTreatAsClass
CoCreateGuid
OleCreateStaticFromData
OpenOrCreateStream
CLSIDFromString
MonikerCommonPrefixWith
OleCreateFromFileEx
WriteOleStg
GetDocumentBitStg
CreateObjrefMoniker
StringFromIID
CoRegisterPSClsid
GetClassFile
OleNoteObjectVisible
CoGetInstanceFromFile
ReadStringStream
OleDuplicateData
CoGetObject
OleRegGetMiscStatus
kernel32
GetSystemTime
GetStdHandle
WriteConsoleInputA
LoadLibraryA
GetPrivateProfileIntW
OpenEventA
GetNamedPipeHandleStateW
OpenMutexA
DosDateTimeToFileTime
WritePrivateProfileStructW
FindResourceExA
DebugActiveProcess
GetLogicalDriveStringsA
SetCurrentDirectoryW
LocalReAlloc
SetVolumeLabelW
GetCurrentDirectoryA
QueryDosDeviceW
EnumResourceTypesA
EnumResourceLanguagesW
GetThreadPriorityBoost
GlobalFree
GetLocaleInfoW
GlobalCompact
FlushFileBuffers
OpenMutexW
GetEnvironmentStrings
FindFirstFileExW
FoldStringA
FillConsoleOutputAttribute
SetConsoleCP
GetDiskFreeSpaceA
GlobalLock
VirtualAlloc
WriteProfileSectionW
WriteConsoleOutputW
SetProcessWorkingSetSize
GetNumberFormatW
SetEnvironmentVariableA
lstrcatW
SetConsoleScreenBufferSize
MultiByteToWideChar
TerminateThread
GetBinaryTypeW
SetCommBreak
FindResourceA
FindCloseChangeNotification
GlobalFlags
GetStartupInfoW
DeleteFileA
GetPriorityClass
GetPrivateProfileSectionNamesW
GetModuleHandleA
SetThreadPriority
SetLocaleInfoW
CreateTapePartition
FindFirstChangeNotificationW
GetFullPathNameA
GetCPInfo
GetConsoleOutputCP
CreateMailslotA
FindResourceExW
lstrlenA
EnumTimeFormatsW
EnumResourceLanguagesA
WriteConsoleInputW
WaitCommEvent
SetNamedPipeHandleState
GetProcessTimes
EnumDateFormatsExA
Heap32Next
CreateDirectoryA
SetCalendarInfoA
GetQueuedCompletionStatus
GetConsoleScreenBufferInfo
SetConsoleTitleW
VirtualProtect
BackupSeek
GetNamedPipeInfo
FindFirstChangeNotificationA
ConnectNamedPipe
GetTimeZoneInformation
SwitchToFiber
GetCalendarInfoA
GlobalDeleteAtom
GetACP
lstrlen
SetFileAttributesW
PulseEvent
GetNamedPipeHandleStateA
GetProcessAffinityMask
SearchPathA
SearchPathW
VirtualFree
IsBadStringPtrW
GetHandleInformation
FreeResource
FatalExit
FindAtomW
EscapeCommFunction
EndUpdateResourceA
CreateEventW
GetProcessPriorityBoost
GetAtomNameA
FillConsoleOutputCharacterW
SetDefaultCommConfigW
GetThreadLocale
Beep
lstrcmpi
UnlockFile
GetVersionExW
QueryDosDeviceA
SetFileApisToANSI
GetProcessWorkingSetSize
GetSystemTimeAdjustment
Toolhelp32ReadProcessMemory
lstrcat
CompareStringW
GetProfileStringW
CreateThread
WaitForSingleObject
GlobalAlloc
ReleaseSemaphore
lstrcpynW
GetConsoleTitleW
Heap32First
WaitForDebugEvent
DeviceIoControl
GetLongPathNameA
WriteConsoleOutputCharacterA
GetProcAddress
SetConsoleWindowInfo
GetCompressedFileSizeW
Heap32ListFirst
GlobalFindAtomW
Thread32First
ReleaseMutex
GetExitCodeThread
DebugBreak
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 238B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE